last executing test programs: 13.66206687s ago: executing program 4 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x109000, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x132}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000002708000340000000b9080002400000000608000140000000080900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 12.64649013s ago: executing program 4 (id=401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b81000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 11.947669446s ago: executing program 4 (id=405): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f00000004c0)=""/55, 0x37) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 10.189015525s ago: executing program 1 (id=410): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020}, 0x2020) r1 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) 9.990271001s ago: executing program 1 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x109000, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x132}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000002708000340000000b9080002400000000608000140000000080900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 9.046536195s ago: executing program 1 (id=413): sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/228) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x2000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) 7.822727311s ago: executing program 1 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b81000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 7.805712543s ago: executing program 2 (id=417): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) 6.95047784s ago: executing program 1 (id=420): open(0x0, 0x64842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 6.869818977s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000005c0)={0x11, 0xfffffffc, 0x0, 0x10001, 0x0, 0xfffffffffffff748, 0x5, 0xc9, 0x2, 0x2c, 0x1, 0x1}) 5.904344653s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, 0x0, 0x62) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x1e, 0x5, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x2, 0x2], [0x800000000, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0xfffffffb}, {{&(0x7f0000000d00)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x2, 0x10001, 0x0) 4.706573828s ago: executing program 0 (id=425): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)='k', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000008400000000000000613f04000b093f072000000000000000840000000800"], 0x38, 0x4804}, 0x20040020) 4.670194691s ago: executing program 3 (id=426): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdc00, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x61}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 4.669420771s ago: executing program 2 (id=427): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r1, 0x0, 0x0}, 0x10) 4.593011787s ago: executing program 4 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) 3.629504013s ago: executing program 1 (id=429): syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x24, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x4c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.489513764s ago: executing program 0 (id=430): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)) 2.573597146s ago: executing program 3 (id=431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b81000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 2.572948276s ago: executing program 0 (id=432): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f000000f5c0)) 2.333895745s ago: executing program 3 (id=433): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000240)=0xc) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.225842914s ago: executing program 2 (id=434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020}, 0x2020) r1 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) 2.218173275s ago: executing program 0 (id=435): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(0x0, 0x2, 0x105000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000640)={0x2, @win={{0x2f60, 0x9, 0xa, 0x7}, 0x1, 0x0, 0x0, 0xe190, &(0x7f0000000740)="15cbb735dbd272e0ac011995aff8d2b317b50e2014821d2bc28cfb540737c30496a87003f178a94da666a8946d970f58d3c15aae43f8e984d03d9ab6096944cafb7f1acc0f92e0e4555ecb327d431a1e6d06", 0xa}}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b6, &(0x7f0000000840)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDAggBs7hH7FBqH1oPwXUEWaUPFFUPo/FBRXVmUn5uSkFtGQgV2OCepyUkwEqUeXuvIxlp9UcwYbg4MBjxpGMgIKJ+M/kYo5McJ5yDPimSHhSB0Dvwy0d4pYBkWoEs9gxJRCcO0bmRjeglP69Y81ySBGArSUAomlQDETAwNcDSg2jyCpkWIBY0Zmhv9wNaDCD8RRZ2Bg0C/JLdAvrqzSzcxNTE9NT80zMjI2MzAxMDA10k/LzEk1gJCMSM6AFVEgGlT2gspUTiR5VgYGhnvQApYLqTBmeAmxFuY0qDwjsl5QOfwfWkhrKDOgACaG//xgvRwIMxgZDsD1QrUxgIIghEENpIyhvIERSVQFbAoLA9hLHgyMDMxQjiGs0mCE28UBltBLzs9JaWdgZGCEaVvOwAI3w/AxAyuYw4ZwI0TG2KIBJtQOpVWgtAeUXg4iLiC8J8+IWhexgE14AuVpNICcWJFYUlJkyHYeqsUQVOuBxYzYYLJGAnCbWaC2fmJD9ZwMO8MoGAWjYBSMglEwCkbBEAOAAAAA///PZVfV") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 2.182378347s ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x109000, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x132}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000002708000340000000b9080002400000000608000140000000080900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 1.981442193s ago: executing program 2 (id=437): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x101080) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x84, 0x6, 0x0}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000080)=[{0x2, 0x2010, 0x0, 0x0}], 0x1}) 1.25200087s ago: executing program 0 (id=438): mkdirat(0xffffffffffffff9c, 0x0, 0x62) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x1e, 0x5, 0x1) pipe2(&(0x7f0000000080), 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x2, 0x2], [0x800000000, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0xfffffffb}, {{&(0x7f0000000d00)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x2, 0x10001, 0x0) 1.218806253s ago: executing program 4 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 311.576935ms ago: executing program 4 (id=440): open(0x0, 0x64842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 310.441425ms ago: executing program 3 (id=450): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 15.143048ms ago: executing program 0 (id=441): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x8, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=442): syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = inotify_init() inotify_rm_watch(r6, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e20, @empty=0xfdfdffff}}) open(&(0x7f0000000140)='./file0\x00', 0x105000, 0x110) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. syzkaller login: [ 53.961643][ T4254] cgroup: Unknown subsys name 'net' [ 54.125815][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.319898][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.266621][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.277106][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.285107][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.293025][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.300373][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.306636][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.308142][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.315330][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.324054][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.329836][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.336320][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.343473][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.351238][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.357570][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.371183][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.371885][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.378373][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.386038][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.393132][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.399724][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.449032][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.462761][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.474369][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.490891][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.522112][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.530303][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.537760][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.546815][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.554350][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.562125][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.827051][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 57.868327][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 57.897660][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 58.007524][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 58.089117][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.096536][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.105108][ T4269] device bridge_slave_0 entered promiscuous mode [ 58.119495][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.126703][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.134856][ T4266] device bridge_slave_0 entered promiscuous mode [ 58.145018][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.152402][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.160480][ T4269] device bridge_slave_1 entered promiscuous mode [ 58.168104][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.175434][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.183310][ T4274] device bridge_slave_0 entered promiscuous mode [ 58.190488][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.197706][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.205411][ T4266] device bridge_slave_1 entered promiscuous mode [ 58.234560][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.241739][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.249316][ T4274] device bridge_slave_1 entered promiscuous mode [ 58.256609][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 58.306588][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.325681][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.334930][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.342226][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.349836][ T4265] device bridge_slave_0 entered promiscuous mode [ 58.361416][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.368488][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.376537][ T4265] device bridge_slave_1 entered promiscuous mode [ 58.385427][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.397612][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.407922][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.418411][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.491259][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.502742][ T4274] team0: Port device team_slave_0 added [ 58.510472][ T4266] team0: Port device team_slave_0 added [ 58.518824][ T4269] team0: Port device team_slave_0 added [ 58.529201][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.539789][ T4274] team0: Port device team_slave_1 added [ 58.546759][ T4266] team0: Port device team_slave_1 added [ 58.553438][ T4269] team0: Port device team_slave_1 added [ 58.629490][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.636764][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.645330][ T4278] device bridge_slave_0 entered promiscuous mode [ 58.654772][ T4265] team0: Port device team_slave_0 added [ 58.660711][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.668282][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.676240][ T4278] device bridge_slave_1 entered promiscuous mode [ 58.683740][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.690686][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.717170][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.729255][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.736533][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.762560][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.774926][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.782166][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.808287][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.821395][ T4265] team0: Port device team_slave_1 added [ 58.833651][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.840599][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.866684][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.878648][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.885938][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.911968][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.930529][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.937536][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.963493][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.022501][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.034341][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.057442][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.064480][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.090486][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.125429][ T4274] device hsr_slave_0 entered promiscuous mode [ 59.132215][ T4274] device hsr_slave_1 entered promiscuous mode [ 59.139111][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.146193][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.172142][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.193097][ T4266] device hsr_slave_0 entered promiscuous mode [ 59.199671][ T4266] device hsr_slave_1 entered promiscuous mode [ 59.206299][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.214136][ T4266] Cannot create hsr debugfs directory [ 59.232754][ T4278] team0: Port device team_slave_0 added [ 59.249490][ T4269] device hsr_slave_0 entered promiscuous mode [ 59.256137][ T4269] device hsr_slave_1 entered promiscuous mode [ 59.263053][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.270604][ T4269] Cannot create hsr debugfs directory [ 59.287427][ T4278] team0: Port device team_slave_1 added [ 59.311540][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.318500][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.344634][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.383832][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.390991][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.417033][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.434039][ T4265] device hsr_slave_0 entered promiscuous mode [ 59.440699][ T4265] device hsr_slave_1 entered promiscuous mode [ 59.447292][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.455312][ T4265] Cannot create hsr debugfs directory [ 59.481553][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 59.485656][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 59.560961][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 59.560974][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 59.596080][ T4278] device hsr_slave_0 entered promiscuous mode [ 59.602999][ T4278] device hsr_slave_1 entered promiscuous mode [ 59.609989][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.617608][ T4278] Cannot create hsr debugfs directory [ 59.641524][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 59.836295][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.849128][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.863193][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.874703][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.907391][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.923712][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.934809][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.957863][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.993671][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.018936][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.048965][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.061794][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.135290][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.146416][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.156430][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.165836][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.175484][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.199296][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.219328][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.228420][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.249343][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.258695][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.277422][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.285823][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.309566][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.318344][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.328421][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.336108][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.345146][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.355007][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.363788][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.370928][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.380576][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.410178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.419375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.428660][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.435790][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.445335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.457331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.466375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.485673][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.497833][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.507610][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.523530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.532442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.541252][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.548317][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.555971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.565649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.574332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.583889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.593085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.601946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.623883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.633876][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.650062][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.668047][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.692344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.699994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.707907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.717691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.727394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.735889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.744429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.753184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.761774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.773633][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.782332][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.791821][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.812897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.822054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.834373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.843861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.852581][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.859649][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.877156][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.889160][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.930358][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.940528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.954023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.966019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.976276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.984926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.993460][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.000511][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.017020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.025611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.060372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.069050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.095895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.112250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.135138][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.158416][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.172054][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.186276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.195201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.204132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.213344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.222358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.232695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.244020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.252921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.273458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.283674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.293233][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.300302][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.325928][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.334945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.358102][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.385995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.402147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.409636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.431434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.451672][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.458777][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.468009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.477409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.502197][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.525085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.546005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.561132][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 61.563898][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 61.594295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.611963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.630652][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.637794][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.645471][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 61.651600][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 61.652211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.666960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.676341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.685167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.696727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.705611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.721835][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 61.746489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.755620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.764413][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.771537][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.781096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.789583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.798284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.806977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.817310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.825789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.836160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.843987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.851598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.858994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.875598][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.892816][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.904462][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.914509][ T4265] device veth0_vlan entered