last executing test programs: 19.883136122s ago: executing program 3 (id=3536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) 19.394551335s ago: executing program 0 (id=3537): writev(0xffffffffffffffff, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7", 0xc}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) 19.085700265s ago: executing program 0 (id=3539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$kcm(r2, 0x0, 0x4) 18.073964433s ago: executing program 1 (id=3540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noacl}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@nodelalloc}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$eJzs3c9rXEUcAPDv22z6uzaFUlREAj1Yqd00iT8qeKhH0WJB73VJXkPJpluym9LEgu3BXrxIEUSsiHe9eyz+A/4VBS0UKUEPXiJv8zZNk9383Dap7/OBV2Z23mbed+fNdGZnlw2gsAazf0oRL0XE10nEkYhI8rJy5IWDi+fNP7oxlh1JLCx88lfSOi/Lt/9W+3kH88yLEfHblxGnSqvrbczOTVZrtXQ6zw81p64ONWbnTl+eqk6kE+mVkdHRs2+Njrz7ztubimfvGmWvX/jnu4/vfXD2qxPz3/7y4OidJM7FobxseRzbcHN5ZjAG89ekP86tOHG4B5XtJslOXwBb0pf38/7IxoAj0Zf3euD/74uIWAAKKtH/oaDa84D22r5H6+DnxsP3FxdAq+MvL743Evtaa6MD88kTK6NsvTvQg/qzOn798+6d7IjevQ8BsK6btyLiTLm8evxL8vFv685s4JyVdRj/4Nm5l81/3ug0/yktzX+iw/znYIe+uxXr9//Sgx5U01U2/3uv4/x3adNqoC/PHW7N+fqTS5draTa2vRARJ6N/b5Zfaz/n7Pz9hW5ly+d/2ZHV354L5tfxoLxiU2u82qxuJ+blHt6KeLnj/DdZav+kQ/tnr8eFDdZxPL37arey9eN/uhZ+initY/s/3tFK1t6fHGrdD0Ptu2K1v28f/71b/Tsdf9b+B9aOfyBZvl/b2HwdP+77N+1W9kT88UT8Pyye0fn+35N82krvyR+7Xm02p4cj9iQfrX585PFz2/n2+Vn8J0+sPf51uv/3R8RnG4z/9rGfX1kr/vY6fKfaf3xT7b/5xP0PP/++W/3r3P/lxfZ/s5U5mT+4kfFvoxe4zZcPAAAAAAAAdpVSRByKpFRZSpdKlcri5zuOxYFSrd5onrpUn7kyHq3vyg5Ef6m9031k2echhvPPw7bzIyvyoxFxNCK+6dvfylfG6rXxnQ4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/mjb6evDnjq/OQ3FNe6/b8Xv/QE7Er+/4fi0v+huPR/KC79H4pL/4fi0v+huPR/KC79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrqwvnz2bEw/+jGWJYfvzY7M1m/dno8bUxWpmbGKmP16auViXp9opZWxupT6/29Wr1+dXgkZq4PNdNGc6gxO3dxqj5zpXnx8lR1Ir2Y9j+TqAAAAAAAAAAAAAAAAAAAAOD50pidm6zWaun0NhJJbOvpRU8cjl1xGVtNlHfHZUj0OLHTIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPZfAAAA///wGTUB") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) 18.036671086s ago: executing program 3 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 16.508882757s ago: executing program 1 (id=3543): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) setreuid(0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 16.47268447s ago: executing program 3 (id=3544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x366, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x330, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 15.889991219s ago: executing program 4 (id=3545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 15.568400921s ago: executing program 4 (id=3546): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x64000050) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a3100000000090001007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) read$FUSE(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 13.430370233s ago: executing program 4 (id=3549): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000000)=0xe, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x79c4}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x6b12, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000340)={r7, 0x4, 0x4, [0x1, 0x4, 0x51d9, 0xdb2]}, 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r8, &(0x7f0000000280)={{0x3, @default, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r9}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4009, 0x2, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000040)={0x4000, r10}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x238, 0x11, 0x148, 0x238, 0x0, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x9, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x0, 0x31}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x5, 0x2, 0x3, '\x00', 'syz0\x00', {0x81}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) close(r1) 13.200191888s ago: executing program 1 (id=3550): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 9.621291308s ago: executing program 3 (id=3551): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) 9.516405075s ago: executing program 0 (id=3552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 9.465304478s ago: executing program 4 (id=3553): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x1, 0x1, 0x1000000001, 0x2, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 9.205257745s ago: executing program 1 (id=3555): prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) 8.848435489s ago: executing program 4 (id=3557): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40)={0xc, &(0x7f0000000c40)={0x0, 0x38, 0xb7, {0xb7, 0x23, "9eb4ae743f83964c8900e7b917a2f91d62511607b2f2149187f7b593790811c40f0e49f124ef5bb46bc98578133345badc7e698a4a670499067a43ab691043327f3babc1e48dd3a49bbb01c0d0d81f4afd1bd77507ee89de9cb4324237b67ecb75cc33410c708710070e6b66aa4c87c6fb13241072419fdfa327c8200b8ac04ce49a95252f6d0e6f3049f8307a91ddd4ddd44a210bfe1d9514113b82dbcbe93c38bfb6c51a8655f3674187f98ba642616209a6e097"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000f40)={0x1c, &(0x7f0000000d80)={0x40, 0x2c, 0xb, "84767fddff121b222c459e"}, 0x0, 0x0, &(0x7f0000000e80)={0xc0, 0xa1, 0x4, 0x1}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000240)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.53361132s ago: executing program 3 (id=3558): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x4008af21, &(0x7f0000000380)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x110, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xe0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x0) fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) r6 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)=ANY=[]}, &(0x7f0000000600)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x4}, 0x0}) r7 = syz_clone(0x13020000, &(0x7f0000000100)="4ba57e5a6b1968", 0x7, 0x0, &(0x7f00000001c0), &(0x7f0000000640)) ptrace$setopts(0x4200, r7, 0x3, 0x100008) 6.880851201s ago: executing program 0 (id=3560): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) setreuid(0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 6.43772405s ago: executing program 3 (id=3562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$kcm(r2, 0x0, 0x4) 6.385689854s ago: executing program 2 (id=3563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xb, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.218483835s ago: executing program 1 (id=3564): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000240)=@random={'trusted.', '([^#({\x00'}, 0x0, 0x0, 0x0) 6.016512108s ago: executing program 2 (id=3565): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000040)=[{r2, 0x8112}], 0x1, 0x7) 5.909473496s ago: executing program 1 (id=3566): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 3.90531958s ago: executing program 4 (id=3567): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x12140, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r3, 0xa, 0x13) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r6) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r3, 0x400, 0x2) 3.620940599s ago: executing program 0 (id=3568): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 2.54363696s ago: executing program 0 (id=3569): r0 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000002100)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYBLOB="29ddcb5731bd30ccfe31b42bec88d6b180e9734ef8fdff821c550bb722db8eec86c680e37bdff058174add799559b5a87e151d8b63bb4fbea47a175ac769099357b3f6933378cd6b04e2121c63d5dd6525cc877fe7782c404ebd7987eae71011f7897863523be0dc34aa888c0e1c2cfa1f3e826cfc3e2ee0344ab5101f7f9e59c0250bcb1e7214f7ccf208222ff374fa79aa08d36260fcece95794587b4ec2d739805ba2a0b28efd4b50a8603856fcb64e903918e6b6b57f3dcd113a68546df8ab9597d9518a546a7b1ee0169a164aec3b88c0dd5ab24c95e7c97c581675e0bfcca54ab16fb701691a70096d9817c6ed85151105953df57b", @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES16], 0xb, 0x0, &(0x7f0000000000)) 2.54353804s ago: executing program 2 (id=3570): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 1.473341572s ago: executing program 2 (id=3571): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r1) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff0, 0x2400) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) close(r2) 85.151054ms ago: executing program 2 (id=3572): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0xe}, 0x5, 0x0, 0x2e}) 0s ago: executing program 2 (id=3573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x38e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x358, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): 0 [ 758.615356][ T4394] usb 2-1: config 0 descriptor?? [ 759.216466][T15693] 9pnet_fd: Insufficient options for proto=fd [ 761.163658][ T4394] usbhid 2-1:0.0: can't add hid device: -71 [ 761.169710][ T4394] usbhid: probe of 2-1:0.0 failed with error -71 [ 761.254919][ T4394] usb 2-1: USB disconnect, device number 7 [ 764.548230][T15694] device syzkaller0 entered promiscuous mode [ 765.666834][ T4319] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 765.852722][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.868778][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.878759][ T4319] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 765.892944][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.947220][ T4319] usb 4-1: config 0 descriptor?? [ 766.390763][ T4319] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 766.398279][ T4319] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 766.410888][ T4319] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 766.418314][ T4319] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 766.432032][ T4319] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 766.453115][ T4319] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 767.940589][T12363] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 768.775738][ T4394] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 769.607612][ T4319] usb 4-1: USB disconnect, device number 11 [ 769.720444][ T4394] usb 3-1: Using ep0 maxpacket: 16 [ 769.735145][ T4394] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.775032][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 769.800545][ T4394] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 769.835526][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.887068][ T4394] usb 3-1: config 0 descriptor?? [ 769.998268][T15789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 771.615342][T15800] device syzkaller0 entered promiscuous mode [ 772.384374][ T4394] usbhid 3-1:0.0: can't add hid device: -71 [ 772.400635][ T4394] usbhid: probe of 3-1:0.0 failed with error -71 [ 772.418760][ T4394] usb 3-1: USB disconnect, device number 10 [ 772.530088][T15808] random: crng reseeded on system resumption [ 774.739508][T15834] device syzkaller0 entered promiscuous mode [ 774.860801][T13287] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 775.072383][T13287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.090883][T13287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.117941][T13287] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 775.130611][ T4394] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 775.139870][T13287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.168847][T13287] usb 1-1: config 0 descriptor?? [ 775.170382][ T4396] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 775.351794][T15846] netlink: 'syz.2.2728': attribute type 39 has an invalid length. [ 775.451219][ T4394] usb 4-1: Using ep0 maxpacket: 16 [ 775.543273][ T4394] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.555555][ T4394] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.563018][ T4394] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 775.574434][ T4394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.587151][ T4394] usb 4-1: config 0 descriptor?? [ 775.602974][T13287] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 775.626789][T13287] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 775.650598][ T4396] usb 2-1: Using ep0 maxpacket: 32 [ 775.660018][T13287] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 775.676350][T13287] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 775.687251][ T4396] usb 2-1: config 0 has no interfaces? [ 775.707492][T13287] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 775.736281][T13287] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 775.857730][ T4396] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 775.886312][ T4396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.907941][ T4396] usb 2-1: Product: syz [ 775.929116][ T4396] usb 2-1: Manufacturer: syz [ 775.950435][ T4396] usb 2-1: SerialNumber: syz [ 775.966887][ T4396] usb 2-1: config 0 descriptor?? [ 777.080611][ T4319] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 777.129232][ T4396] usb 2-1: USB disconnect, device number 8 [ 777.320479][ T4319] usb 1-1: device descriptor read/64, error -32 [ 778.191588][ T4394] usbhid 4-1:0.0: can't add hid device: -71 [ 778.197947][ T4394] usbhid: probe of 4-1:0.0 failed with error -71 [ 778.223047][ T4394] usb 4-1: USB disconnect, device number 12 [ 778.271050][T13287] usb 1-1: USB disconnect, device number 11 [ 782.900541][ T4396] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 783.861552][ T4396] usb 4-1: Using ep0 maxpacket: 16 [ 783.868790][ T4396] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.898049][ T4396] usb 4-1: config 0 interface 0 has no altsetting 0 [ 783.929627][ T4396] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 783.976475][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.003607][ T4396] usb 4-1: config 0 descriptor?? [ 786.657708][ T4396] usbhid 4-1:0.0: can't add hid device: -71 [ 786.678674][ T4396] usbhid: probe of 4-1:0.0 failed with error -71 [ 786.862285][ T4396] usb 4-1: USB disconnect, device number 13 [ 787.846227][T15947] syz.0.2758 sent an empty control message without MSG_MORE. [ 789.473491][T15951] netlink: 'syz.3.2759': attribute type 39 has an invalid length. [ 790.083208][T15971] device syzkaller0 entered promiscuous mode [ 790.700386][ T4314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 791.086634][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 791.171819][ T4314] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.373033][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 791.379908][ T4314] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 791.393861][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.432907][ T4314] usb 5-1: config 0 descriptor?? [ 791.587595][ T4394] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 791.811847][ T4394] usb 1-1: no configurations [ 791.817682][ T4394] usb 1-1: can't read configurations, error -22 [ 792.013080][ T4394] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 792.801842][ T4394] usb 1-1: no configurations [ 792.810386][ T4394] usb 1-1: can't read configurations, error -22 [ 792.835280][ T4394] usb usb1-port1: attempt power cycle [ 793.250435][ T4394] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 793.295820][ T4394] usb 1-1: no configurations [ 793.300752][ T4394] usb 1-1: can't read configurations, error -22 [ 793.450998][ T4394] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 793.495463][ T4394] usb 1-1: no configurations [ 793.500792][ T4394] usb 1-1: can't read configurations, error -22 [ 793.507429][ T4394] usb usb1-port1: unable to enumerate USB device [ 793.710633][T15988] ALSA: mixer_oss: invalid OSS volume '' [ 793.901220][ T4314] usbhid 5-1:0.0: can't add hid device: -71 [ 793.912821][ T4314] usbhid: probe of 5-1:0.0 failed with error -71 [ 793.922095][ T4314] usb 5-1: USB disconnect, device number 10 [ 794.994766][T16010] fuse: Bad value for 'group_id' [ 800.905681][T16047] fuse: Bad value for 'group_id' [ 800.985258][T16052] device syzkaller0 entered promiscuous mode [ 801.150386][ T4377] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 801.159078][T16056] device syzkaller0 entered promiscuous mode [ 801.390477][ T4377] usb 4-1: Using ep0 maxpacket: 16 [ 801.397562][ T4377] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.377436][ T4377] usb 4-1: config 0 interface 0 has no altsetting 0 [ 802.384478][ T4377] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 802.422153][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.463515][ T4377] usb 4-1: config 0 descriptor?? [ 805.329225][T16085] fuse: Bad value for 'group_id' [ 805.853674][ T4377] usbhid 4-1:0.0: can't add hid device: -71 [ 805.883701][ T4377] usbhid: probe of 4-1:0.0 failed with error -71 [ 805.907855][ T4377] usb 4-1: USB disconnect, device number 14 [ 805.930171][T16091] device syzkaller0 entered promiscuous mode [ 806.215786][T16097] device syzkaller0 entered promiscuous mode [ 806.860563][T16112] serio: Serial port ptm0 [ 809.261289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.267971][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.418162][T16130] device syzkaller0 entered promiscuous mode [ 810.566240][T16135] device syzkaller0 entered promiscuous mode [ 811.318788][T16154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 811.481180][T16154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 811.491610][T16154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.244474][T16154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.253762][T16154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 812.279281][T16154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 812.656828][T16151] chnl_net:caif_netlink_parms(): no params data found [ 812.891013][T16169] device syzkaller0 entered promiscuous mode [ 814.315898][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 814.428879][T16199] loop5: detected capacity change from 0 to 7 [ 814.460224][T16199] Dev loop5: unable to read RDB block 7 [ 814.466342][T16199] loop5: AHDI p1 [ 814.470580][T16199] loop5: partition table partially beyond EOD, truncated [ 816.390757][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 816.686462][T16173] device syzkaller0 entered promiscuous mode [ 816.725787][T16201] tipc: Enabling of bearer rejected, failed to enable media [ 816.981056][T16151] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.048932][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.087809][T16151] device bridge_slave_0 entered promiscuous mode [ 817.109733][T16151] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.136614][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.148689][T16151] device bridge_slave_1 entered promiscuous mode [ 817.227597][T16151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.289823][T16151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.369881][T16151] team0: Port device team_slave_0 added [ 817.402896][T16151] team0: Port device team_slave_1 added [ 817.446704][T16151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.500382][T16151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.606492][T16151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.447178][T16151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.464787][T16151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.492269][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 818.545264][T16151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.656586][T16151] device hsr_slave_0 entered promiscuous mode [ 818.678449][T16151] device hsr_slave_1 entered promiscuous mode [ 818.771476][T16151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.779105][T16151] Cannot create hsr debugfs directory [ 819.306407][T16151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.629640][T16151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.954718][T16151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.116741][T16243] device syzkaller0 entered promiscuous mode [ 820.251949][T16257] 9pnet_fd: Insufficient options for proto=fd [ 820.550680][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 823.961177][T16298] 9pnet_fd: Insufficient options for proto=fd [ 825.279997][T16151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.525724][T16315] dlm: plock device version mismatch: kernel (1.2.0), user (1.16711680.0) [ 826.587307][T16151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 826.609365][T16151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 826.647662][T16151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 826.673404][T16151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 826.687794][T16321] device syzkaller0 entered promiscuous mode [ 826.708146][T16323] 9pnet_fd: Insufficient options for proto=fd [ 826.732810][T16321] 0: reclassify loop, rule prio 0, protocol 800 [ 826.945688][T16331] Illegal XDP return value 6 on prog (id 157) dev N/A, expect packet loss! [ 827.164208][T16338] device syzkaller0 entered promiscuous mode [ 828.971553][T16359] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 829.808309][T16361] 9pnet_fd: Insufficient options for proto=fd [ 830.969910][T16151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.025395][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.037448][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 831.112684][T16151] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.152298][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 831.219289][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 831.256324][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.263825][T13611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.307659][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 831.335637][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 831.358722][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 831.369973][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.377290][T13611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.401532][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 831.411565][T16377] device syzkaller0 entered promiscuous mode [ 831.502754][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 831.517857][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 831.537886][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 831.666783][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 832.576928][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 832.598437][T16388] 9pnet_fd: Insufficient options for proto=fd [ 832.626322][T16151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.683050][T16151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.206444][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 833.324203][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 833.465193][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 833.492024][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 833.504377][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 833.513778][T13611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 833.645468][T16400] device syzkaller0 entered promiscuous mode [ 836.606804][T16414] device syzkaller0 entered promiscuous mode [ 836.647204][T16424] device syzkaller0 entered promiscuous mode [ 836.822147][T16438] 9pnet_fd: Insufficient options for proto=fd [ 838.746365][ T4314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 838.950386][ T4314] usb 5-1: device descriptor read/64, error -71 [ 839.260670][ T4314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 839.470622][ T4314] usb 5-1: device descriptor read/64, error -71 [ 839.602896][ T4314] usb usb5-port1: attempt power cycle [ 840.024769][ T4314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 840.077093][ T4314] usb 5-1: device descriptor read/8, error -71 [ 840.351820][ T4314] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 840.394125][ T4314] usb 5-1: device descriptor read/8, error -71 [ 840.530840][ T4314] usb usb5-port1: unable to enumerate USB device [ 843.165650][T16453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2909'. [ 843.178106][T16453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2909'. [ 843.227840][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 843.250570][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 843.275594][T16151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.383186][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 843.403198][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.417292][T16470] 9pnet_fd: Insufficient options for proto=fd [ 843.447620][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 843.459607][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 843.482457][T16151] device veth0_vlan entered promiscuous mode [ 843.500498][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 843.509468][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.532425][T16151] device veth1_vlan entered promiscuous mode [ 843.620818][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 843.637696][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 843.667674][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 843.705220][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 843.723801][T16151] device veth0_macvtap entered promiscuous mode [ 843.762058][T16151] device veth1_macvtap entered promiscuous mode [ 843.860491][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.898337][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.102604][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.114999][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.350081][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.560479][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.587918][T16151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.639776][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 844.659283][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 844.687875][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.755799][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.782732][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.842645][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.873646][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.888635][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.907408][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.921934][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.943272][T16151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.966480][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.978351][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 845.001113][T12363] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 845.028425][T16499] device syzkaller0 entered promiscuous mode [ 845.041240][T16151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.050100][T16151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.065570][T16151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.080875][T16151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.125293][T16492] device syzkaller0 entered promiscuous mode [ 845.160446][T12363] usb 4-1: device descriptor read/64, error -71 [ 845.447203][T12363] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 845.611287][T12363] usb 4-1: device descriptor read/64, error -71 [ 845.731647][T12363] usb usb4-port1: attempt power cycle [ 846.141766][T12363] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 846.188717][T12363] usb 4-1: device descriptor read/8, error -71 [ 846.483812][T12363] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 846.545252][T12363] usb 4-1: device descriptor read/8, error -71 [ 846.671066][T12363] usb usb4-port1: unable to enumerate USB device [ 848.684056][T16522] 9pnet_fd: Insufficient options for proto=fd [ 851.325732][T16518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2925'. [ 851.337157][T16518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2925'. [ 851.535331][T12362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.563719][T12362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.606512][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 851.814103][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.850538][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.887231][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 852.420524][ T4319] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 852.590436][ T4319] usb 5-1: device descriptor read/64, error -71 [ 852.771961][ T4394] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 852.860363][ T4319] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 853.013256][ T4394] usb 2-1: no configurations [ 853.018826][ T4394] usb 2-1: can't read configurations, error -22 [ 853.020417][ T4319] usb 5-1: device descriptor read/64, error -71 [ 853.180529][ T4319] usb usb5-port1: attempt power cycle [ 853.220445][ T4394] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 853.236231][T16551] ptrace attach of "./syz-executor exec"[4276] was attempted by "./syz-executor exec"[16551] [ 853.471237][ T4394] usb 2-1: no configurations [ 853.476048][ T4394] usb 2-1: can't read configurations, error -22 [ 853.566687][ T4394] usb usb2-port1: attempt power cycle [ 853.590420][ T4319] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 853.723491][ T4319] usb 5-1: device descriptor read/8, error -71 [ 853.990444][ T4319] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 854.041020][ T4319] usb 5-1: device descriptor read/8, error -71 [ 854.071647][ T4394] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 854.117814][ T4394] usb 2-1: no configurations [ 854.126928][ T4394] usb 2-1: can't read configurations, error -22 [ 854.160494][ T4319] usb usb5-port1: unable to enumerate USB device [ 854.229703][T16565] device syzkaller0 entered promiscuous mode [ 854.241515][T16565] 0: reclassify loop, rule prio 0, protocol 800 [ 854.340543][ T4394] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 854.393211][ T4394] usb 2-1: no configurations [ 854.398084][ T4394] usb 2-1: can't read configurations, error -22 [ 854.410560][ T4394] usb usb2-port1: unable to enumerate USB device [ 855.184620][T16573] ceph: No mds server is up or the