last executing test programs: 4.481027982s ago: executing program 4 (id=1952): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400000040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0xffff0001, 0x8a, 0x664, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$printer(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 3.45071028s ago: executing program 1 (id=1958): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0xfffffffffffffcee, 0x24008850, &(0x7f0000005780)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.349084706s ago: executing program 1 (id=1962): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1e, 0x1517, &(0x7f0000003040)="$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") syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.023610366s ago: executing program 1 (id=1966): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 2.87362252s ago: executing program 1 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet(r3, &(0x7f0000003300)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="dba1f6d63215f4cd2de3ea822468cbad6468519f3ae11932c16d1b1d53eef8c2f39fb239a209da1afde2bc2aeeed68b750ece14291e0c7ff5d0fd554031e92862125138c6194f9952350483bfa737d2579c64f8a562c0659e3b4959c2113cae76d39f49a619fd0ea2051fbb64021e448f0c7a9b4871dfa9ddb23ddec05eb6e8575ec15206da0365d682ad2f8d22afc8a6bf81f26e59c2d6e6be16c6d250eabd0116eba1ef31105177a9383fcd2049f7d10adc69ac223b3f759f9e7e2d57f870fffd7369de0ac7f5109fe7eb4b2c038e4fb8fd447d28f2bbce1e65ae49a64b7167d8d657361616e301414dcf5529e2f7e166667eb584f0c7ae4017aecbbdce8dcb3b281b0f358971ecea54aeb7f59d1df20ef92ba7adeba35631e12b910bc34c70beb6aa8fe4223be2f35d563ada7a73afa406f125ad863de746cf87e6f387c6a7550081c96f92086eae5ada7513d1757996a26349d400c5be67c48186d1a497fcd4ad19f4d222f20e738dbc66962e1eb070e62a19b2dfb8ce6a801c405d9e19f79f9c45d07487bc09757072fd44412a6afcbfce71908f6ea995676587b79706005fb0796a7fce46a174d26a83215681c4900b07a9cd4a3b391bf6303ec6967ad5389dcb01c0e5f705140f0075d9ee0f06dcfdfd63a46e055650e7d246adc235b2fbd774c3fa3f789674401c17b18765b8ea616021f87fcccc297776bf5e55f18a710c0639077b980ab87220ab57205c115e3b14f0d6f5b82e596249fc6d3e2d68a8727231a1a012afde839cb9e52d72aa7386df3208a92795eeeda235b7d57ac207186c646f957bdce39527873347f76fefd1ce7718eb02d28db411b9bd591f2f98f41594a910e393ed1fe6c8138c7aee81ee90c806655f08d03562fb46125d48ab94805ab7547f96fa3d2efb16d90318c5a3b553ecf48d9d06dac0b4d67cb33ccc3575d7c139d193ae29271ccf89eea2654855ec3ad55c71eacea48bcfdfcd5563d9a121a6dbfc4048c75a425d1b25875fc3d64cd16ab3b932e2cf6f2cb2456dd83ef4d7771a3487f37074f4f67678e534ee45de86d11636bd4b126d026e987c949c40a13259e765f4694497094636fc56eab8287446f12799269f7893c8205984c8191fb8cc06480634bd75fffb8de665fcff9b246d7e31157cdd32f556854b80dacce558fbba78e3ae32dc18bfc6d12885dde1552743bbe48250d545b11322980ae0f4009ad7ed273c7c1746cb5b2e28b4abb3705c77257518b0f28b5ffd39a52c7e84ea3258425636604d75b9c1f15f9cca3dd0e54bc65682142282ed805829577d14f5e5533bf7d15fd4865bf649ef3f8f49e896e849682faff8b16786b34f8f4d380f2ce3d00fa7253aa9de803e4b8df363f16f9a66c05517a7d06702b52395a45ad49d643939b5e013a0572d422d96b09556d5b3d9ff69082c9bfc76d895ae58c59cdd729b0917ce43b384332877ac460deb7d82f35c34a81b3d842b6f9a21ec790e7b4c0526a9ac6956a2defd57723bbd8dbe12672fe88b6b4835ae79cddab0f9daad03f27121948eca6b1f7fbce0fcc55515b7e3e05a5d91321a3a47ed3ecee55cfd21fc2e053da805a1c2716dacfbc7f9b8b9215f7138e945742403a09ae65d6392fc45a911c2962ffdfa70c0746e873e11d83730087c2812e07bc909bc0139d35cb22f5b8e19477a7a4d7039e7ce960ff8c7e0f0098b0d2da58b8f4df4d4386acc2ac5595ee7b3753c4608a1e04743ad5e35c40562927b5cf7272bd2dbd8aac860f69493ff502e80d38fd868d8e9815f523a6b03fa7ab6905393e987937e81cf287961f31685c7b67aaeec10fb8a839af94f5d59bd939e1380e9a70228cdece9e7bddbcab676f526630b8b33706ecde3c2248ef7f608d91bac00a73c5c59a2d7b24615d7a4ed71e1b11ad36803a947caf0d3c13d939e96ed62d7b40bfd823f1f4c8bbc4d34f166e7791691229567332c5e14cb22cd7dd160360b473976cca4940000bf561ce738d4c35a89f090361acad1c411c27654c7fca5397b4b9d59b782e88abbe", 0x5a9}], 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x28, 0x4, 0x2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000001d80)={0x4, "f3de5af7dd11d2c7c8aca6488a8f0006439065833ad65a82f95c892039cb311f"}) finit_module(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7fff}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='westwood\x00', 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)='g', 0x1}], 0x1) 2.119755645s ago: executing program 1 (id=1975): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204409, &(0x7f00000003c0)={[{@space_cache_v1}, {@clear_cache}, {@nodiscard}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x50009403, 0x0) 1.865226984s ago: executing program 3 (id=1981): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}) 1.729278005s ago: executing program 4 (id=1985): creat(&(0x7f0000000e00)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000200), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000340)='contention_begin\x00', &(0x7f0000000900)='host1x_cdma_push_wide\x00', 0x0) fcntl$setsig(r3, 0xa, 0x21) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x28011, r5, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) pivot_root(&(0x7f0000000140)='./file1\x00', 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x0, 0x0, 0x7e, 0x0, 'syz0\x00', 0x9}, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000640)}) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)={0x20000000}) 1.588229466s ago: executing program 0 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x804854, &(0x7f0000000a40), 0x6, 0x75d, &(0x7f0000001f40)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0}) 1.352695023s ago: executing program 0 (id=1988): r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "bae166af"}, &(0x7f0000000200)=0x2c) 1.222860183s ago: executing program 0 (id=1989): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 1.110041889s ago: executing program 0 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x8, 0x5}}}}]}, 0x30}}, 0x0) 1.04101365s ago: executing program 0 (id=1993): syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003540)=""/4096, 0x38}], 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 921.309569ms ago: executing program 0 (id=1996): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400000040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0xffff0001, 0x8a, 0x664, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$printer(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 876.155916ms ago: executing program 3 (id=1997): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 875.621846ms ago: executing program 2 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="83a15ab22ee3", 'virt_wifi0\x00'}}, 0x1e) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050000000400000000002100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r4, @ANYBLOB="20032cbd7000fedbdf25010000000800020000"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c005) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000028000701000000000000000001"], 0x14}}, 0x0) 875.400626ms ago: executing program 1 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 668.195237ms ago: executing program 3 (id=2000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 540.716647ms ago: executing program 3 (id=2001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xbe, 0x0, &(0x7f0000000000)) 536.180618ms ago: executing program 2 (id=2002): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 476.373977ms ago: executing program 3 (id=2003): unshare(0x20000400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 399.584009ms ago: executing program 2 (id=2004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x8, 0x5}}}}]}, 0x30}}, 0x0) 355.759705ms ago: executing program 2 (id=2005): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)=""/2, 0xfffffcc8}], 0x1}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) close(r0) 355.108156ms ago: executing program 3 (id=2006): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000540)=@gcm_256={{}, "dd1f67eeaee232bc", "33dcff273dcda64434083fc81269ec10a61ee1d936119116fc6dfa718b8b5f9a", "15f71a38", "56544408ce8ac9f0"}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="00fcd7f67a6300000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00ac1414bb"], 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="666494", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000006380)=""/1024, 0x400) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="bf816f6117a169332646f7dc28b9780ff283756f82796d82fa6c74526a6f34fcf434410893dfa300a1789b19186d0af892a09fb0c4e4dc47b2ebc130e673909251a11daeae5565800bf425e24767729803b02e6f70e179c2ac69dbc094864ecd4be828d6d765", 0x66}, {&(0x7f0000000a80)="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", 0x512}], 0x2}, 0x8940) sendto$inet6(r7, &(0x7f00000002c0)="e2", 0x1, 0x8000, 0x0, 0x0) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc902ce8cb5049e077f3ba9", 0xc}], 0x1) 173.326203ms ago: executing program 2 (id=2007): syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003540)=""/4096, 0x38}], 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 171.925714ms ago: executing program 4 (id=2008): r0 = io_uring_setup(0x1139, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/4093, 0xffd}], 0x133f) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000004c0)}], &(0x7f0000000540), 0x2}, 0x20) 117.946722ms ago: executing program 2 (id=2009): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}) 63.54146ms ago: executing program 4 (id=2010): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 21.775487ms ago: executing program 4 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 4 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="83a15ab22ee3", 'virt_wifi0\x00'}}, 0x1e) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050000000400000000002100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r4, @ANYBLOB="20032cbd7000fedbdf25010000000800020000"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c005) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000028000701000000000000000001"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): ot using interface batadv_slave_0 (retrying later): interface not active [ 288.336116][ T3912] usb 5-1: USB disconnect, device number 16 [ 288.360335][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.367853][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.421028][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.510178][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 288.568469][ T8522] device hsr_slave_0 entered promiscuous mode [ 288.585794][ T8522] device hsr_slave_1 entered promiscuous mode [ 288.593106][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.600879][ T8522] Cannot create hsr debugfs directory [ 288.763089][ T3584] device hsr_slave_0 left promiscuous mode [ 288.771087][ T3584] device hsr_slave_1 left promiscuous mode [ 288.778756][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.786627][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.796328][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.824476][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.875331][ T3584] device bridge_slave_1 left promiscuous mode [ 288.893286][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.913469][ T3584] device bridge_slave_0 left promiscuous mode [ 288.920134][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.964093][ T3584] device veth1_macvtap left promiscuous mode [ 288.970165][ T3584] device veth0_macvtap left promiscuous mode [ 288.977332][ T3584] device veth1_vlan left promiscuous mode [ 288.984992][ T3584] device veth0_vlan left promiscuous mode [ 289.052280][ T4387] usb 3-1: USB disconnect, device number 12 [ 289.471710][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 289.488744][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 289.544355][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.486829][ T8639] loop0: detected capacity change from 0 to 32768 [ 290.496532][ T4009] Bluetooth: hci3: command 0x041b tx timeout [ 290.505394][ T3912] Bluetooth: hci0: command 0x0409 tx timeout [ 290.512919][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.556474][ T8639] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1355 (8639) [ 290.604633][ T3584] bond0 (unregistering): Released all slaves [ 290.616748][ T8639] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 290.626650][ T8639] BTRFS info (device loop0): using free space tree [ 290.633459][ T8639] BTRFS info (device loop0): has skinny extents [ 290.668804][ T8639] BTRFS info (device loop0): enabling ssd optimizations [ 290.889239][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.919961][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.929477][ T8589] device bridge_slave_0 entered promiscuous mode [ 290.956650][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.984977][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.999931][ T8589] device bridge_slave_1 entered promiscuous mode [ 291.034938][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 291.422146][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.553558][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.683911][ T8589] team0: Port device team_slave_0 added [ 291.758615][ T8589] team0: Port device team_slave_1 added [ 291.873872][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.880888][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.909635][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.931587][ T3918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 291.947388][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.967380][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.996121][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.227827][ T8589] device hsr_slave_0 entered promiscuous mode [ 292.258404][ T8589] device hsr_slave_1 entered promiscuous mode [ 292.277573][ T8589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.289814][ T8589] Cannot create hsr debugfs directory [ 292.311865][ T3918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.348393][ T3918] usb 1-1: config 0 has no interfaces? [ 292.367581][ T3918] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 292.385644][ T3918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.397879][ T3918] usb 1-1: config 0 descriptor?? [ 292.465310][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 292.545297][ T8522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.564149][ T3918] Bluetooth: hci0: command 0x041b tx timeout [ 292.570256][ T3918] Bluetooth: hci3: command 0x040f tx timeout [ 292.593510][ T8522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.662477][ T8522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.691461][ T8522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.773914][ T8589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.871162][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.888767][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.919873][ T8667] device bridge_slave_0 entered promiscuous mode [ 292.959299][ T8589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.001285][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.010900][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.032619][ T8667] device bridge_slave_1 entered promiscuous mode [ 293.103814][ T8716] loop0: detected capacity change from 0 to 256 [ 293.150392][ T8589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.265761][ T8589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.367719][ T3918] usb 1-1: USB disconnect, device number 11 [ 293.394506][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.441501][ T4104] Bluetooth: hci1: command 0x0409 tx timeout [ 293.448754][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.580277][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 293.609670][ T8667] team0: Port device team_slave_0 added [ 293.643858][ T8667] team0: Port device team_slave_1 added [ 293.696146][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.711489][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.749383][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.790810][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.810809][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.821956][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.858711][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.906780][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.932430][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.955745][ T8589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.988213][ T8589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 294.046529][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.144207][ T8589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 294.169004][ T8589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.219584][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.252212][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.261042][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.268346][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.373225][ T8667] device hsr_slave_0 entered promiscuous mode [ 294.408449][ T8667] device hsr_slave_1 entered promiscuous mode [ 294.416034][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.427498][ T8667] Cannot create hsr debugfs directory [ 294.438356][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.455188][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.469876][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.478924][ T4809] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.486046][ T4809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.495820][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.506152][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.594000][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.624816][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.643677][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.672860][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.702455][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.731651][ T8765] loop0: detected capacity change from 0 to 256 [ 294.732492][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.762869][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.775147][ T8522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.792169][ T4387] Bluetooth: hci3: command 0x0419 tx timeout [ 294.802272][ T4387] Bluetooth: hci0: command 0x040f tx timeout [ 294.814366][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.860543][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.869415][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.049591][ T8667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.146423][ T8667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.243119][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.280329][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.289764][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.322169][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.336850][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.365019][ T8667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.397664][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.417973][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.469221][ T8667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.511598][ T3914] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 295.521674][ T3917] Bluetooth: hci1: command 0x041b tx timeout [ 295.531845][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.801162][ T8792] loop0: detected capacity change from 0 to 32768 [ 295.809677][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.818766][ T8792] XFS: attr2 mount option is deprecated. [ 295.824515][ T8792] XFS: noikeep mount option is deprecated. [ 295.833866][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.840957][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.854664][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.863717][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.872291][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.872772][ T3914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.879362][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.898779][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.933316][ T3914] usb 5-1: config 0 has no interfaces? [ 295.939170][ T8792] XFS (loop0): Mounting V5 Filesystem [ 295.979935][ T3914] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 295.994038][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.004302][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.013673][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.023016][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.030705][ T3914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.072627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.080846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.101915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.112075][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.129588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.131253][ T3914] usb 5-1: config 0 descriptor?? [ 296.171192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.201283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.211047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.220073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.229881][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.241976][ T8792] XFS (loop0): Ending clean mount [ 296.267474][ T8792] XFS (loop0): Quotacheck needed: Please wait. [ 296.346128][ T8792] XFS (loop0): Quotacheck: Done. [ 296.363671][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.383812][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.424235][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.482281][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.640705][ T8522] device veth0_vlan entered promiscuous mode [ 296.684960][ T8522] device veth1_vlan entered promiscuous mode [ 297.083549][ T5912] Bluetooth: hci0: command 0x0419 tx timeout [ 297.136839][ T8667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.195997][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.216251][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.252230][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.292330][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.301832][ T8667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.335974][ T8522] device veth0_macvtap entered promiscuous mode [ 297.365131][ T6867] XFS (loop0): Unmounting Filesystem [ 297.372755][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.457356][ T8667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.476609][ T8667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.503159][ T8522] device veth1_macvtap entered promiscuous mode [ 297.519834][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.543233][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.552097][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.609346][ T3547] Bluetooth: hci1: command 0x040f tx timeout [ 297.629965][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.649473][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.662630][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.681809][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.695652][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.706576][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.716994][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.727949][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.753491][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.760010][ T8820] loop4: detected capacity change from 0 to 256 [ 297.784607][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.795436][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.808575][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.819729][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.830060][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.840538][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.851214][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.862016][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.873460][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.897644][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.910469][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.957864][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.970220][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.988052][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.997484][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.020551][ T8522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.044916][ T8522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.057047][ T8522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.066601][ T8522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.137178][ T8589] device veth0_vlan entered promiscuous mode [ 298.166743][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.184349][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.206435][ T3918] usb 5-1: USB disconnect, device number 17 [ 298.253305][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.267933][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.282673][ T8589] device veth1_vlan entered promiscuous mode [ 298.362992][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.450949][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.465197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.475646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.485131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.493543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.520408][ T4167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.556669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.569773][ T4167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.569798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.596197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.606206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.615508][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.622771][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.630901][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.640027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.649565][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.656680][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.665350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.673694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.693755][ T8589] device veth0_macvtap entered promiscuous mode [ 298.738931][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.748224][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.757721][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.767545][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.778688][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.788165][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.799724][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.819347][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.854757][ T8589] device veth1_macvtap entered promiscuous mode [ 298.907355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.918001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.929278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.957097][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.986379][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.002234][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.003223][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.020954][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.034784][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.042332][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.042355][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.042368][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.042383][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.042396][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.042411][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.042423][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.042437][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.042450][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.140759][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.153990][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.189942][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.198324][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.231051][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.285132][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.303757][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.332811][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.354904][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.381449][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.392521][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.402732][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.413429][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.424599][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.435298][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.448276][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.458959][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.478190][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.521256][ T8589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.528604][ T8850] loop3: detected capacity change from 0 to 64 [ 299.542334][ T8589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.552217][ T8589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.561223][ T8589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.691634][ T4810] Bluetooth: hci1: command 0x0419 tx timeout [ 299.724823][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.733430][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.798619][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.986183][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.996963][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.047756][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.070236][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.087814][ T8667] device veth0_vlan entered promiscuous mode [ 300.113730][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.124153][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.142536][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.177649][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.180548][ T8667] device veth1_vlan entered promiscuous mode [ 300.192357][ T3918] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 300.196783][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.262075][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.270041][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.288616][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.334322][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.429331][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.438510][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.448991][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.473253][ T8667] device veth0_macvtap entered promiscuous mode [ 300.525567][ T8667] device veth1_macvtap entered promiscuous mode [ 300.551630][ T3918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.595563][ T3918] usb 1-1: config 0 has no interfaces? [ 300.601101][ T3918] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 300.608597][ T8873] loop3: detected capacity change from 0 to 2048 [ 300.620402][ T3918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.639565][ T3918] usb 1-1: config 0 descriptor?? [ 300.648543][ T3584] device hsr_slave_0 left promiscuous mode [ 300.667440][ T3584] device hsr_slave_1 left promiscuous mode [ 300.674428][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.683060][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.693684][ T8873] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.709738][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.716658][ T8873] ext4 filesystem being mounted at /root/syzkaller.6dfYpT/5/bus supports timestamps until 2038 (0x7fffffff) [ 300.719351][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.739418][ T3584] device bridge_slave_1 left promiscuous mode [ 300.746345][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.758426][ T3584] device bridge_slave_0 left promiscuous mode [ 300.765316][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.779604][ T3584] device hsr_slave_0 left promiscuous mode [ 300.786319][ T3584] device hsr_slave_1 left promiscuous mode [ 300.796596][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.805168][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.822855][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.830535][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.839842][ T3584] device bridge_slave_1 left promiscuous mode [ 300.846681][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.856319][ T3584] device bridge_slave_0 left promiscuous mode [ 300.863001][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.916186][ T3584] device veth1_macvtap left promiscuous mode [ 300.936881][ T3584] device veth0_macvtap left promiscuous mode [ 300.945138][ T8878] loop3: detected capacity change from 0 to 64 [ 300.962435][ T3584] device veth1_vlan left promiscuous mode [ 300.970772][ T3584] device veth0_vlan left promiscuous mode [ 300.982637][ T3584] device veth1_macvtap left promiscuous mode [ 300.988794][ T3584] device veth0_macvtap left promiscuous mode [ 301.004051][ T3584] device veth1_vlan left promiscuous mode [ 301.011786][ T3584] device veth0_vlan left promiscuous mode [ 301.429172][ T8885] loop0: detected capacity change from 0 to 256 [ 301.599074][ T3545] usb 1-1: USB disconnect, device number 12 [ 301.625474][ T8898] 9pnet: Insufficient options for proto=fd [ 301.721068][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 301.742655][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 301.756828][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.773263][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.852670][ T3584] bond0 (unregistering): Released all slaves [ 302.010553][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 302.026361][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 302.039543][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.056918][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.139126][ T3584] bond0 (unregistering): Released all slaves [ 302.199716][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.210793][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.221261][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.232001][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.241934][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.252529][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.262431][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.273354][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.286524][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.326219][ T8901] loop0: detected capacity change from 0 to 64 [ 302.328497][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.341119][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.349820][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.365383][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.410247][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.411690][ T4810] Bluetooth: hci4: command 0x0409 tx timeout [ 302.447074][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.463662][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.474631][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.485284][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.499707][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.521657][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.534048][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.545947][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.562451][ T8905] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1412'. [ 302.582417][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.625149][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.648047][ T8667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.679627][ T8667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.719243][ T8667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.741212][ T8667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.039611][ T8925] 9pnet: Insufficient options for proto=fd [ 303.079754][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 303.085123][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.146549][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.180128][ T4167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.215289][ T3917] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.232245][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.238315][ T8931] loop0: detected capacity change from 0 to 4096 [ 303.249878][ T4167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.305698][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.326660][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.330971][ T8931] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 303.358497][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.391580][ T8865] device bridge_slave_0 entered promiscuous mode [ 303.439747][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.478337][ T26] audit: type=1326 audit(1719598972.272:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.1.1425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffacb3b7b99 code=0x0 [ 303.531545][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.552341][ T8865] device bridge_slave_1 entered promiscuous mode [ 303.616871][ T3917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.630481][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.645187][ T3917] usb 4-1: config 0 has no interfaces? [ 303.655636][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.665709][ T3917] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 303.678605][ T3917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.697838][ T3917] usb 4-1: config 0 descriptor?? [ 303.765763][ T8865] team0: Port device team_slave_0 added [ 303.777092][ T8865] team0: Port device team_slave_1 added [ 303.811771][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.819343][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.847045][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.857853][ T8946] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1426'. [ 303.886585][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.931795][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.958377][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 303.970619][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.058725][ T8865] device hsr_slave_0 entered promiscuous mode [ 304.083181][ T8865] device hsr_slave_1 entered promiscuous mode [ 304.351673][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.379801][ T8953] loop3: detected capacity change from 0 to 256 [ 304.389150][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.424229][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.462889][ T7] usb 3-1: config 0 descriptor?? [ 304.488438][ T8961] 9pnet: Insufficient options for proto=fd [ 304.496405][ T5912] Bluetooth: hci4: command 0x041b tx timeout [ 304.554430][ T8963] hub 6-0:1.0: USB hub found [ 304.559494][ T8963] hub 6-0:1.0: 1 port detected [ 304.566189][ T8865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.608672][ T3545] usb 4-1: USB disconnect, device number 16 [ 304.675904][ T8865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.748576][ T8968] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1436'. [ 304.802812][ T8865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.841749][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 304.853847][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 304.873519][ T7] usb 3-1: USB disconnect, device number 13 [ 304.913261][ T8865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.140744][ T8865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.208872][ T8865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.242995][ T8865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.264247][ T8865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.358913][ T26] audit: type=1326 audit(1719598974.152:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ca219b99 code=0x0 [ 305.582762][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.610003][ T8989] loop3: detected capacity change from 0 to 256 [ 305.629548][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.644394][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.686516][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.734138][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.762908][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.782024][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.789255][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.819542][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'. [ 305.903987][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.922175][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.930921][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.982814][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.990004][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.032161][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.048857][ T26] audit: type=1800 audit(1719598974.842:179): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1447" name="file0" dev="sda1" ino=2012 res=0 errno=0 [ 306.095638][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.112566][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.153299][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.172320][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.205611][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.238536][ T26] audit: type=1800 audit(1719598975.032:180): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1447" name="/" dev="fuse" ino=1 res=0 errno=0 [ 306.273102][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.291940][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.300575][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.350369][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.372211][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.383434][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.561988][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 306.586816][ T9020] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 306.732303][ T9027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1457'. [ 306.779402][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.810768][ T26] audit: type=1326 audit(1719598975.602:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.2.