cluster is laggy [ 855.332532][T16547] ALSA: mixer_oss: invalid OSS volume '' [ 855.350350][T16576] tipc: Enabling of bearer rejected, failed to enable media [ 856.342842][ T4277] device syz_tun left promiscuous mode [ 856.391335][T16154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 856.412962][T16154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 856.428158][T16154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 856.429818][ T4277] bridge0: port 3(syz_tun) entered disabled state [ 856.452101][T16154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 856.459927][T16154] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 856.468533][T16154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 856.576533][T16595] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.876535][T14018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.068435][T14018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.313213][T14018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.283120][T16589] chnl_net:caif_netlink_parms(): no params data found [ 858.395838][T14018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.550800][T16154] Bluetooth: hci2: command 0x0409 tx timeout [ 859.016640][T16612] device syzkaller0 entered promiscuous mode [ 859.143488][T16589] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.166672][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.191358][T16589] device bridge_slave_0 entered promiscuous mode [ 859.200953][T16589] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.208719][T16589] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.224888][T16589] device bridge_slave_1 entered promiscuous mode [ 859.625244][T16638] ptrace attach of "./syz-executor exec"[4272] was attempted by "./syz-executor exec"[16638] [ 860.650903][T16154] Bluetooth: hci2: command 0x041b tx timeout [ 860.850165][T16646] block device autoloading is deprecated and will be removed. [ 862.634682][T16674] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 862.710311][T16154] Bluetooth: hci2: command 0x040f tx timeout [ 864.794625][T16154] Bluetooth: hci2: command 0x0419 tx timeout [ 865.414541][T16672] netlink: 'syz.3.2970': attribute type 10 has an invalid length. [ 865.426494][T16672] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.433821][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.464128][T16589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.511977][T16589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.661810][T16589] team0: Port device team_slave_0 added [ 865.727086][T16589] team0: Port device team_slave_1 added [ 865.791732][T16589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.821221][T16589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.890631][T16589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.127099][T16589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.136403][T16589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.216266][T16589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.411915][T16589] device hsr_slave_0 entered promiscuous mode [ 866.436012][T16696] block device autoloading is deprecated and will be removed. [ 866.449546][T16589] device hsr_slave_1 entered promiscuous mode [ 866.462473][T16589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.504691][T16589] Cannot create hsr debugfs directory [ 867.180563][ T4314] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 867.188526][T16710] device syzkaller0 entered promiscuous mode [ 867.389824][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 867.446197][ T4314] usb 3-1: not running at top speed; connect to a high speed hub [ 867.681190][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 867.717595][ T4314] usb 3-1: string descriptor 0 read error: -22 [ 867.730466][ T4314] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 867.744381][T16727] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 867.751268][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.101478][T16705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.136906][ T4314] usb 3-1: MIDIStreaming interface descriptor not found [ 868.367720][T13287] usb 3-1: USB disconnect, device number 11 [ 868.959560][T16736] kvm: pic: level sensitive irq not supported [ 868.959853][T16736] kvm: pic: non byte read [ 869.009370][T16736] kvm: pic: non byte read [ 869.037065][T16736] kvm: pic: non byte read [ 869.043189][T16736] kvm: pic: non byte read [ 869.057190][T16736] kvm: pic: non byte read [ 869.089580][T16736] kvm: pic: non byte read [ 869.102650][T16736] kvm: pic: non byte read [ 869.107284][T16736] kvm: pic: non byte read [ 869.139374][T16736] kvm: pic: non byte read [ 869.162212][T16736] kvm: pic: non byte read [ 870.171885][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.178334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.956058][T16758] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 873.778814][T14018] device hsr_slave_0 left promiscuous mode [ 873.811036][T14018] device hsr_slave_1 left promiscuous mode [ 873.833858][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 873.841032][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 873.856101][T14018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.908263][T16760] ceph: No mds server is up or the cluster is laggy [ 873.967469][T14018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.989227][T14018] device bridge_slave_1 left promiscuous mode [ 873.998554][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.009143][T14018] device bridge_slave_0 left promiscuous mode [ 874.027292][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.060371][T11452] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 874.260439][T11452] usb 1-1: Using ep0 maxpacket: 16 [ 874.273561][T11452] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 874.310322][T11452] usb 1-1: config 0 has no interface number 0 [ 874.325007][T11452] usb 1-1: config 0 interface 13 altsetting 7 has an invalid endpoint with address 0x95, skipping [ 874.360309][T11452] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 874.395108][T11452] usb 1-1: config 0 interface 13 has no altsetting 0 [ 874.422692][T11452] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 874.442448][T11452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.464679][T11452] usb 1-1: Product: syz [ 874.468925][T11452] usb 1-1: Manufacturer: syz [ 874.484202][T11452] usb 1-1: SerialNumber: syz [ 874.501102][T11452] usb 1-1: config 0 descriptor?? [ 874.513262][T16771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 874.527919][T16771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 874.778703][T11452] usb 1-1: USB disconnect, device number 16 [ 874.782912][T14018] bond2 (unregistering): Released all slaves [ 875.854117][T14018] bond1 (unregistering): Released all slaves [ 876.088128][T16809] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 877.806076][T14018] team0 (unregistering): Port device team_slave_1 removed [ 877.889451][T14018] team0 (unregistering): Port device team_slave_0 removed [ 877.939904][T14018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.998161][T14018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.368749][T14018] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 878.377614][T14018] bond0 (unregistering): Released all slaves [ 878.564075][T16824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 878.617182][T16824] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 878.683308][T16824] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 878.740614][T16824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 878.762616][T16824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 878.773803][T16589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 878.791100][T16824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 878.819339][T16824] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 878.860627][T16824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 878.866652][T16824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 878.873817][T16589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 878.905750][T16589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 878.936582][T16589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 878.945874][T16824] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 879.300455][T12363] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 879.411162][T16589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.496546][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 879.514381][T12363] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 879.520609][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 879.563717][T12363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.593928][T16589] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.635501][T12363] usb 4-1: Product: syz [ 879.652677][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.668110][T12363] usb 4-1: Manufacturer: syz [ 879.672500][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.702175][T12363] usb 4-1: SerialNumber: syz [ 879.712522][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.719732][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.749466][T12363] usb 4-1: config 0 descriptor?? [ 879.777602][T12363] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 879.805000][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 879.854089][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.929997][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.988396][T12363] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 880.009220][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.010550][T12363] sq905c 4-1:0.0: Reading version command failed [ 880.016446][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.076018][T12363] sq905c: probe of 4-1:0.0 failed with error -71 [ 880.135674][T12363] usb 4-1: USB disconnect, device number 19 [ 880.148181][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 880.211836][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 880.266419][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 880.328938][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 880.347908][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 880.408656][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 880.427628][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 880.481428][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 880.520778][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 880.625545][T16589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.649779][T16154] Bluetooth: hci1: command 0x0c1a tx timeout [ 880.703307][T16864] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 880.784548][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 880.793247][T16154] Bluetooth: hci3: command 0x0c1a tx timeout [ 880.799439][T16154] Bluetooth: hci4: command 0x0c1a tx timeout [ 880.870669][T16154] Bluetooth: hci2: command 0x0c1a tx timeout [ 881.060987][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 881.076551][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 881.451867][T16875] device syzkaller0 entered promiscuous mode [ 882.710465][T16154] Bluetooth: hci1: command 0x0406 tx timeout [ 882.870780][T16154] Bluetooth: hci3: command 0x0406 tx timeout [ 882.950560][T16154] Bluetooth: hci2: command 0x0406 tx timeout [ 887.637416][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 887.650585][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 887.699802][T16589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.382326][T16973] device syzkaller0 entered promiscuous mode [ 890.423191][T16973] 0: reclassify loop, rule prio 0, protocol 800 [ 890.855314][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 890.876911][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 890.982195][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 890.996836][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 891.027546][T16589] device veth0_vlan entered promiscuous mode [ 891.049657][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 891.058957][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 891.134090][T16589] device veth1_vlan entered promiscuous mode [ 891.353104][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 891.369723][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 891.399453][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 891.409315][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 891.422247][T16589] device veth0_macvtap entered promiscuous mode [ 891.584317][T16589] device veth1_macvtap entered promiscuous mode [ 891.639851][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 892.490402][T12363] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 892.572906][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 892.598467][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.685089][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.730375][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.744023][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.754158][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.764889][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.765067][T12363] usb 3-1: unable to get BOS descriptor or descriptor too short [ 892.784875][T12363] usb 3-1: not running at top speed; connect to a high speed hub [ 892.794696][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.794798][T12363] usb 3-1: config 6 has an invalid interface number: 162 but max is 0 [ 892.846877][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.863238][T12363] usb 3-1: config 6 has no interface number 0 [ 892.869605][T12363] usb 3-1: config 6 interface 162 has no altsetting 0 [ 892.893423][T16589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.906827][T12363] usb 3-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=d7.c4 [ 892.916374][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 892.936433][T12363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.939047][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 892.972199][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.986507][T12363] usb 3-1: Product: syz [ 892.986585][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.992676][T12363] usb 3-1: Manufacturer: syz [ 893.018971][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.020383][T12363] usb 3-1: SerialNumber: syz [ 893.140037][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.165318][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.213391][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.255617][T16589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.381159][T16589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.514891][T16589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.516203][T12363] usb 3-1: USB disconnect, device number 12 [ 894.621765][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 894.694058][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 