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x0 [ 306.850511][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.859022][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.098035][ T9040] device sit0 entered promiscuous mode [ 307.236985][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 307.295410][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.310442][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.357547][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.370524][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.388881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.402338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.422065][ T8865] device veth0_vlan entered promiscuous mode [ 307.456407][ T8865] device veth1_vlan entered promiscuous mode [ 307.530854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.542972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.555492][ T9062] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 307.561304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.586234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.602910][ T8865] device veth0_macvtap entered promiscuous mode [ 307.622322][ T8865] device veth1_macvtap entered promiscuous mode [ 307.667714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.681556][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.730840][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.746265][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.756888][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.768316][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.795614][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.811255][ T9068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1469'. [ 307.819756][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.842963][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.873911][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.900740][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.950196][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.971073][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.989422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.020082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.056326][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.077207][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.107252][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.123035][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.133233][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.143878][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.153802][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.172359][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.191250][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.205690][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.239545][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.264580][ T9076] device sit0 entered promiscuous mode [ 308.281294][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.290554][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.328061][ T8865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.355329][ T8865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.380508][ T8865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.407500][ T8865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.546812][ T26] audit: type=1326 audit(1719598977.342:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.3.1478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d720e7b99 code=0x0 [ 308.641788][ T4390] Bluetooth: hci4: command 0x0419 tx timeout [ 308.644258][ T4167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.693362][ T4793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.710017][ T4167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.726246][ T4793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.749387][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.768960][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.849812][ T9100] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1482'. [ 309.069250][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1487'. [ 309.168568][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 309.343553][ T9129] input: syz1 as /devices/virtual/input/input12 [ 309.434737][ T9129] netlink: 'syz.1.1495': attribute type 8 has an invalid length. [ 309.616709][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1504'. [ 309.685602][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 309.710256][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 309.731011][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 309.860947][ T9170] input: syz1 as /devices/virtual/input/input13 [ 309.964514][ T9170] netlink: 'syz.1.1514': attribute type 8 has an invalid length. [ 310.107181][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1518'. [ 310.257514][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 310.449126][ T9204] input: syz1 as /devices/virtual/input/input14 [ 310.502810][ T9204] netlink: 'syz.1.1530': attribute type 8 has an invalid length. [ 310.657270][ T9213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'. [ 310.721584][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 310.917514][ T9226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready [ 311.289581][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1545'. [ 311.761785][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready [ 312.130382][ T9279] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 313.309702][ T9313] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 314.894566][ T9338] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.102990][ T9351] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 316.405550][ T9373] nfs: Bad value for 'source' [ 316.841564][ T4390] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 316.981210][ T9406] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 317.048064][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054412][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.271646][ T4390] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.465039][ T26] audit: type=1800 audit(1719598986.262:183): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1618" name="file0" dev="sda1" ino=2016 res=0 errno=0 [ 317.486086][ T4390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.511482][ T4390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.519747][ T4390] usb 4-1: Product: syz [ 317.531431][ T4390] usb 4-1: Manufacturer: syz [ 317.536067][ T9417] nfs: Bad value for 'source' [ 317.561510][ T4390] usb 4-1: SerialNumber: syz [ 317.612567][ T4390] usb 4-1: bad CDC descriptors [ 317.827258][ T4101] usb 4-1: USB disconnect, device number 17 [ 317.965929][ T9439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 318.507847][ T9455] nfs: Bad value for 'source' [ 318.803602][ T9462] syz.3.1637 sent an empty control message without MSG_MORE. [ 320.209057][ T9490] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1645'. [ 320.222973][ T9491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 320.311438][ T3918] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 320.615673][ T26] audit: type=1800 audit(1719598989.412:184): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1652" name="file0" dev="sda1" ino=2016 res=0 errno=0 [ 320.695410][ T3918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.876613][ T3918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.904415][ T3918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.937745][ T3918] usb 1-1: Product: syz [ 320.957387][ T3918] usb 1-1: Manufacturer: syz [ 320.968636][ T3918] usb 1-1: SerialNumber: syz [ 321.042607][ T3918] usb 1-1: bad CDC descriptors [ 321.282550][ T3918] usb 1-1: USB disconnect, device number 13 [ 321.431591][ T26] audit: type=1800 audit(1719598990.222:185): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1664" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 321.440624][ T9526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1664'. [ 321.501610][ T26] audit: type=1804 audit(1719598990.232:186): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1664" name="/root/syzkaller.97odrW/49/bus" dev="sda1" ino=2013 res=1 errno=0 [ 321.523976][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.690974][ T9540] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 321.802977][ T9543] netlink: 'syz.2.1667': attribute type 10 has an invalid length. [ 321.888815][ T9543] team0: Port device geneve1 added [ 322.936914][ T9563] loop3: detected capacity change from 0 to 1024 [ 323.073251][ T9563] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.416947][ T9582] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 323.471634][ T9582] team0: Port device geneve1 added [ 323.721514][ T26] audit: type=1800 audit(1719598992.512:187): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1677" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 324.003805][ T26] audit: type=1804 audit(1719598992.802:188): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1685" name="/root/syzkaller.QC1TTP/164/bus" dev="sda1" ino=2018 res=1 errno=0 [ 324.030509][ T9585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1677'. [ 324.064417][ T9563] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 324.113989][ T26] audit: type=1804 audit(1719598992.802:189): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1685" name="/root/syzkaller.QC1TTP/164/bus" dev="sda1" ino=2018 res=1 errno=0 [ 324.201870][ T26] audit: type=1800 audit(1719598992.962:190): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1689" name="file0" dev="sda1" ino=2014 res=0 errno=0 [ 324.250291][ T8522] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.6dfYpT/72/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 324.351969][ T8522] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 324.422263][ T8522] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.6dfYpT/72/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 324.447046][ T3918] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 324.491177][ T8522] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 324.577884][ T9621] netlink: 'syz.4.1697': attribute type 10 has an invalid length. [ 324.831882][ T3918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.052246][ T3918] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.086798][ T3918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.162285][ T3918] usb 2-1: Product: syz [ 325.200771][ T3918] usb 2-1: Manufacturer: syz [ 325.249123][ T3918] usb 2-1: SerialNumber: syz [ 325.297665][ T8522] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.6dfYpT/72/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 325.364392][ T8522] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 325.392448][ T3918] usb 2-1: bad CDC descriptors [ 325.418407][ T8522] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.6dfYpT/72/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 325.532698][ T8522] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 325.650474][ T3918] usb 2-1: USB disconnect, device number 10 [ 325.672145][ T8522] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.6dfYpT/72/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 325.887972][ T8522] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 326.623362][ T9636] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 326.891607][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.976881][ T9640] loop1: detected capacity change from 0 to 1024 [ 327.084098][ T9640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.181542][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 327.254727][ T26] audit: type=1800 audit(1719598996.052:191): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1704" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 327.310001][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1704'. [ 327.334235][ T26] audit: type=1326 audit(1719598996.102:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 327.354050][ T9640] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 327.442868][ T26] audit: type=1326 audit(1719598996.102:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 327.536569][ T26] audit: type=1326 audit(1719598996.102:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 327.556631][ T8589] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.aAIm2A/73/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 327.622032][ T26] audit: type=1326 audit(1719598996.102:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 327.681921][ T8589] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 327.742803][ T8589] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.aAIm2A/73/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 327.815302][ T8589] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 327.879073][ T8589] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.aAIm2A/73/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 327.921400][ T9659] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 328.442693][ T8589] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 328.630929][ T8589] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.aAIm2A/73/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 328.702768][ T8589] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 328.802940][ T8589] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.aAIm2A/73/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 328.907769][ T8589] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 328.956105][ T26] audit: type=1804 audit(1719598997.752:196): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1712" name="/root/syzkaller.QC1TTP/169/bus" dev="sda1" ino=2007 res=1 errno=0 [ 329.106111][ T26] audit: type=1804 audit(1719598997.782:197): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1712" name="/root/syzkaller.QC1TTP/169/bus" dev="sda1" ino=2007 res=1 errno=0 [ 