894.967573][T16589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.111045][T16589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.283789][T16589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.413815][T16589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.084716][T17068] device syzkaller0 entered promiscuous mode [ 896.104087][T17068] 0: reclassify loop, rule prio 0, protocol 800 [ 896.282283][ T8398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.290181][ T8398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.308881][T15935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 896.503623][T17074] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3060'. [ 896.609597][T14018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.669366][T14018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.018159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 897.619605][T17086] fuse: Unknown parameter 'group_id00000000000000000000' [ 898.066088][T17091] device syzkaller0 entered promiscuous mode [ 898.172288][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 898.184221][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 898.193548][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 898.220490][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 898.228328][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 898.235975][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 899.356223][T13287] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 899.562230][T13287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 899.579105][T13287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 899.603590][T13287] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 899.617055][T13287] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 899.659758][T13287] usb 2-1: string descriptor 0 read error: -22 [ 899.667293][T13287] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 899.678157][T13287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.725178][T13287] usb 2-1: low speed audio streaming not supported [ 899.734252][T13287] usb 2-1: low speed audio streaming not supported [ 899.742101][T13287] usb 2-1: unit 3 not found! [ 899.962822][T13287] usb 2-1: USB disconnect, device number 13 [ 900.316997][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 900.511826][T17124] fuse: Unknown parameter 'group_id00000000000000000000' [ 901.868684][ T4276] bridge0: port 3(syz_tun) entered disabled state [ 901.937824][ T4276] device syz_tun left promiscuous mode [ 901.950520][ T4276] bridge0: port 3(syz_tun) entered disabled state [ 902.429702][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 902.613810][ T9652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.650597][ T9652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.786047][ T9652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.836730][ T9652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.980492][ T4396] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 903.087819][ T9652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.106010][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 903.127042][ T9652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.150494][T17144] netlink: 'syz.1.3082': attribute type 2 has an invalid length. [ 903.192601][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.215140][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.225548][ T4396] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 903.255907][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.265785][ T9652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.292163][ T9652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.348722][ T4396] usb 4-1: config 0 descriptor?? [ 903.368970][T17094] chnl_net:caif_netlink_parms(): no params data found [ 903.702072][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.750650][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.777575][T17094] device bridge_slave_0 entered promiscuous mode [ 903.788546][ T4396] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 903.804019][ T4396] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 903.823982][ T4396] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 904.017286][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.025036][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.041444][T17094] device bridge_slave_1 entered promiscuous mode [ 904.109931][ T4396] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 904.225473][ T4396] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 904.405503][T17142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.470540][T16154] Bluetooth: hci5: command 0x040f tx timeout [ 904.502361][T17142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.591690][ T4396] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 905.156226][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.205292][T17163] fuse: Bad value for 'fd' [ 905.256094][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.618080][T17171] Cannot find add_set index 0 as target [ 905.893191][T17094] team0: Port device team_slave_0 added [ 906.417455][T17094] team0: Port device team_slave_1 added [ 906.550542][T16154] Bluetooth: hci5: command 0x0419 tx timeout [ 906.559043][T15538] usb 4-1: USB disconnect, device number 20 [ 906.731880][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.763446][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.887357][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.045785][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.080307][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.202615][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.483520][T17201] device syzkaller0 entered promiscuous mode [ 908.580122][T17220] fuse: Bad value for 'user_id' [ 910.571739][ T4377] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 910.741168][ T4377] usb 2-1: device descriptor read/64, error -71 [ 911.022731][ T4377] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 911.185191][ T4377] usb 2-1: device descriptor read/64, error -71 [ 911.312384][ T4377] usb usb2-port1: attempt power cycle [ 911.740349][ T4377] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 911.781911][ T4377] usb 2-1: device descriptor read/8, error -71 [ 912.050457][ T4377] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 912.937960][T17094] device hsr_slave_0 entered promiscuous mode [ 912.945086][T17094] device hsr_slave_1 entered promiscuous mode [ 912.952414][T17094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.960015][T17094] Cannot create hsr debugfs directory [ 913.062933][ T4377] usb 2-1: device descriptor read/8, error -71 [ 913.180683][ T4377] usb usb2-port1: unable to enumerate USB device [ 913.207989][T17232] device syzkaller0 entered promiscuous mode [ 913.481973][T17243] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 917.683475][T17264] fuse: Bad value for 'user_id' [ 917.911160][ T9652] device hsr_slave_0 left promiscuous mode [ 917.954756][ T9652] device hsr_slave_1 left promiscuous mode [ 917.978291][ T9652] device bridge_slave_1 left promiscuous mode [ 917.991624][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.021365][ T9652] device bridge_slave_0 left promiscuous mode [ 918.037025][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.145436][ T9652] device veth1_macvtap left promiscuous mode [ 918.164150][ T9652] device veth0_macvtap left promiscuous mode [ 918.179228][ T9652] device veth1_vlan left promiscuous mode [ 918.189012][ T9652] device veth0_vlan left promiscuous mode [ 919.310452][ T9652] bond7 (unregistering): Released all slaves [ 919.502875][ T9652] bond6 (unregistering): Released all slaves [ 919.742264][ T9652] bond5 (unregistering): Released all slaves [ 919.947319][ T9652] bond4 (unregistering): Released all slaves [ 920.114173][ T9652] bond3 (unregistering): Released all slaves [ 920.267650][ T9652] bond2 (unregistering): Released all slaves [ 920.413634][ T9652] bond1 (unregistering): Released all slaves [ 920.939315][ T9652] team0 (unregistering): Port device team_slave_1 removed [ 920.998181][ T9652] team0 (unregistering): Port device team_slave_0 removed [ 921.057115][ T9652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.116995][ T9652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.475949][ T9652] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 921.487007][ T9652] bond0 (unregistering): Released all slaves [ 921.952506][T17313] fuse: Bad value for 'fd' [ 922.238678][T17323] binder: 17321:17323 unknown command 1074553619 [ 922.294183][T17323] binder: 17321:17323 ioctl c0306201 200000000540 returned -22 [ 922.792473][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'. [ 922.886057][T17326] netlink: 'syz.4.3120': attribute type 2 has an invalid length. [ 923.592336][T17353] fuse: Bad value for 'fd' [ 923.635512][T17351] device syzkaller0 entered promiscuous mode [ 923.667398][T17351] 0: reclassify loop, rule prio 0, protocol 800 [ 923.695697][T17094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 924.738751][T17094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 924.800877][T17094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 924.871114][T17094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 925.651635][T17094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.739043][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 925.757491][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 925.824612][T17094] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.858724][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 925.903067][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 925.934306][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.941653][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.030679][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 926.068862][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 926.093314][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.164730][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.171931][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.197311][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 926.257738][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 926.276744][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 926.350835][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 926.364882][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 926.391123][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 926.431830][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 926.525366][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 926.535506][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.869458][T17094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.871505][T17399] fuse: Bad value for 'fd' [ 926.927362][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 926.951612][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 926.972568][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 928.043307][T17406] device syzkaller0 entered promiscuous mode [ 928.095438][T17406] 0: reclassify loop, rule prio 0, protocol 800 [ 929.975195][ T4396] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 930.092492][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 930.102105][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 930.150375][ T4396] usb 5-1: device descriptor read/64, error -71 [ 930.183799][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.500877][ T4396] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 930.744049][T17432] fuse: Bad value for 'fd' [ 930.750006][T17065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 930.798272][T17065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 930.850855][ T4396] usb 5-1: device descriptor read/64, error -71 [ 930.874391][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 930.919224][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 930.957384][T17094] device veth0_vlan entered promiscuous mode [ 930.970503][ T4396] usb usb5-port1: attempt power cycle [ 930.988361][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 930.997503][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 931.025483][T17094] device veth1_vlan entered promiscuous mode [ 931.101740][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 931.397173][ T4396] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 931.592047][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.598453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.635768][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 932.052587][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 932.104862][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 932.150718][ T4396] usb 5-1: device not accepting address 21, error -71 [ 932.163072][T17094] device veth0_macvtap entered promiscuous mode [ 932.212481][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 932.297537][T17094] device veth1_macvtap entered promiscuous mode [ 932.387705][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.503099][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.633992][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.914212][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.000284][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.052882][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.109672][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.177694][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.195308][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.206546][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.218894][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.262892][T17452] device syzkaller0 entered promiscuous mode [ 933.430824][T15092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.472565][T15092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.602895][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.635630][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.680474][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.737486][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.770342][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.810878][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.840355][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.890561][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.966563][T17094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.025179][T17094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.103810][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.136074][T17065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 934.169508][T17065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 934.266552][T17094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.282944][T17094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.319466][T17094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.402857][T17094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.538352][T17478] fuse: Bad value for 'fd' [ 934.821052][T17065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.844352][T17065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.899956][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 935.019398][T17065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.064518][T17490] fuse: Bad value for 'fd' [ 935.090755][T17065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.106706][T17065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 935.307990][T17494] 9pnet_fd: Insufficient options for proto=fd [ 935.803574][T17507] device syzkaller0 entered promiscuous mode [ 935.902665][T17507] 0: reclassify loop, rule prio 0, protocol 800 [ 936.055705][T17512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 937.055845][T17516] fuse: Bad value for 'fd' [ 938.043294][ T4267] device syz_tun left promiscuous mode [ 938.226589][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.237517][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.247157][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.256859][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.265510][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 938.273327][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.557651][T15092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.580469][T17537] fuse: Bad value for 'fd' [ 938.615148][T15092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.790442][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 938.806249][T15092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.894814][T15092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.088163][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 940.302482][T15092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.364004][T15092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.390982][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 940.585452][T17574] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 941.427977][T15092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.459376][T15092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.542933][T17590] fuse: Invalid rootmode [ 941.843729][T17528] chnl_net:caif_netlink_parms(): no params data found [ 942.376901][T17528] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.384484][T17528] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.393423][T17528] device bridge_slave_0 entered promiscuous mode [ 942.402827][T17528] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.410051][T17528] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.421702][T17528] device bridge_slave_1 entered promiscuous mode [ 942.477813][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 942.585112][T17528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.661301][T17528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.948509][T17528] team0: Port device team_slave_0 added [ 943.016866][T17528] team0: Port device team_slave_1 added [ 943.139441][T17528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.147113][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.303270][T17528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.381717][T17528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.388756][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.438963][T17629] fuse: Invalid rootmode [ 943.740297][T17634] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 945.240557][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 945.555782][T17528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.080302][ T4396] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 946.168198][T17642] device syzkaller0 entered promiscuous mode [ 946.201012][T17528] device hsr_slave_0 entered promiscuous mode [ 946.251017][T17528] device hsr_slave_1 entered promiscuous mode [ 946.263162][T17528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.283224][ T4396] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 946.298632][ T4396] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 946.311887][T17528] Cannot create hsr debugfs directory [ 946.337911][ T4396] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 946.390384][ T4396] usb 2-1: config 150 has no interface number 0 [ 946.410593][ T4396] usb 2-1: config 150 interface 204 has no altsetting 0 [ 946.452590][ T4396] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 946.480839][ T4396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.497437][ T4396] usb 2-1: Product: syz [ 946.508381][ T4396] usb 2-1: Manufacturer: syz [ 946.526019][ T4396] usb 2-1: SerialNumber: syz [ 946.764567][ T4396] xr_serial 2-1:150.204: skipping garbage [ 946.780677][ T4396] usb 2-1: USB disconnect, device number 18 [ 947.270792][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 951.165839][T17688] device ip6erspan0 entered promiscuous mode [ 951.658676][T17708] fuse: Invalid rootmode [ 951.818532][T15092] device gretap0 left promiscuous mode [ 951.864254][T17715] Cannot find add_set index 0 as target [ 954.573264][T15092] device hsr_slave_0 left promiscuous mode [ 954.616220][T15092] device hsr_slave_1 left promiscuous mode [ 954.654205][T15092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.675282][T15092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.716605][T15092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.752245][T15092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.791419][T15092] device bridge_slave_1 left promiscuous mode [ 954.808005][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.851008][T15092] device bridge_slave_0 left promiscuous mode [ 954.874649][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.081153][T15092] device veth1_macvtap left promiscuous mode [ 955.092919][T15092] device veth0_macvtap left promiscuous mode [ 955.128976][T15092] device veth1_vlan left promiscuous mode [ 955.145227][T15092] device veth0_vlan left promiscuous mode [ 955.279405][T17764] fuse: Bad value for 'rootmode' [ 955.652759][T15092] bond7 (unregistering): Released all slaves [ 956.526759][T15092] bond6 (unregistering): Released all slaves [ 956.712528][T15092] bond5 (unregistering): Released all slaves [ 956.878302][T15092] bond4 (unregistering): Released all slaves [ 957.039492][T15092] bond3 (unregistering): Released all slaves [ 957.196675][T15092] bond2 (unregistering): Released all slaves [ 957.222139][T15092] bond1 (unregistering): Released all slaves [ 957.806394][T15092] team0 (unregistering): Port device team_slave_1 removed [ 957.865431][T15092] team0 (unregistering): Port device team_slave_0 removed [ 957.917147][T15092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.975588][T15092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.385362][T15092] bond0 (unregistering): Released all slaves [ 958.785903][T17528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 958.880712][T17784] netlink: 'syz.1.3220': attribute type 8 has an invalid length. [ 958.930849][T17528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 959.925699][T17528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 959.985772][T17528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.395810][T17528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.462356][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 960.475842][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 960.560991][T17528] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.623056][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 960.658785][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 960.681167][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.688534][T15058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.753967][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 960.784874][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.808575][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.829275][T17813] fuse: Bad value for 'rootmode' [ 960.835314][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.842539][T15058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.894494][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 960.921556][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 960.967640][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 961.044500][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 961.115158][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 961.140672][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 961.157948][T17528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 961.176777][T17528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.196164][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 961.206566][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 961.253849][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 961.301621][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 961.376541][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 961.417854][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 962.390438][ T4377] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 962.580586][ T4377] usb 4-1: Using ep0 maxpacket: 8 [ 962.594052][ T4377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.610290][ T4377] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.629364][ T4377] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 962.640518][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.671651][ T4377] usb 4-1: config 0 descriptor?? [ 963.032009][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 963.040506][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 963.100089][T17528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.177366][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.211584][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.323810][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 963.391226][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.431933][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 963.462456][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 963.524551][T17528] device veth0_vlan entered promiscuous mode [ 963.561571][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 963.985902][T17844] device hsr_slave_1 left promiscuous mode [ 964.034071][T17528] device veth1_vlan entered promiscuous mode [ 964.294636][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 964.315247][T17853] fuse: Bad value for 'rootmode' [ 964.326264][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 964.363181][T17528] device veth0_macvtap entered promiscuous mode [ 964.418893][T17528] device veth1_macvtap entered promiscuous mode [ 964.548288][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.570375][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.640784][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.706098][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.757897][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.806197][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.855350][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.898387][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.961806][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.993935][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.065683][T17528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.122146][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 965.134677][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 965.292234][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.378338][T17865] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 966.131226][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.162683][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.228673][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.322573][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.355678][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.406622][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.535117][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.660060][T17528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.719542][T17528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.817327][T17528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.876125][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 966.902421][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 966.956885][T17528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.994629][T17528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.074528][T17528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.167680][T17528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.683072][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.719272][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.752001][ T4377] usbhid 4-1:0.0: can't add hid device: -32 [ 967.758137][ T4377] usbhid: probe of 4-1:0.0 failed with error -32 [ 967.801451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 968.314897][T17886] ptrace attach of "./syz-executor exec"[17887] was attempted by "./syz-executor exec"[17886] [ 969.267325][ T4389] usb 4-1: USB disconnect, device number 21 [ 969.351386][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.368848][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.413082][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 969.658699][T17896] fuse: Unknown parameter 'use00000000000000000000' [ 970.722274][T17908] tmpfs: Unknown parameter 'usrquota' [ 970.940578][T17912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 971.043763][T17912] overlayfs: failed to look up (tracing) for ino (-66) [ 973.122229][T17935] fuse: Unknown parameter 'use00000000000000000000' [ 973.266336][T17939] overlayfs: failed to resolve './file0': -2 [ 973.597364][T17944] vivid-003: disconnect [ 974.553203][T17942] vivid-003: reconnect [ 974.892474][T17950] Cannot find add_set index 0 as target [ 975.456042][T16154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 975.474291][T16154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 975.483309][T16154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 975.499037][T16154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 975.509962][T16154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 975.517377][T16154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.142016][ T26] audit: type=1326 audit(1775275726.256:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.198259][T17978] fuse: Unknown parameter 'use00000000000000000000' [ 977.235518][ T26] audit: type=1326 audit(1775275726.306:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.264446][T16849] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 977.302564][T17952] chnl_net:caif_netlink_parms(): no params data found [ 977.386801][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.395030][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.405348][T17952] device bridge_slave_0 entered promiscuous mode [ 977.415241][ T26] audit: type=1326 audit(1775275726.306:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.416669][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.481241][T16849] usb 5-1: no configurations [ 977.485918][T16849] usb 5-1: can't read configurations, error -22 [ 977.492909][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.536883][T17952] device bridge_slave_1 entered promiscuous mode [ 977.544703][ T26] audit: type=1326 audit(1775275726.