329.362342][ T3918] Bluetooth: hci2: command 0x0406 tx timeout [ 329.978113][ T26] audit: type=1800 audit(1719598998.772:198): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1716" name="file0" dev="sda1" ino=2013 res=0 errno=0 [ 330.046456][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 330.162086][ T4390] Bluetooth: hci3: command 0x0409 tx timeout [ 330.211495][ T4104] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 330.460812][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.514704][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.576251][ T9656] device bridge_slave_0 entered promiscuous mode [ 330.591868][ T4104] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.606353][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.638189][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.668148][ T9656] device bridge_slave_1 entered promiscuous mode [ 330.719853][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.755136][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.761813][ T4104] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.790371][ T4104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.841401][ T4104] usb 1-1: Product: syz [ 330.845627][ T4104] usb 1-1: Manufacturer: syz [ 330.850239][ T4104] usb 1-1: SerialNumber: syz [ 330.857519][ T9656] team0: Port device team_slave_0 added [ 330.874414][ T9656] team0: Port device team_slave_1 added [ 330.942668][ T4104] usb 1-1: bad CDC descriptors [ 330.992758][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.999743][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.057789][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.084692][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.109778][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.167457][ T4809] usb 1-1: USB disconnect, device number 14 [ 331.221409][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.339453][ T9656] device hsr_slave_0 entered promiscuous mode [ 331.361856][ T9656] device hsr_slave_1 entered promiscuous mode [ 331.371032][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.388133][ T9656] Cannot create hsr debugfs directory [ 331.546467][ T9656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.620969][ T9682] chnl_net:caif_netlink_parms(): no params data found [ 331.654250][ T9656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.774403][ T9656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.854842][ T4167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.924726][ T9656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.938138][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.945655][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.954410][ T9682] device bridge_slave_0 entered promiscuous mode [ 331.969739][ T4167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.984897][ T9682] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.992346][ T9682] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.000906][ T9682] device bridge_slave_1 entered promiscuous mode [ 332.033589][ T9682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.046302][ T9682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.084250][ T9682] team0: Port device team_slave_0 added [ 332.118122][ T9682] team0: Port device team_slave_1 added [ 332.157620][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.189456][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.271665][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.304448][ T7] usb 3-1: no configurations [ 332.348229][ T7] usb 3-1: can't read configurations, error -22 [ 332.527392][ T9682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.571957][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 332.927083][ T3917] Bluetooth: hci3: command 0x041b tx timeout [ 332.932746][ T7] usb 3-1: device descriptor read/64, error -32 [ 333.012611][ T4167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.042800][ T4104] Bluetooth: hci0: command 0x0409 tx timeout [ 333.062672][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.069704][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.120822][ T9682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.143628][ T26] audit: type=1800 audit(1719599001.942:199): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1728" name="file0" dev="sda1" ino=2016 res=0 errno=0 [ 333.152890][ T7] usb usb3-port1: attempt power cycle [ 333.199197][ T4167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.268613][ T26] audit: type=1804 audit(1719599002.062:200): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1725" name="/root/syzkaller.heTMkK/50/bus" dev="sda1" ino=1999 res=1 errno=0 [ 333.296725][ T9682] device hsr_slave_0 entered promiscuous mode [ 333.313572][ T9682] device hsr_slave_1 entered promiscuous mode [ 333.328725][ T9682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.338902][ T26] audit: type=1804 audit(1719599002.102:201): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1725" name="/root/syzkaller.heTMkK/50/bus" dev="sda1" ino=1999 res=1 errno=0 [ 333.347201][ T9682] Cannot create hsr debugfs directory [ 333.641636][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 333.734144][ T7] usb 3-1: device descriptor read/8, error -32 [ 333.950981][ T9656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.007448][ T9656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.031549][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 334.071177][ T9656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.101877][ T7] usb 3-1: device descriptor read/8, error -32 [ 334.143719][ T9656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.221596][ T4809] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 334.230399][ T7] usb usb3-port1: unable to enumerate USB device [ 334.428314][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.531266][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.564618][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.580545][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.642102][ T4809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.653976][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.667799][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.682146][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.689225][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.892048][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.900910][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.909933][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.917072][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.926241][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.935345][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.950116][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.964453][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.122862][ T4809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.182372][ T4809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.289675][ T4809] usb 5-1: Product: syz [ 335.347609][ T4809] usb 5-1: Manufacturer: syz [ 335.411182][ T4809] usb 5-1: SerialNumber: syz [ 335.833455][ T4809] usb 5-1: bad CDC descriptors [ 335.857234][ T4101] Bluetooth: hci3: command 0x040f tx timeout [ 335.872235][ T4104] Bluetooth: hci0: command 0x041b tx timeout [ 335.899229][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.913376][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.944138][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.963295][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.982373][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.012678][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.034987][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.052955][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.067536][ T3918] usb 5-1: USB disconnect, device number 18 [ 336.072784][ T9682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.103113][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.160022][ T9682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.188481][ T9682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.219104][ T9682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.259171][ T26] audit: type=1804 audit(1719599005.052:202): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1738" name="/root/syzkaller.QC1TTP/180/bus" dev="sda1" ino=2002 res=1 errno=0 [ 336.334791][ T26] audit: type=1804 audit(1719599005.052:203): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1738" name="/root/syzkaller.QC1TTP/180/bus" dev="sda1" ino=2002 res=1 errno=0 [ 336.456820][ T9784] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 336.581770][ T9682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.648589][ T9682] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.675878][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.684798][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.694632][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.702785][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.712648][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.795234][ T9806] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.816997][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.831548][ T6019] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 336.833612][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.857470][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.864664][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.873811][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.883908][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.892970][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.900133][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.946050][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.955248][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.966326][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.977197][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.057956][ T9656] device veth0_vlan entered promiscuous mode [ 337.093019][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.103388][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.121927][ T6019] usb 3-1: Using ep0 maxpacket: 16 [ 337.127814][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.147061][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.161522][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.170249][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.190338][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.208137][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.227004][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.240696][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.279753][ T26] audit: type=1326 audit(1719599006.052:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 337.311756][ T26] audit: type=1326 audit(1719599006.052:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 337.334664][ T26] audit: type=1326 audit(1719599006.052:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 337.519753][ T26] audit: type=1326 audit(1719599006.052:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf78685b99 code=0x7ffc0000 [ 337.597946][ T4167] device hsr_slave_0 left promiscuous mode [ 337.653714][ T4167] device hsr_slave_1 left promiscuous mode [ 337.706399][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.757061][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.859005][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.084882][ T4104] Bluetooth: hci0: command 0x040f tx timeout [ 338.093325][ T4104] Bluetooth: hci3: command 0x0419 tx timeout [ 338.102949][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.128249][ T4167] device bridge_slave_1 left promiscuous mode [ 338.150555][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.196941][ T4167] device bridge_slave_0 left promiscuous mode [ 338.221619][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.236700][ T4167] device hsr_slave_0 left promiscuous mode [ 338.245227][ T4167] device hsr_slave_1 left promiscuous mode [ 338.256860][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.271544][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.294879][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.302639][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.316321][ T4167] device bridge_slave_1 left promiscuous mode [ 338.334503][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.355645][ T4167] device bridge_slave_0 left promiscuous mode [ 338.362306][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.378550][ T4167] device veth1_macvtap left promiscuous mode [ 338.385242][ T4167] device veth0_macvtap left promiscuous mode [ 338.391456][ T4167] device veth1_vlan left promiscuous mode [ 338.397265][ T4167] device veth0_vlan left promiscuous mode [ 338.409342][ T4167] device veth1_macvtap left promiscuous mode [ 338.415507][ T4167] device veth0_macvtap left promiscuous mode [ 338.421650][ T4167] device veth1_vlan left promiscuous mode [ 338.427441][ T4167] device veth0_vlan left promiscuous mode [ 338.750456][ T4167] team0 (unregistering): Port device team_slave_1 removed [ 338.765908][ T4167] team0 (unregistering): Port device team_slave_0 removed [ 338.780226][ T4167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.798072][ T4167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.885050][ T4167] bond0 (unregistering): Released all slaves [ 339.052093][ T4167] team0 (unregistering): Port device team_slave_1 removed [ 339.067861][ T4167] team0 (unregistering): Port device team_slave_0 removed [ 339.087020][ T4167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.103335][ T4167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.194067][ T4167] bond0 (unregistering): Released all slaves [ 339.257566][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.266367][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.282469][ T9656] device veth1_vlan entered promiscuous mode [ 339.301255][ T9828] bond0: (slave veth0_to_bond): Error: Device can not be enslaved while up [ 339.316519][ T9682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.329761][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.339290][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.348887][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.462753][ T9656] device veth0_macvtap entered promiscuous mode [ 339.473975][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.483424][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.502174][ T9656] device veth1_macvtap entered promiscuous mode [ 339.509848][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.524224][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.572466][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.593998][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.614410][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.631552][ T4104] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 339.641780][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.661968][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.675549][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.685837][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.697610][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.720669][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.769048][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.778362][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.800867][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.808929][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.823871][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.835877][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.848155][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.859540][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.871900][ T4104] usb 1-1: Using ep0 maxpacket: 32 [ 339.878411][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.889453][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.899723][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.910488][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.923053][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.934114][ T9844] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.944229][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.953687][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.967963][ T9682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.993581][ T4104] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.006859][ T9656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.015671][ T9656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.024874][ T4104] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.035889][ T9656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.044991][ T4104] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 340.049253][ T9656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.054464][ T4104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.091163][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.102587][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.157044][ T4104] hub 1-1:4.0: USB hub found [ 340.182499][ T3912] Bluetooth: hci0: command 0x0419 tx timeout [ 340.183287][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.223277][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.235633][ T9682] device veth0_vlan entered promiscuous mode [ 340.269157][ T9846] input: syz0 as /devices/virtual/input/input15 [ 340.272175][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.302381][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.336460][ T9682] device veth1_vlan entered promiscuous mode [ 340.381511][ T4104] hub 1-1:4.0: 2 ports detected [ 340.386978][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.449648][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.472936][ T4168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.480447][ T9682] device veth0_macvtap entered promiscuous mode [ 340.492704][ T4168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.527588][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.541873][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.560205][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.571135][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.587751][ T9830] ptrace attach of "./syz-executor exec"[6867] was attempted by "./syz-executor exec"[9830] [ 340.604253][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.685741][ T9682] device veth1_macvtap entered promiscuous mode [ 340.838331][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.079834][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.215678][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.526999][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.560812][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.597361][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.608382][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.624030][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.634222][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.644895][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.656420][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.680382][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.688225][ T4104] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 341.701420][ T4104] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 341.710775][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.720894][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.735883][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.748743][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.759293][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.777853][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.791109][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.813695][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.838724][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.849680][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.871849][ T9682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.891388][ T9682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.929419][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.939520][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.951521][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.984397][ T9682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.050270][ T9682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.067917][ T9682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.080685][ T9682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.172309][ T3548] usb 1-1: USB disconnect, device number 15 [ 342.986403][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.039611][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.139996][ T6019] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.149931][ T6019] usb 3-1: no configurations [ 343.151254][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.154609][ T6019] usb 3-1: can't read configurations, error -22 [ 343.184400][ T9874] input: syz0 as /devices/virtual/input/input16 [ 343.206030][ T411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.251527][ T411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.272669][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.334956][ T6019] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 343.434774][ T9879] loop1: detected capacity change from 0 to 1024 [ 343.587416][ T9879] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.664715][ T26] audit: type=1800 audit(1719599012.462:208): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1718" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 343.692852][ T6019] usb 3-1: device descriptor read/64, error -32 [ 343.850330][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1718'. [ 343.877360][ T6019] usb usb3-port1: attempt power cycle [ 344.541561][ T6019] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 344.581586][ T9879] loop_set_status: loop1 () has still dirty pages (nrpages=4) [ 344.653579][ T6019] usb 3-1: device descriptor read/8, error -32 [ 344.764266][ T9682] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.8rHxoK/0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 344.905367][ T9682] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 344.948804][ T9682] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.8rHxoK/0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 345.798744][ T6019] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 345.845620][ T9682] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 345.945256][ T9682] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.8rHxoK/0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 345.971641][ T6019] usb 3-1: device descriptor read/8, error -32 [ 346.002146][ T9682] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 346.048497][ T9682] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.8rHxoK/0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 346.085609][ T9682] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 346.109440][ T6019] usb usb3-port1: unable to enumerate USB device [ 346.136288][ T9682] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.8rHxoK/0/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 346.197773][ T9682] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 346.312730][ T5912] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.461512][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 347.589844][ T5912] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.611541][ T5912] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.631392][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.650912][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.739356][ T5912] hub 4-1:4.0: USB hub found [ 348.215023][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1788'. [ 348.224778][ T9943] tipc: Started in network mode [ 348.230034][ T9943] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 348.246454][ T9943] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 348.259452][ T9943] tipc: Enabled bearer , priority 10 [ 348.421576][ T5912] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 348.514655][ T5912] usb 4-1: USB disconnect, device number 18 [ 349.884839][ T5912] tipc: Node number set to 1 [ 349.893439][ T9971] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 350.052477][ T9976] input: syz0 as /devices/virtual/input/input17 [ 350.090806][ T9978] netlink: 'syz.4.1801': attribute type 27 has an invalid length. [ 350.211609][ T5912] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 350.471478][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 350.591829][ T5912] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.627089][ T5912] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.645910][ T5912] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.657547][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.811550][ T5912] hub 1-1:4.0: USB hub found [ 350.992013][ T5912] hub 1-1:4.0: 2 ports detected [ 351.199288][ T9973] ptrace attach of "./syz-executor exec"[6867] was attempted by "./syz-executor exec"[9973] [ 351.701583][ T5912] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 351.707985][ T5912] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 351.738816][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.746268][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.755042][ T5912] usb 1-1: USB disconnect, device number 16 [ 352.001769][ T3545] Bluetooth: hci0: command 0x0409 tx timeout [ 352.283812][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.354440][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.450551][ T9995] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.871291][ T9978] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.880586][ T9978] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.889969][ T9978] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.904195][ T9978] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.064266][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 354.073408][ T9989] tipc: Started in network mode [ 354.080411][ T9989] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 354.090611][ T9989] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 354.101052][ T9989] tipc: Enabled bearer , priority 10 [ 354.204237][ T5912] Bluetooth: hci0: command 0x041b tx timeout [ 354.368942][ T9968] chnl_net:caif_netlink_parms(): no params data found [ 354.503746][T10040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.743949][T10040] netlink: 'syz.4.1824': attribute type 27 has an invalid length. [ 355.522690][ T4387] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 355.832390][ T5912] tipc: Node number set to 1 [ 355.862675][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1823'. [ 355.871887][T10046] tipc: Started in network mode [ 355.876833][T10046] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 355.885954][T10046] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 355.894169][T10046] tipc: Enabled bearer , priority 10 [ 356.053277][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.083240][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.128324][ T9968] device bridge_slave_0 entered promiscuous mode [ 356.136506][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 356.174978][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.194433][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.215796][ T9968] device bridge_slave_1 entered promiscuous mode [ 356.241638][ T3548] Bluetooth: hci0: command 0x040f tx timeout [ 356.301853][ T4387] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.323138][ T26] audit: type=1804 audit(1719599025.122:209): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1831" name="/root/syzkaller.heTMkK/91/cgroup.controllers" dev="sda1" ino=2002 res=1 errno=0 [ 356.361524][ T4387] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.381434][ T4387] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.408051][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.446958][ T9968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.472723][ T4387] hub 4-1:4.0: USB hub found [ 356.558946][ T9968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.692590][ T4387] hub 4-1:4.0: 2 ports detected [ 356.722266][ T4167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.909006][T10021] ptrace attach of "./syz-executor exec"[9656] was attempted by "./syz-executor