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.576591][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.590498][T16154] Bluetooth: hci1: command 0x0409 tx timeout [ 977.614406][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.634777][ T26] audit: type=1326 audit(1775275726.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.646507][T17952] team0: Port device team_slave_0 added [ 977.667565][T17952] team0: Port device team_slave_1 added [ 977.680582][T16849] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 977.709021][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.716784][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.743101][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.771788][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.786561][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.815605][ T26] audit: type=1326 audit(1775275726.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.873313][ T26] audit: type=1326 audit(1775275726.336:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 977.899345][T16849] usb 5-1: no configurations [ 977.905650][T16849] usb 5-1: can't read configurations, error -22 [ 977.915387][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.920697][T16849] usb usb5-port1: attempt power cycle [ 977.959904][ T26] audit: type=1326 audit(1775275726.336:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 978.002512][ T26] audit: type=1326 audit(1775275726.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 978.049091][ T26] audit: type=1326 audit(1775275726.336:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575499c819 code=0x7ffc0000 [ 978.161855][T17952] device hsr_slave_0 entered promiscuous mode [ 978.179426][T17952] device hsr_slave_1 entered promiscuous mode [ 978.371773][T16849] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 978.427256][T16849] usb 5-1: no configurations [ 978.434677][T16849] usb 5-1: can't read configurations, error -22 [ 978.644081][T16849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 978.703399][T16849] usb 5-1: no configurations [ 978.708761][T16849] usb 5-1: can't read configurations, error -22 [ 978.767990][T16849] usb usb5-port1: unable to enumerate USB device [ 979.841443][T16154] Bluetooth: hci1: command 0x041b tx timeout [ 979.847551][T16154] Bluetooth: hci2: command 0x0406 tx timeout [ 979.880770][T17969] ALSA: mixer_oss: invalid OSS volume '' [ 979.982780][T17952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.013340][T17952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.035940][T18001] Cannot find add_set index 0 as target [ 980.302065][T17952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.340667][T17952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.496907][T17952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.510354][T17952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.692568][T17952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.704128][T17952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.076468][T17952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 981.104986][T17952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.138632][T17952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 981.193659][T17952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 981.254532][T18016] fuse: Unknown parameter 'user_i00000000000000000000' [ 981.472210][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.496025][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 981.518978][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 981.601150][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.640480][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 981.654458][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 981.690419][ T4377] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 981.691215][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.705875][ T9331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.871074][ T4377] usb 5-1: Using ep0 maxpacket: 16 [ 981.905136][ T4377] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.910331][T16154] Bluetooth: hci1: command 0x040f tx timeout [ 981.973811][ T4377] usb 5-1: config 0 interface 0 has no altsetting 0 [ 981.990896][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 982.003717][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 982.012885][ T4377] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 982.029881][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 982.038889][ T4377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.070979][ T4377] usb 5-1: config 0 descriptor?? [ 982.071133][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.083382][ T9331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.138898][ T4377] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 982.262184][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 982.290446][ T4314] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 982.394051][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 982.454570][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 982.466619][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.496218][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 982.509290][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.551280][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.568273][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 982.579159][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 982.603224][T17952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.698225][T17952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 982.703996][ T4314] usb 1-1: no configurations [ 982.710330][ T4314] usb 1-1: can't read configurations, error -22 [ 982.723750][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 982.735986][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.529349][ T4314] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 984.538014][T16154] Bluetooth: hci1: command 0x0419 tx timeout [ 985.170772][T18042] Cannot find add_set index 0 as target [ 985.179384][T18027] ALSA: mixer_oss: invalid OSS volume '' [ 985.290127][T18045] fuse: Unknown parameter 'user_i00000000000000000000' [ 985.556267][ T4377] usb 5-1: USB disconnect, device number 27 [ 986.070039][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 986.086690][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 986.142945][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.229678][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 986.262696][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.404520][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 986.426371][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.442572][T17952] device veth0_vlan entered promiscuous mode [ 986.467213][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 986.479331][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 986.496960][T17952] device veth1_vlan entered promiscuous mode [ 986.573698][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 986.588637][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 986.601694][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 986.622842][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.647335][T17952] device veth0_macvtap entered promiscuous mode [ 986.669157][T17952] device veth1_macvtap entered promiscuous mode [ 986.707402][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.732659][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.752975][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.276476][T18077] ptrace attach of "./syz-executor exec"[18078] was attempted by "./syz-executor exec"[18077] [ 988.242332][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.277922][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.309368][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.320526][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.331958][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.343749][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.359654][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.372352][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.384248][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.420013][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.459689][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.499236][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.572382][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.598755][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.615243][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.628324][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.655203][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.599219][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.641410][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.672058][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.701801][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.730373][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.734923][T18085] fuse: Unknown parameter 'user_i00000000000000000000' [ 989.793138][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.838539][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.854009][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.910119][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.931999][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.970116][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.981476][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 990.083086][T17952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.108522][T17952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.161661][T17952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.241168][T17952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.305151][T18089] Cannot find add_set index 0 as target [ 990.471657][T17059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.492520][T17059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.522280][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 990.597942][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.608444][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.621969][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 991.001487][T18103] ALSA: mixer_oss: invalid OSS volume '' [ 991.811269][T18115] fuse: Unknown parameter 'user_id00000000000000000000' [ 991.837301][T18116] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 991.862308][T18116] overlayfs: failed to look up (tracing) for ino (-66) [ 993.551645][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.560394][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.729113][T18128] binder: 18125:18128 ioctl 4018620d 0 returned -22 [ 993.779788][T18128] binder: 18125:18128 unknown command 1074553619 [ 993.827121][T18128] binder: 18125:18128 ioctl c0306201 200000000540 returned -22 [ 993.868960][T18129] binder: 18125:18129 unknown command 1074291477 [ 993.894833][T18129] binder: 18125:18129 ioctl c0306201 200000000640 returned -22 [ 994.146193][T18135] kvm [18134]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x61 [ 994.157735][T18140] Cannot find add_set index 0 as target [ 994.522579][T18150] nvme_fabrics: unknown parameter or missing value 'ÔÄ' in ctrl creation request [ 996.328835][T18168] ALSA: mixer_oss: invalid OSS volume '' [ 996.604402][T18182] Cannot find add_set index 0 as target [ 999.680438][T16849] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 999.872979][T16849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.883426][T16849] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 999.892878][T16849] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 999.903043][T16849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.951419][T16849] usb 5-1: config 0 descriptor?? [ 1000.374155][T16849] Bluetooth: Can't get state to change to load configuration err [ 1000.390414][T16849] Bluetooth: Loading sysconfig file failed [ 1000.406569][T16849] ath3k: probe of 5-1:0.0 failed with error -16 [ 1000.427353][T16849] usb 5-1: USB disconnect, device number 28 [ 1000.559626][T18218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1001.182373][ T4389] kernel write not supported for file bpf-map (pid: 4389 comm: kworker/1:8) [ 1002.640780][T18235] ALSA: mixer_oss: invalid OSS volume '' [ 1003.295396][T16154] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 1004.677400][T18260] device syzkaller0 entered promiscuous mode [ 1005.140358][T11452] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1005.350280][T11452] usb 5-1: Using ep0 maxpacket: 16 [ 1005.374801][T11452] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.406685][T11452] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1005.434307][T11452] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1005.463927][T11452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.521353][T11452] usb 5-1: Product: syz [ 1005.549369][T11452] usb 5-1: Manufacturer: syz [ 1005.600362][T11452] usb 5-1: SerialNumber: syz [ 1005.631161][T11452] usb 5-1: config 0 descriptor?? [ 1005.879713][T11452] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 1006.720349][T11452] rc_core: IR keymap rc-imon-pad not found [ 1006.726450][T11452] Registered IR keymap rc-empty [ 1006.743793][T11452] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1006.818053][T11452] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1006.909404][T11452] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1007.017595][T11452] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 1007.067128][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1007.155921][T11452] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:29> initialized [ 1007.233257][T11452] usb 5-1: USB disconnect, device number 29 [ 1007.604710][T16154] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1007.614228][T16154] Bluetooth: hci2: Injecting HCI hardware error event [ 1007.623556][ T4286] Bluetooth: hci2: hardware error 0x00 [ 1007.940729][T18299] ALSA: mixer_oss: invalid OSS volume '' [ 1009.760372][ T4286] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1010.285976][T18333] ALSA: mixer_oss: invalid OSS volume '' [ 1010.960331][T13287] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1011.170426][T13287] usb 5-1: Using ep0 maxpacket: 16 [ 1011.189874][T13287] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.250354][T13287] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.291196][T13287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1011.297974][T13287] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1011.346688][T13287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.406856][T13287] usb 5-1: config 0 descriptor?? [ 1012.874537][T13287] usbhid 5-1:0.0: can't add hid device: -71 [ 1012.908130][T13287] usbhid: probe of 5-1:0.0 failed with error -71 [ 1012.943958][T13287] usb 5-1: USB disconnect, device number 30 [ 1013.217620][T18371] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1013.320407][ T127] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1013.540598][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1013.554643][ T127] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1013.587585][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.613498][ T127] usb 1-1: config 0 descriptor?? [ 1013.664657][T18376] ALSA: mixer_oss: invalid OSS volume '' [ 1013.857645][ T127] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1013.913796][ T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.931272][ T127] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1013.940137][ T127] usb 1-1: media controller created [ 1014.043652][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.178010][T18392] Set syz1 is full, maxelem 0 reached [ 1015.411665][T18398] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1015.422812][T18398] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1016.110290][T16849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1016.146062][ T127] az6027: usb out operation failed. (-71) [ 1016.158670][T18409] netlink: 'syz.1.3412': attribute type 6 has an invalid length. [ 1016.168386][ T127] az6027: usb out operation failed. (-71) [ 1016.171624][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1016.178745][ T127] stb0899_attach: Driver disabled by Kconfig [ 1016.199610][ T127] az6027: no front-end attached [ 1016.199610][ T127] [ 1016.221986][ T127] az6027: usb out operation failed. (-71) [ 1016.227785][ T127] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1016.257686][ T127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 1016.280332][ T4314] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1016.309793][ T127] dvb-usb: schedule remote query interval to 400 msecs. [ 1016.320591][T16849] usb 3-1: Using ep0 maxpacket: 16 [ 1016.330713][T16849] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.346076][ T127] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1016.389482][T16849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.394877][ T127] usb 1-1: USB disconnect, device number 19 [ 1016.412863][T16849] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1016.452899][T16849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.480788][ T127] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1016.482084][ T4314] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1016.509772][T16849] usb 3-1: config 0 descriptor?? [ 1016.693349][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.693378][ T4314] usb 4-1: config 1 has no interface number 0 [ 1016.693419][ T4314] usb 4-1: config 1 interface 7 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.693510][ T4314] usb 4-1: config 1 interface 7 has no altsetting 0 [ 1016.704348][ T4314] usb 4-1: New USB device found, idVendor=03f0, idProduct=0010, bcdDevice= 0.40 [ 1016.704421][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.704444][ T4314] usb 4-1: Product: syz [ 1016.704461][ T4314] usb 4-1: Manufacturer: syz [ 1016.704477][ T4314] usb 4-1: SerialNumber: syz [ 1016.959469][ T4314] cdc_wdm 4-1:1.7: invalid descriptor buffer length [ 1016.978009][ T4314] cdc_wdm: probe of 4-1:1.7 failed with error -22 [ 1017.023264][ T4314] usb 4-1: USB disconnect, device number 22 [ 1017.108420][T18431] fuse: Unknown parameter '0x0000000000000003' [ 1018.783713][T18446] tmpfs: Unknown parameter 'noswap' [ 1019.121185][T16849] usbhid 3-1:0.0: can't add hid device: -71 [ 1019.127323][T16849] usbhid: probe of 3-1:0.0 failed with error -71 [ 1019.148956][T16849] usb 3-1: USB disconnect, device number 13 [ 1019.476986][T18464] fuse: Unknown parameter '0x0000000000000003' [ 1019.858742][T18468] fuse: Bad value for 'fd' [ 1020.710678][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 1020.760015][T16849] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1020.800491][T17778] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1021.008336][T17778] usb 1-1: Using ep0 maxpacket: 16 [ 1021.010263][T16849] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1021.461616][T17778] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.472877][T17778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1021.476796][T16849] usb 4-1: config 0 has no interface number 0 [ 1021.479587][T17778] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1021.515701][T17778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.515797][T16849] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1021.577728][T17778] usb 1-1: config 0 descriptor?? [ 1021.599414][T16849] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1021.633665][T16849] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1021.656533][T16849] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1021.706771][T16849] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1021.717963][T16849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.761878][T16849] usb 4-1: config 0 descriptor?? [ 1021.767822][T18477] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1021.790571][T18477] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1021.816697][T16849] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1021.898838][T18493] fuse: Unknown parameter '0x0000000000000003' [ 1022.147403][T16849] usb 4-1: USB disconnect, device number 23 [ 1022.280935][T18501] fuse: Bad value for 'fd' [ 1023.161342][T17778] usbhid 1-1:0.0: can't add hid device: -71 [ 1023.167548][T17778] usbhid: probe of 1-1:0.0 failed with error -71 [ 1023.190594][T17778] usb 1-1: USB disconnect, device number 20 [ 1023.219981][T18497] device syzkaller0 entered promiscuous mode [ 1024.085583][T18518] loop4: detected capacity change from 0 to 1024 [ 1025.048582][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1025.845297][T18532] fuse: Unknown parameter '0x0000000000000003' [ 1026.004723][ T9331] hfsplus: bad catalog file entry [ 1026.028472][ T9331] hfsplus: b-tree write err: -5, ino 3 [ 1026.686161][T18539] fuse: Bad value for 'fd' [ 1026.794862][T18541] loop4: detected capacity change from 0 to 128 [ 1026.914919][T18541] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1026.959701][T18541] hpfs: filesystem error: improperly stopped [ 1026.966248][T18541] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1026.984740][T18541] hpfs: You really don't want any checks? You are crazy... [ 1026.999098][T18541] hpfs: hpfs_map_sector(): read error [ 1027.013144][T18541] hpfs: code page support is disabled [ 1027.024491][T18541] hpfs: hpfs_map_4sectors(): unaligned read [ 1027.031284][T18541] hpfs: hpfs_map_4sectors(): unaligned read [ 1027.037277][T18541] hpfs: filesystem error: unable to find root dir [ 1029.316761][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 1029.741932][T18559] fuse: Unknown parameter 'fd0x0000000000000003' [ 1029.878833][T16849] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1029.963682][T18568] loop0: detected capacity change from 0 to 512 [ 1030.308712][ T4395] kernel write not supported for file bpf-map (pid: 4395 comm: kworker/0:12) [ 1030.334417][T16849] usb 3-1: Using ep0 maxpacket: 16 [ 1030.890777][T16849] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.925173][T16849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1030.943535][T16849] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1031.026882][T16849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.042461][T18568] EXT4-fs (loop0): 1 truncate cleaned up [ 1031.050492][T18568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1031.085496][T16849] usb 3-1: config 0 descriptor?? [ 1031.098834][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 1031.098855][ T26] audit: type=1800 audit(1775275780.216:36): pid=18568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3469" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1031.538931][T17528] EXT4-fs (loop0): unmounting filesystem. [ 1032.643697][T16849] usbhid 3-1:0.0: can't add hid device: -71 [ 1032.743326][T16849] usbhid: probe of 3-1:0.0 failed with error -71 [ 1032.807871][T18586] ALSA: mixer_oss: invalid OSS volume '' [ 1032.850566][T16849] usb 3-1: USB disconnect, device number 14 [ 1033.040465][T18592] device syzkaller0 entered promiscuous mode [ 1034.578832][T18609] fuse: Unknown parameter 'fd0x0000000000000003' [ 1037.610243][ T4396] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1037.723323][T18639] ALSA: mixer_oss: invalid OSS volume '' [ 1037.788730][T18638] Cannot find add_set index 0 as target [ 1038.020947][ T4396] usb 1-1: Using ep0 maxpacket: 16 [ 1038.088611][ T4396] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.200247][ T4396] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1038.206998][ T4396] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1038.240242][T18645] fuse: Unknown parameter 'fd0x0000000000000003' [ 1038.250324][ T4396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.278218][ T4396] usb 1-1: config 0 descriptor?? [ 1040.107083][T18660] device syzkaller0 entered promiscuous mode [ 1040.140502][T17778] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1040.332384][T17778] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1040.344895][T17778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.355505][T17778] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1040.394974][T17778] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1040.412063][T17778] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1040.420929][T17778] usb 5-1: Manufacturer: syz [ 1040.441017][T17778] usb 5-1: config 0 descriptor?? [ 1040.489853][T17778] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1040.872477][ T4396] usbhid 1-1:0.0: can't add hid device: -71 [ 1040.878549][ T4396] usbhid: probe of 1-1:0.0 failed with error -71 [ 1040.888075][ T4396] usb 1-1: USB disconnect, device number 21 [ 1042.348023][T18684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.454808][T18681] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1045.567416][T18693] ALSA: mixer_oss: invalid OSS volume '' [ 1045.577086][T18681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1045.889725][T17778] usb 5-1: USB disconnect, device number 31 [ 1046.510547][T17780] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1046.750334][T17780] usb 5-1: Using ep0 maxpacket: 16 [ 1046.781409][T17780] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.917722][T17780] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1046.961810][T18711] loop0: detected capacity change from 0 to 1024 [ 1047.001809][T17780] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1047.108327][T18711] ext4: Unknown parameter 'noacl' [ 1047.155632][T17780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.356440][T17780] usb 5-1: config 0 descriptor?? [ 1050.082568][T18724] loop2: detected capacity change from 0 to 512 [ 1050.108125][T18724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1050.212582][T18724] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1050.222698][T18720] device syzkaller0 entered promiscuous mode [ 1050.579421][T18724] EXT4-fs (loop2): failed to open journal device unknown-block(211,83) -6 [ 1051.055034][T17780] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.064004][T17780] usbhid: probe of 5-1:0.0 failed with error -71 [ 1051.100898][T17780] usb 5-1: USB disconnect, device number 32 [ 1051.984519][T18757] ALSA: mixer_oss: invalid OSS volume '' [ 1054.163045][T18761] loop2: detected capacity change from 0 to 164 [ 1054.309206][T18761] Unable to read rock-ridge attributes [ 1054.344647][T18761] Unable to read rock-ridge attributes [ 1054.384039][T18761] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1054.411666][T18761] Unable to read rock-ridge attributes [ 1054.418326][T18761] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1054.485722][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.492142][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.636953][T18749] device syzkaller0 entered promiscuous mode [ 1055.917097][T18781] Set syz1 is full, maxelem 0 reached [ 1056.596201][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1056.791740][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1056.827936][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.839068][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.845838][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1056.855084][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.865305][ T27] usb 3-1: config 0 descriptor?? [ 1059.352584][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1059.361175][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1059.377362][ T27] usb 3-1: USB disconnect, device number 15 [ 1059.483097][T18792] loop2: detected capacity change from 0 to 64 [ 1059.547631][ T26] audit: type=1800 audit(1775275808.666:37): pid=18792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 1059.646653][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.646653][ T7939] loop2: rw=1, sector=161, nr_sectors = 1 limit=64 [ 1059.683608][ T7939] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 1059.704742][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.704742][ T7939] loop2: rw=1, sector=162, nr_sectors = 1 limit=64 [ 1059.718641][ T7939] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 1059.729503][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.729503][ T7939] loop2: rw=1, sector=163, nr_sectors = 1 limit=64 [ 1059.745751][ T7939] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 1059.754960][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.754960][ T7939] loop2: rw=1, sector=167, nr_sectors = 1 limit=64 [ 1059.768911][ T7939] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 1059.778721][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.778721][ T7939] loop2: rw=1, sector=169, nr_sectors = 1 limit=64 [ 1059.792725][ T7939] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 1059.809842][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.809842][ T7939] loop2: rw=1, sector=171, nr_sectors = 1 limit=64 [ 1059.834891][ T7939] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 1059.846031][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.846031][ T7939] loop2: rw=1, sector=172, nr_sectors = 1 limit=64 [ 1059.863163][ T7939] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 1059.872160][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.872160][ T7939] loop2: rw=1, sector=173, nr_sectors = 1 limit=64 [ 1059.886067][ T7939] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 1059.895730][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.895730][ T7939] loop2: rw=1, sector=174, nr_sectors = 1 limit=64 [ 1059.910005][ T7939] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 1059.922180][ T7939] kworker/u4:13: attempt to access beyond end of device [ 1059.922180][ T7939] loop2: rw=1, sector=175, nr_sectors = 1 limit=64 [ 1059.935993][ T7939] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 