exec"[10021] [ 357.010922][ T3548] tipc: Node number set to 1 [ 357.373061][ T9968] team0: Port device team_slave_0 added [ 357.390333][T10075] tipc: Enabling of bearer rejected, already enabled [ 357.400495][ T3918] libceph: connect (1)[c::]:6789 error -101 [ 357.417913][ T3918] libceph: mon0 (1)[c::]:6789 connect error [ 357.438654][T10070] ceph: No mds server is up or the cluster is laggy [ 357.491699][ T9968] team0: Port device team_slave_1 added [ 357.519694][ T4167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.705084][ T3918] libceph: connect (1)[c::]:6789 error -101 [ 357.711118][ T3918] libceph: mon0 (1)[c::]:6789 connect error [ 358.730579][ T3548] Bluetooth: hci0: command 0x0419 tx timeout [ 358.852661][ T4167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.881171][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.901454][ T4387] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 358.907845][ T4387] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 358.921367][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.992859][ T9968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.021834][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.029039][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.091396][ T9968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.144693][ T4167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.208174][ T26] audit: type=1804 audit(1719599028.002:210): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1843" name="/root/syzkaller.oESO8F/10/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0 [ 359.248576][T10098] loop3: detected capacity change from 0 to 512 [ 359.352751][ T6019] usb 4-1: USB disconnect, device number 19 [ 359.828326][ T9968] device hsr_slave_0 entered promiscuous mode [ 360.066602][ T9968] device hsr_slave_1 entered promiscuous mode [ 360.289315][ T9968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.316344][ T9968] Cannot create hsr debugfs directory [ 360.322199][ T26] audit: type=1804 audit(1719599029.112:211): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1846" name="/root/syzkaller.QC1TTP/215/bus" dev="sda1" ino=2024 res=1 errno=0 [ 360.571684][ T26] audit: type=1800 audit(1719599029.112:212): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1846" name="bus" dev="sda1" ino=2024 res=0 errno=0 [ 361.227518][T10134] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 361.247550][T10134] overlayfs: conflicting lowerdir path [ 361.439731][ T26] audit: type=1804 audit(1719599030.232:213): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1859" name="/root/syzkaller.97odrW/85/cgroup.controllers" dev="sda1" ino=2023 res=1 errno=0 [ 361.463537][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.212954][ T4810] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 362.309671][ T26] audit: type=1804 audit(1719599031.102:214): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1861" name="/root/syzkaller.97odrW/86/bus" dev="sda1" ino=2003 res=1 errno=0 [ 362.332037][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.357026][ T26] audit: type=1800 audit(1719599031.102:215): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1861" name="bus" dev="sda1" ino=2003 res=0 errno=0 [ 362.457388][T10165] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 362.471569][ T4810] usb 1-1: Using ep0 maxpacket: 32 [ 362.601863][ T4810] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.637307][ T4810] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.656363][ T4810] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 362.666052][ T4810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.679079][ T26] audit: type=1804 audit(1719599031.472:216): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1870" name="/root/syzkaller.oESO8F/19/cgroup.controllers" dev="sda1" ino=2024 res=1 errno=0 [ 362.704969][T10182] loop3: detected capacity change from 0 to 512 [ 362.781243][ T4810] hub 1-1:4.0: USB hub found [ 362.939566][ T4104] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 362.954416][ T9968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.974135][ T9968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.991687][ T4810] hub 1-1:4.0: 2 ports detected [ 363.008534][ T9968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.199410][T10124] ptrace attach of "./syz-executor exec"[6867] was attempted by "./syz-executor exec"[10124] [ 363.489779][ T9968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.901427][ T4104] usb 5-1: Using ep0 maxpacket: 16 [ 363.984680][ T26] audit: type=1326 audit(1719599032.782:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aaa24b99 code=0x7ffc0000 [ 364.051694][ T26] audit: type=1326 audit(1719599032.812:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f30aaa24b99 code=0x7ffc0000 [ 364.075512][ T4104] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.096538][ T4167] device hsr_slave_0 left promiscuous mode [ 364.099889][ T4104] usb 5-1: no configurations [ 364.107578][ T4167] device hsr_slave_1 left promiscuous mode [ 364.124272][ T4104] usb 5-1: can't read configurations, error -22 [ 364.130949][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.149435][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.169687][ T26] audit: type=1326 audit(1719599032.812:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aaa24b99 code=0x7ffc0000 [ 364.174652][ T4167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.223680][ T4167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.230376][ T26] audit: type=1326 audit(1719599032.812:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aaa24b99 code=0x7ffc0000 [ 364.256030][ T4167] device bridge_slave_1 left promiscuous mode [ 364.262592][ T4810] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 364.268954][ T4810] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 364.283338][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.301039][ T4167] device bridge_slave_0 left promiscuous mode [ 364.307550][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.322341][ T4810] usb 1-1: USB disconnect, device number 17 [ 364.328255][ T26] audit: type=1804 audit(1719599033.122:221): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1875" name="/root/syzkaller.97odrW/93/bus" dev="sda1" ino=2025 res=1 errno=0 [ 364.361205][ T26] audit: type=1800 audit(1719599033.122:222): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1875" name="bus" dev="sda1" ino=2025 res=0 errno=0 [ 364.391486][ T4167] device veth1_macvtap left promiscuous mode [ 364.398783][ T4167] device veth0_macvtap left promiscuous mode [ 364.412666][ T4167] device veth1_vlan left promiscuous mode [ 364.425623][ T4167] device veth0_vlan left promiscuous mode [ 364.682271][ T4167] team0 (unregistering): Port device team_slave_1 removed [ 364.707341][ T4167] team0 (unregistering): Port device team_slave_0 removed [ 364.720993][ T4167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.739069][ T4167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.842637][ T4167] bond0 (unregistering): Released all slaves [ 364.900795][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.994570][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.003075][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.020813][ T9968] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.073076][T10227] loop3: detected capacity change from 0 to 512 [ 365.092331][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.110103][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.122195][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.129406][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.143499][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.152574][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.162486][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.169570][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.177965][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.187737][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.229469][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.237975][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.259807][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.284438][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.304384][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.322344][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.333202][T10238] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 365.354386][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.371270][ T9968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.403211][T10238] overlayfs: conflicting lowerdir path [ 365.410947][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.456852][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.468845][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 365.470963][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.510825][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.717561][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.725877][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.739493][ T9968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.896969][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.913936][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.967456][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.989707][T10270] loop3: detected capacity change from 0 to 1024 [ 366.002887][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.028538][ T9968] device veth0_vlan entered promiscuous mode [ 366.056048][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.063733][T10275] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 366.072158][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.082438][T10275] overlayfs: conflicting lowerdir path [ 366.105616][ T9968] device veth1_vlan entered promiscuous mode [ 366.114909][T10270] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 366.308292][T10270] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000001,resuid=0x0000000000000000,i_version,data=ordered,jqfmt=vfsold,barrier=0x0000000000000006,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 366.333132][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.971499][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.010132][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.049253][T10270] EXT4-fs error (device loop3): ext4_read_inline_dir:1596: inode #12: block 16: comm syz.3.1899: path /root/syzkaller.oESO8F/28/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=916 fake=0 [ 367.089136][ T9968] device veth0_macvtap entered promiscuous mode [ 367.138070][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.163050][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.182618][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.220152][ T9968] device veth1_macvtap entered promiscuous mode [ 367.323741][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.354025][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.373007][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.397289][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.412061][T10299] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 367.413993][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.436294][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.467410][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.481166][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.503029][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.514133][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.559967][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.596903][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.629851][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.681724][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.710345][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.722022][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.732865][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.743970][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.754331][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.768735][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.781468][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.794643][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.804768][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.819469][ T9968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.830528][ T9968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.844050][ T9968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.853738][ T9968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.989476][T10315] loop3: detected capacity change from 0 to 256 [ 368.036856][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.072678][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.092035][T10315] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 368.106849][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.116351][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.120740][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.150338][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.581879][T10331] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 368.773767][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 368.773784][ T26] audit: type=1800 audit(1719599037.572:224): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1928" name="file2" dev="sda1" ino=2028 res=0 errno=0 [ 368.807686][T10342] loop1: detected capacity change from 0 to 256 [ 368.929124][T10342] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 369.026580][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 369.080880][T10351] fuse: Unknown parameter 'fd”0x0000000000000007' [ 369.101252][T10347] loop3: detected capacity change from 0 to 4096 [ 369.546638][T10367] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 369.647091][T10371] team0: Port device wlan1 added [ 369.664771][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.308474][T10392] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 370.407962][ T26] audit: type=1804 audit(1719599039.202:225): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1952" name="/root/syzkaller.heTMkK/117/bus" dev="sda1" ino=2018 res=1 errno=0 [ 