1060.409520][T18797] ALSA: mixer_oss: invalid OSS volume '' [ 1061.670250][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.847001][T18815] loop1: detected capacity change from 0 to 1024 [ 1062.872043][T18809] device syzkaller0 entered promiscuous mode [ 1062.917351][T18815] ext4: Unknown parameter 'noacl' [ 1064.580384][T16849] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1064.800299][T16849] usb 2-1: Using ep0 maxpacket: 16 [ 1064.826466][T16849] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.862645][T16849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1064.875727][T16849] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1064.935981][T16849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.976199][T16849] usb 2-1: config 0 descriptor?? [ 1065.568045][T18836] ALSA: mixer_oss: invalid OSS volume '' [ 1066.997737][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1067.609790][T16849] usbhid 2-1:0.0: can't add hid device: -71 [ 1067.620508][T16849] usbhid: probe of 2-1:0.0 failed with error -71 [ 1067.657904][T16849] usb 2-1: USB disconnect, device number 19 [ 1071.705313][T18873] Set syz1 is full, maxelem 0 reached [ 1072.002409][T18878] loop2: detected capacity change from 0 to 128 [ 1072.370352][T17778] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1072.669089][T17778] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1073.073228][T17778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.083713][T17778] usb 5-1: Product: syz [ 1073.087997][T17778] usb 5-1: Manufacturer: syz [ 1073.093158][T17778] usb 5-1: SerialNumber: syz [ 1073.205766][T18889] ALSA: mixer_oss: invalid OSS volume '' [ 1073.853063][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1074.290368][T11452] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1074.490531][T11452] usb 1-1: Using ep0 maxpacket: 16 [ 1074.502168][T11452] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.562984][T11452] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1074.588333][T11452] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1074.618578][T11452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.648112][T11452] usb 1-1: config 0 descriptor?? [ 1074.719051][T18895] device syzkaller0 entered promiscuous mode [ 1075.245521][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1076.100266][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1076.108988][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.133564][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1076.143408][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.169645][ T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1076.191564][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1076.208413][ T27] usb 3-1: Product: syz [ 1076.212802][ T27] usb 3-1: Manufacturer: syz [ 1076.240040][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 1076.247296][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 1076.272387][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -71 [ 1076.308333][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 1076.343916][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 1076.366105][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 1076.378132][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1076.384363][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 1076.390944][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 1076.436385][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 1076.469015][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 1076.490793][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 1076.520298][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1076.549175][T17778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1076.558827][ T27] usb 3-1: USB disconnect, device number 16 [ 1076.566223][T17778] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1076.610882][T17778] usb 5-1: USB disconnect, device number 33 [ 1077.101864][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1077.164244][T11452] usbhid 1-1:0.0: can't add hid device: -71 [ 1077.170546][T11452] usbhid: probe of 1-1:0.0 failed with error -71 [ 1077.179699][T11452] usb 1-1: USB disconnect, device number 22 [ 1077.312835][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1077.350251][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.385474][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.425603][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.498876][ T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.538720][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.567956][ T27] usb 3-1: Product: syz [ 1077.586067][ T27] usb 3-1: Manufacturer: syz [ 1077.641929][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 1077.672632][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 1077.719833][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1077.741128][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 1077.878049][ T27] usb 3-1: USB disconnect, device number 17 [ 1078.313115][T18922] loop0: detected capacity change from 0 to 64 [ 1078.377649][ T26] audit: type=1800 audit(1775275827.496:38): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3569" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 1078.461869][ T9653] bio_check_eod: 111 callbacks suppressed [ 1078.461888][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.461888][ T9653] loop0: rw=1, sector=161, nr_sectors = 1 limit=64 [ 1078.513204][ T9653] buffer_io_error: 94 callbacks suppressed [ 1078.513224][ T9653] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 1078.559444][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.559444][ T9653] loop0: rw=1, sector=162, nr_sectors = 1 limit=64 [ 1078.608083][ T9653] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 1078.643642][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.643642][ T9653] loop0: rw=1, sector=163, nr_sectors = 1 limit=64 [ 1078.697192][ T9653] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 1078.729735][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.729735][ T9653] loop0: rw=1, sector=167, nr_sectors = 1 limit=64 [ 1078.760353][ T9653] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 1078.786991][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.786991][ T9653] loop0: rw=1, sector=169, nr_sectors = 1 limit=64 [ 1078.847946][ T9653] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 1078.886450][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.886450][ T9653] loop0: rw=1, sector=171, nr_sectors = 1 limit=64 [ 1078.902499][ T9653] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 1078.921126][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.921126][ T9653] loop0: rw=1, sector=172, nr_sectors = 1 limit=64 [ 1078.941849][ T9653] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 1078.956689][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.956689][ T9653] loop0: rw=1, sector=173, nr_sectors = 1 limit=64 [ 1078.979648][ T9653] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 1078.992203][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1078.992203][ T9653] loop0: rw=1, sector=174, nr_sectors = 1 limit=64 [ 1079.016212][ T9653] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 1079.028230][ T9653] kworker/u4:22: attempt to access beyond end of device [ 1079.028230][ T9653] loop0: rw=1, sector=175, nr_sectors = 1 limit=64 [ 1079.060546][ T9653] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 1081.032068][T18924] [ 1081.034471][T18924] ============================================ [ 1081.040746][T18924] WARNING: possible recursive locking detected [ 1081.046915][T18924] syzkaller #0 Not tainted [ 1081.051354][T18924] -------------------------------------------- [ 1081.057504][T18924] syz.0.3569/18924 is trying to acquire lock: [ 1081.063572][T18924] ffff8880621240b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1081.072895][T18924] [ 1081.072895][T18924] but task is already holding lock: [ 1081.080362][T18924] ffff8880621240b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1081.089809][T18924] [ 1081.089809][T18924] other info that might help us debug this: [ 1081.097881][T18924] Possible unsafe locking scenario: [ 1081.097881][T18924] [ 1081.105411][T18924] CPU0 [ 1081.108709][T18924] ---- [ 1081.111985][T18924] lock(&tree->tree_lock/1); [ 1081.116752][T18924] lock(&tree->tree_lock/1); [ 1081.121523][T18924] [ 1081.121523][T18924] *** DEADLOCK *** [ 1081.121523][T18924] [ 1081.130022][T18924] May be due to missing lock nesting notation [ 1081.130022][T18924] [ 1081.138435][T18924] 5 locks held by syz.0.3569/18924: [ 1081.143726][T18924] #0: ffff8880785b8460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1081.152981][T18924] #1: ffff8880285b9628 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 1081.163354][T18924] #2: ffff8880285b9478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1081.174077][T18924] #3: ffff8880621240b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1081.183945][T18924] #4: ffff8880285ba7f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1081.195201][T18924] [ 1081.195201][T18924] stack backtrace: [ 1081.201096][T18924] CPU: 1 PID: 18924 Comm: syz.0.3569 Not tainted syzkaller #0 [ 1081.208664][T18924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.218722][T18924] Call Trace: [ 1081.222090][T18924] [ 1081.225104][T18924] dump_stack_lvl+0x188/0x24e [ 1081.229805][T18924] ? show_regs_print_info+0x12/0x12 [ 1081.235023][T18924] ? load_image+0x400/0x400 [ 1081.239545][T18924] __lock_acquire+0x123e/0x7d10 [ 1081.244495][T18924] ? mark_lock+0x94/0x320 [ 1081.248835][T18924] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1081.254822][T18924] ? verify_lock_unused+0x140/0x140 [ 1081.260114][T18924] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1081.266194][T18924] ? _raw_spin_unlock+0x40/0x40 [ 1081.271070][T18924] ? stack_trace_save+0xa6/0xf0 [ 1081.275947][T18924] ? __stack_depot_save+0x421/0x460 [ 1081.281166][T18924] lock_acquire+0x1bb/0x4a0 [ 1081.285684][T18924] ? hfs_find_init+0x15b/0x1d0 [ 1081.290477][T18924] ? hfs_extend_file+0x35d/0x13f0 [ 1081.295547][T18924] ? hfs_bmap_reserve+0x103/0x420 [ 1081.300582][T18924] ? block_write_begin+0x96/0x1e0 [ 1081.305623][T18924] ? __might_sleep+0xd0/0xd0 [ 1081.310478][T18924] ? hfs_write_begin+0x87/0xd0 [ 1081.315435][T18924] ? read_lock_is_recursive+0x10/0x10 [ 1081.320811][T18924] ? do_truncate+0x1ac/0x240 [ 1081.325404][T18924] ? vfs_truncate+0x262/0x2f0 [ 1081.330077][T18924] ? do_sys_truncate+0xf2/0x1c0 [ 1081.334948][T18924] ? do_syscall_64+0x4c/0xa0 [ 1081.339555][T18924] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.345725][T18924] __mutex_lock+0x12d/0xaf0 [ 1081.350238][T18924] ? hfs_find_init+0x15b/0x1d0 [ 1081.355009][T18924] ? hfs_find_init+0x15b/0x1d0 [ 1081.359787][T18924] ? mutex_lock_nested+0x10/0x10 [ 1081.364727][T18924] ? __kmem_cache_alloc_node+0x140/0x260 [ 1081.370361][T18924] ? hfs_find_init+0x84/0x1d0 [ 1081.375161][T18924] ? hfs_find_init+0x84/0x1d0 [ 1081.379839][T18924] ? __kmalloc+0xe1/0x240 [ 1081.384180][T18924] hfs_find_init+0x15b/0x1d0 [ 1081.388772][T18924] hfs_extend_file+0x35d/0x13f0 [ 1081.393675][T18924] ? hfs_bnode_read+0x354/0x7a0 [ 1081.398547][T18924] ? hfs_ext_keycmp+0x1c3/0x310 [ 1081.403421][T18924] ? hfs_get_block+0xc50/0xc50 [ 1081.408221][T18924] ? hfs_rename+0x320/0x320 [ 1081.412902][T18924] ? hfs_find_exit+0xa0/0xa0 [ 1081.417531][T18924] ? hfs_brec_find+0x3c9/0x500 [ 1081.422918][T18924] hfs_bmap_reserve+0x103/0x420 [ 1081.427868][T18924] __hfs_ext_write_extent+0x1fa/0x470 [ 1081.433253][T18924] __hfs_ext_cache_extent+0x6b/0x9b0 [ 1081.438660][T18924] ? hfs_find_init+0x15b/0x1d0 [ 1081.443538][T18924] hfs_extend_file+0x39c/0x13f0 [ 1081.448406][T18924] ? filemap_get_folios+0x103/0x780 [ 1081.453710][T18924] ? hfs_get_block+0xc50/0xc50 [ 1081.458567][T18924] ? filemap_get_folios+0x103/0x780 [ 1081.463768][T18924] ? find_lock_entries+0xbb0/0xbb0 [ 1081.468884][T18924] ? clean_bdev_aliases+0x682/0x790 [ 1081.474187][T18924] hfs_get_block+0x40f/0xc50 [ 1081.478791][T18924] ? hfs_free_extents+0x430/0x430 [ 1081.483840][T18924] ? do_raw_spin_unlock+0x11d/0x230 [ 1081.489034][T18924] ? create_page_buffers+0x24f/0x4a0 [ 1081.494428][T18924] __block_write_begin_int+0x55d/0x1a80 [ 1081.499978][T18924] ? filemap_add_folio+0x188/0x3c0 [ 1081.505183][T18924] ? xas_load+0x127/0x140 [ 1081.509544][T18924] ? hfs_free_extents+0x430/0x430 [ 1081.514596][T18924] ? page_zero_new_buffers+0x650/0x650 [ 1081.520064][T18924] ? PageHeadHuge+0x8f/0x1c0 [ 1081.524652][T18924] ? hfs_free_extents+0x430/0x430 [ 1081.529698][T18924] block_write_begin+0x96/0x1e0 [ 1081.534551][T18924] cont_write_begin+0x5ea/0x800 [ 1081.539438][T18924] ? generic_cont_expand_simple+0x200/0x200 [ 1081.545367][T18924] ? put_page+0xea/0x270 [ 1081.549644][T18924] hfs_write_begin+0x87/0xd0 [ 1081.554259][T18924] ? hfs_free_extents+0x430/0x430 [ 1081.559306][T18924] cont_write_begin+0x2ad/0x800 [ 1081.564223][T18924] ? generic_cont_expand_simple+0x200/0x200 [ 1081.570315][T18924] ? mark_lock+0x94/0x320 [ 1081.574676][T18924] ? truncate_inode_pages_range+0x3a9/0x1090 [ 1081.580794][T18924] hfs_write_begin+0x87/0xd0 [ 1081.585411][T18924] ? hfs_free_extents+0x430/0x430 [ 1081.590457][T18924] hfs_file_truncate+0x1c0/0xa10 [ 1081.595515][T18924] ? __up_read+0x2b2/0x6b0 [ 1081.599936][T18924] ? hfs_extend_file+0x13f0/0x13f0 [ 1081.605064][T18924] ? unmap_mapping_range+0x91/0x100 [ 1081.610316][T18924] hfs_inode_setattr+0x4ab/0x6f0 [ 1081.615347][T18924] ? security_inode_setattr+0xd8/0x140 [ 1081.620813][T18924] ? try_break_deleg+0x79/0x120 [ 1081.625666][T18924] ? hfs_evict_inode+0x100/0x100 [ 1081.630689][T18924] notify_change+0xc74/0xf40 [ 1081.635293][T18924] do_truncate+0x1ac/0x240 [ 1081.639725][T18924] ? put_page_bootmem+0x2c0/0x2c0 [ 1081.644766][T18924] ? bpf_lsm_path_truncate+0x5/0x10 [ 1081.650070][T18924] vfs_truncate+0x262/0x2f0 [ 1081.654598][T18924] do_sys_truncate+0xf2/0x1c0 [ 1081.659391][T18924] ? lock_chain_count+0x20/0x20 [ 1081.664254][T18924] ? break_lease+0xd0/0xd0 [ 1081.668684][T18924] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.673896][T18924] do_syscall_64+0x4c/0xa0 [ 1081.678547][T18924] ? clear_bhb_loop+0x60/0xb0 [ 1081.683233][T18924] ? clear_bhb_loop+0x60/0xb0 [ 1081.687925][T18924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.693864][T18924] RIP: 0033:0x7f6ae779c819 [ 1081.698278][T18924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.717889][T18924] RSP: 002b:00007f6ae86cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1081.726424][T18924] RAX: ffffffffffffffda RBX: 00007f6ae7a16090 RCX: 00007f6ae779c819 [ 1081.734409][T18924] RDX: 0000000000000000 RSI: 0000000002fffffd RDI: 0000200000000940 [ 1081.742397][T18924] RBP: 00007f6ae7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1081.750390][T18924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.758367][T18924] R13: 00007f6ae7a16128 R14: 00007f6ae7a16090 R15: 00007fff24107d78 [ 1081.766369][T18924]