370.694170][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 370.921931][ T4809] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 371.213051][ T4809] usb 5-1: Using ep0 maxpacket: 16 [ 371.512326][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1960'. [ 371.579995][ T4809] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 371.589623][ T4809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.603936][T10424] loop1: detected capacity change from 0 to 256 [ 371.610774][T10422] team0: Port device wlan1 added [ 371.630138][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.643458][ T4809] usb 5-1: Product: syz [ 371.647671][ T4809] usb 5-1: Manufacturer: syz [ 371.661435][ T4809] usb 5-1: SerialNumber: syz [ 371.690778][ T4809] usb 5-1: config 0 descriptor?? [ 371.763594][T10428] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1964'. [ 372.200240][T10443] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 372.217452][T10443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.244176][ T4809] usb 5-1: MIDIStreaming interface descriptor not found [ 372.411723][ T4809] usb 5-1: USB disconnect, device number 21 [ 372.443433][ T8343] udevd[8343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.472884][ T3548] libceph: connect (1)[c::]:6789 error -101 [ 372.478903][ T3548] libceph: mon0 (1)[c::]:6789 connect error [ 372.527211][T10444] ceph: No mds server is up or the cluster is laggy [ 372.778702][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1974'. [ 372.855343][T10463] loop3: detected capacity change from 0 to 256 [ 373.136241][T10476] loop3: detected capacity change from 0 to 512 [ 373.220716][T10476] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.260618][ T4809] libceph: connect (1)[c::]:6789 error -101 [ 373.268051][ T4809] libceph: mon0 (1)[c::]:6789 connect error [ 373.310333][T10476] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.1981: iget: bad i_size value: -6917529027641081756 [ 373.334218][T10476] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1981: couldn't read orphan inode 17 (err -117) [ 373.359004][T10476] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 373.487516][T10461] loop1: detected capacity change from 0 to 32768 [ 373.514245][T10476] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1981: bg 0: block 65: padding at end of block bitmap is not set [ 373.542959][ T4809] libceph: connect (1)[c::]:6789 error -101 [ 373.548921][T10476] Quota error (device loop3): write_blk: dquota write failed [ 373.569141][T10461] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1975 (10461) [ 373.594956][T10476] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 373.610381][ T4809] libceph: mon0 (1)[c::]:6789 connect error [ 373.618515][T10476] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1981: Failed to acquire dquot type 0 [ 373.642010][T10461] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 373.654515][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 373.673014][T10461] BTRFS info (device loop1): enabling disk space caching [ 373.706214][T10461] BTRFS info (device loop1): force clearing of disk cache [ 373.742739][T10461] BTRFS info (device loop1): allowing degraded mounts [ 373.767146][T10461] BTRFS info (device loop1): disk space caching is enabled [ 373.779591][T10461] BTRFS info (device loop1): has skinny extents [ 374.012611][T10481] ceph: No mds server is up or the cluster is laggy [ 374.033494][ T26] audit: type=1804 audit(1719599042.832:226): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1996" name="/root/syzkaller.QC1TTP/247/bus" dev="sda1" ino=2002 res=1 errno=0 [ 374.562786][ T4807] libceph: connect (1)[c::]:6789 error -101 [ 374.568810][ T4807] libceph: mon0 (1)[c::]:6789 connect error [ 374.590316][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 374.649457][T10561] fuse: Unknown parameter 'fd”0x0000000000000007' [ 374.755049][T10560] team0: Port device wlan1 added [ 374.797267][T10559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.871560][ T1279] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 374.896766][T10575] [ 374.899158][T10575] ====================================================== [ 374.906161][T10575] WARNING: possible circular locking dependency detected [ 374.913171][T10575] 5.15.161-syzkaller #0 Not tainted [ 374.918374][T10575] ------------------------------------------------------ [ 374.925395][T10575] syz.4.2012/10575 is trying to acquire lock: [ 374.931450][T10575] ffff8880782b8d00 (team->team_lock_key#16){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1f0 [ 374.941152][T10575] [ 374.941152][T10575] but task is already holding lock: [ 374.948508][T10575] ffff888061438628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 374.958449][T10575] [ 374.958449][T10575] which lock already depends on the new lock. [ 374.958449][T10575] [ 374.968864][T10575] [ 374.968864][T10575] the existing dependency chain (in reverse order) is: [ 374.977892][T10575] [ 374.977892][T10575] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 374.985638][T10575] lock_acquire+0x1db/0x4f0 [ 374.990672][T10575] __mutex_lock_common+0x1da/0x25a0 [ 374.996418][T10575] mutex_lock_nested+0x17/0x20 [ 375.001713][T10575] ieee80211_open+0x13a/0x1f0 [ 375.006925][T10575] __dev_open+0x36f/0x500 [ 375.011786][T10575] dev_open+0xa9/0x260 [ 375.016393][T10575] team_add_slave+0x981/0x27a0 [ 375.021780][T10575] do_setlink+0xe71/0x3b00 [ 375.026731][T10575] rtnl_newlink+0x17a4/0x2070 [ 375.031924][T10575] rtnetlink_rcv_msg+0x993/0xee0 [ 375.037418][T10575] netlink_rcv_skb+0x1cf/0x410 [ 375.042712][T10575] netlink_unicast+0x7b6/0x980 [ 375.048260][T10575] netlink_sendmsg+0xa30/0xd60 [ 375.053546][T10575] ____sys_sendmsg+0x59e/0x8f0 [ 375.058847][T10575] ___sys_sendmsg+0x252/0x2e0 [ 375.064043][T10575] __se_sys_sendmsg+0x19a/0x260 [ 375.069410][T10575] do_syscall_64+0x3b/0xb0 [ 375.074351][T10575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.080780][T10575] [ 375.080780][T10575] -> #0 (team->team_lock_key#16){+.+.}-{3:3}: [ 375.089026][T10575] validate_chain+0x1649/0x5930 [ 375.094402][T10575] __lock_acquire+0x1295/0x1ff0 [ 375.099789][T10575] lock_acquire+0x1db/0x4f0 [ 375.104913][T10575] __mutex_lock_common+0x1da/0x25a0 [ 375.110639][T10575] mutex_lock_nested+0x17/0x20 [ 375.115936][T10575] team_del_slave+0x2e/0x1f0 [ 375.121065][T10575] team_device_event+0x264/0x580 [ 375.126519][T10575] raw_notifier_call_chain+0xd0/0x170 [ 375.132410][T10575] unregister_netdevice_many+0xf1b/0x18f0 [ 375.138696][T10575] unregister_netdevice_queue+0x2e6/0x350 [ 375.144931][T10575] _cfg80211_unregister_wdev+0x181/0x510 [ 375.151109][T10575] ieee80211_if_remove+0x1cc/0x2c0 [ 375.156760][T10575] ieee80211_del_iface+0x15/0x20 [ 375.162214][T10575] nl80211_del_interface+0x1f5/0x370 [ 375.168107][T10575] genl_rcv_msg+0xfbd/0x14a0 [ 375.173220][T10575] netlink_rcv_skb+0x1cf/0x410 [ 375.178516][T10575] genl_rcv+0x24/0x40 [ 375.183017][T10575] netlink_unicast+0x7b6/0x980 [ 375.188327][T10575] netlink_sendmsg+0xa30/0xd60 [ 375.193611][T10575] ____sys_sendmsg+0x59e/0x8f0 [ 375.198912][T10575] ___sys_sendmsg+0x252/0x2e0 [ 375.204120][T10575] __se_sys_sendmsg+0x19a/0x260 [ 375.209516][T10575] do_syscall_64+0x3b/0xb0 [ 375.214481][T10575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.220915][T10575] [ 375.220915][T10575] other info that might help us debug this: [ 375.220915][T10575] [ 375.231150][T10575] Possible unsafe locking scenario: [ 375.231150][T10575] [ 375.238684][T10575] CPU0 CPU1 [ 375.244047][T10575] ---- ---- [ 375.249418][T10575] lock(&rdev->wiphy.mtx); [ 375.253923][T10575] lock(team->team_lock_key#16); [ 375.261493][T10575] lock(&rdev->wiphy.mtx); [ 375.268524][T10575] lock(team->team_lock_key#16); [ 375.273551][T10575] [ 375.273551][T10575] *** DEADLOCK *** [ 375.273551][T10575] [ 375.281699][T10575] 3 locks held by syz.4.2012/10575: [ 375.286900][T10575] #0: ffffffff8da45b70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 375.295080][T10575] #1: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 375.304334][T10575] #2: ffff888061438628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 375.314604][T10575] [ 375.314604][T10575] stack backtrace: [ 375.320513][T10575] CPU: 0 PID: 10575 Comm: syz.4.2012 Not tainted 5.15.161-syzkaller #0 [ 375.328766][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 375.338851][T10575] Call Trace: [ 375.342141][T10575] [ 375.345084][T10575] dump_stack_lvl+0x1e3/0x2d0 [ 375.349797][T10575] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 375.355481][T10575] ? print_circular_bug+0x12b/0x1a0 [ 375.360696][T10575] check_noncircular+0x2f8/0x3b0 [ 375.365704][T10575] ? add_chain_block+0x850/0x850 [ 375.370644][T10575] ? lockdep_lock+0x11f/0x2a0 [ 375.375343][T10575] validate_chain+0x1649/0x5930 [ 375.380217][T10575] ? validate_chain+0x112/0x5930 [ 375.385175][T10575] ? mark_lock+0x98/0x340 [ 375.389525][T10575] ? reacquire_held_locks+0x660/0x660 [ 375.394911][T10575] ? __lock_acquire+0x1295/0x1ff0 [ 375.399954][T10575] ? reacquire_held_locks+0x660/0x660 [ 375.405342][T10575] ? mark_lock+0x98/0x340 [ 375.409677][T10575] ? mark_lock+0x98/0x340 [ 375.414011][T10575] __lock_acquire+0x1295/0x1ff0 [ 375.418883][T10575] lock_acquire+0x1db/0x4f0 [ 375.423399][T10575] ? team_del_slave+0x2e/0x1f0 [ 375.428211][T10575] ? read_lock_is_recursive+0x10/0x10 [ 375.433582][T10575] ? __might_sleep+0xc0/0xc0 [ 375.438187][T10575] ? xsk_notifier+0x376/0x390 [ 375.442881][T10575] __mutex_lock_common+0x1da/0x25a0 [ 375.448092][T10575] ? team_del_slave+0x2e/0x1f0 [ 375.452855][T10575] ? __local_bh_enable_ip+0x164/0x1f0 [ 375.458238][T10575] ? team_del_slave+0x2e/0x1f0 [ 375.462996][T10575] ? bond_netdev_event+0xd8/0xe80 [ 375.468013][T10575] ? mutex_lock_io_nested+0x60/0x60 [ 375.473215][T10575] ? mutex_unlock+0x10/0x10 [ 375.477729][T10575] ? timer_delete_sync+0x247/0x2e0 [ 375.482839][T10575] ? bond_ipsec_offload_ok+0x3e0/0x3e0 [ 375.488299][T10575] ? memset+0x1f/0x40 [ 375.492292][T10575] mutex_lock_nested+0x17/0x20 [ 375.497079][T10575] team_del_slave+0x2e/0x1f0 [ 375.501669][T10575] team_device_event+0x264/0x580 [ 375.506620][T10575] raw_notifier_call_chain+0xd0/0x170 [ 375.511994][T10575] unregister_netdevice_many+0xf1b/0x18f0 [ 375.517732][T10575] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 375.523360][T10575] ? __lock_acquire+0x1ff0/0x1ff0 [ 375.528381][T10575] ? alloc_netdev_mqs+0xc10/0xc10 [ 375.533424][T10575] ? kasan_quarantine_put+0xd4/0x220 [ 375.538724][T10575] ? up_write+0x19d/0x580 [ 375.543055][T10575] unregister_netdevice_queue+0x2e6/0x350 [ 375.548769][T10575] ? list_netdevice+0x450/0x450 [ 375.553621][T10575] _cfg80211_unregister_wdev+0x181/0x510 [ 375.559287][T10575] ieee80211_if_remove+0x1cc/0x2c0 [ 375.564394][T10575] ieee80211_del_iface+0x15/0x20 [ 375.569325][T10575] nl80211_del_interface+0x1f5/0x370 [ 375.574618][T10575] genl_rcv_msg+0xfbd/0x14a0 [ 375.579222][T10575] ? genl_bind+0x420/0x420 [ 375.583646][T10575] ? arch_stack_walk+0xf3/0x140 [ 375.588497][T10575] ? mark_lock+0x98/0x340 [ 375.592823][T10575] ? __lock_acquire+0x1295/0x1ff0 [ 375.597881][T10575] ? nl80211_new_interface+0xfa0/0xfa0 [ 375.603341][T10575] netlink_rcv_skb+0x1cf/0x410 [ 375.608100][T10575] ? genl_bind+0x420/0x420 [ 375.612537][T10575] ? netlink_ack+0xb10/0xb10 [ 375.617148][T10575] ? down_read+0x1b3/0x2e0 [ 375.621576][T10575] ? genl_rcv+0x9/0x40 [ 375.625658][T10575] genl_rcv+0x24/0x40 [ 375.629628][T10575] netlink_unicast+0x7b6/0x980 [ 375.634395][T10575] ? netlink_detachskb+0x90/0x90 [ 375.639347][T10575] ? __virt_addr_valid+0x39e/0x450 [ 375.644486][T10575] ? 0xffffffff81000000 [ 375.648625][T10575] ? __check_object_size+0x300/0x410 [ 375.653908][T10575] ? bpf_lsm_netlink_send+0x5/0x10 [ 375.659030][T10575] netlink_sendmsg+0xa30/0xd60 [ 375.663799][T10575] ? netlink_getsockopt+0x5b0/0x5b0 [ 375.669016][T10575] ? futex_wait+0x634/0x740 [ 375.673540][T10575] ? aa_sock_msg_perm+0x91/0x150 [ 375.678493][T10575] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 375.683771][T10575] ? security_socket_sendmsg+0x7d/0xa0 [ 375.689225][T10575] ? netlink_getsockopt+0x5b0/0x5b0 [ 375.694423][T10575] ____sys_sendmsg+0x59e/0x8f0 [ 375.699288][T10575] ? iovec_from_user+0x300/0x390 [ 375.704245][T10575] ? __sys_sendmsg_sock+0x30/0x30 [ 375.709291][T10575] ___sys_sendmsg+0x252/0x2e0 [ 375.713970][T10575] ? __sys_sendmsg+0x260/0x260 [ 375.718761][T10575] ? __fdget+0x191/0x220 [ 375.723011][T10575] __se_sys_sendmsg+0x19a/0x260 [ 375.727875][T10575] ? __x64_sys_sendmsg+0x80/0x80 [ 375.732813][T10575] ? syscall_enter_from_user_mode+0x2e/0x240 [ 375.738920][T10575] ? lockdep_hardirqs_on+0x94/0x130 [ 375.744130][T10575] ? syscall_enter_from_user_mode+0x2e/0x240 [ 375.750117][T10575] do_syscall_64+0x3b/0xb0 [ 375.754531][T10575] ? clear_bhb_loop+0x15/0x70 [ 375.759251][T10575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.765153][T10575] RIP: 0033:0x7f30aaa24b99 [ 375.769583][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.789290][T10575] RSP: 002b:00007f30a94a5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.797731][T10575] RAX: ffffffffffffffda RBX: 00007f30aabb2fa0 RCX: 00007f30aaa24b99 [ 375.805700][T10575] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 375.813670][T10575] RBP: 00007f30aaaa577e R08: 0000000000000000 R09: 0000000000000000 [ 375.821753][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.829741][T10575] R13: 000000000000000b R14: 00007f30aabb2fa0 R15: 00007ffc3ca168a8 [ 375.837713][T10575] [ 375.848939][T10575] team0: Port device wlan1 removed [ 376.131411][ T1279] usb 1-1: Using ep0 maxpacket: 16 [ 376.452079][ T1279] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 376.461155][ T1279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.472207][ T1279] usb 1-1: Product: syz [ 376.476376][ T1279] usb 1-1: Manufacturer: syz [ 376.480953][ T1279] usb 1-1: SerialNumber: syz [ 376.491215][ T1279] usb 1-1: config 0 descriptor?? [ 376.991810][ T1279] usb 1-1: MIDIStreaming interface descriptor not found [ 377.008284][ T1279] usb 1-1: USB disconnect, device number 18 [ 377.031085][ T8352] udevd[8352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.493446][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.499938][ T1376] ieee802154 phy1 wpan1: encryption failed: -22