promiscuous mode [ 61.923991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.934497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.943327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.952311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.960462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.969696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.978552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.987280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.000620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.008545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.016589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.027724][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.048473][ T4269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.060021][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.086131][ T4265] device veth1_vlan entered promiscuous mode [ 62.094622][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.110602][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.129834][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.139236][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.175852][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.198038][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.209635][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.236692][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.249445][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.270262][ T4274] device veth0_vlan entered promiscuous mode [ 62.290646][ T4265] device veth0_macvtap entered promiscuous mode [ 62.298763][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.308048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.320441][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.329615][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.344130][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.365873][ T4274] device veth1_vlan entered promiscuous mode [ 62.376992][ T4265] device veth1_macvtap entered promiscuous mode [ 62.399922][ T4278] device veth0_vlan entered promiscuous mode [ 62.413605][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.433115][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.449416][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.457559][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.465753][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.474773][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.499998][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.523931][ T4278] device veth1_vlan entered promiscuous mode [ 62.550944][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.559751][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.571588][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.579427][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.588465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.598078][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.607437][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.615103][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.624066][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.632538][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.643786][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.657108][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.666344][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.675263][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.684858][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699774][ T4274] device veth0_macvtap entered promiscuous mode [ 62.711072][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.720113][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.729222][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.744813][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.775682][ T4274] device veth1_macvtap entered promiscuous mode [ 62.784140][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.792523][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.800380][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.809156][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.816959][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.825914][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.843381][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.859191][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.875904][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.889010][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.950994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.962385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.976161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.987378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.006681][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.017725][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.029110][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.049696][ T4278] device veth0_macvtap entered promiscuous mode [ 63.059210][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.073685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.089585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.111280][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.119997][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.129562][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.139103][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.153891][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.171942][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.205398][ T4266] device veth0_vlan entered promiscuous mode [ 63.206906][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.220212][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.228077][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.236156][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.247830][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.280023][ T4278] device veth1_macvtap entered promiscuous mode [ 63.310676][ T4266] device veth1_vlan entered promiscuous mode [ 63.374510][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.398649][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.410659][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.412701][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.428302][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.438795][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.449775][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.461013][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.471614][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.482076][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.492727][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.505117][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.529167][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.538319][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.549023][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.556863][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.566699][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.576108][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.584663][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.593518][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.603707][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.629444][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.638558][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.647423][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 63.652114][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 63.656143][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.668460][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.685278][ T4269] device veth0_vlan entered promiscuous mode [ 63.707914][ T4266] device veth0_macvtap entered promiscuous mode [ 63.721659][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 63.727763][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 63.737869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.772824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.781766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.790412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.799335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.807335][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 63.814653][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.823511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.855875][ T4269] device veth1_vlan entered promiscuous mode [ 63.864809][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.885427][ T4376] loop0: detected capacity change from 0 to 1024 [ 63.888914][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.894790][ T4376] ======================================================= [ 63.894790][ T4376] WARNING: The mand mount option has been deprecated and [ 63.894790][ T4376] and is ignored by this kernel. Remove the mand [ 63.894790][ T4376] option from the mount to silence this warning. [ 63.894790][ T4376] ======================================================= [ 63.914252][ T4266] device veth1_macvtap entered promiscuous mode [ 63.961955][ T4376] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 63.971747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.997189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.021078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.029373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.038033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.057040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.234031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.336381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.438949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.590660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.643610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.824725][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.844479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.889627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.898275][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.920127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.943268][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.958690][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.974880][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.987704][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.005105][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.018986][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.036481][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.062338][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.076716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.086815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.113335][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.132800][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.147956][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.160362][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.175414][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.186684][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.208235][ T4381] loop0: detected capacity change from 0 to 32768 [ 65.211311][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.230316][ T4269] device veth0_macvtap entered promiscuous mode [ 65.252928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.263565][ T4381] (syz.0.7,4381,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.281225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.284219][ T4381] (syz.0.7,4381,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.312128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.334887][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.348552][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353486][ T4385] loop1: detected capacity change from 0 to 64 [ 65.359753][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.367545][ T4385] hfs: unable to parse mount options [ 65.389758][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407723][ T4269] device veth1_macvtap entered promiscuous mode [ 65.426075][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.449528][ T4259] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.457296][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.477529][ T4381] JBD2: Ignoring recovery information on journal [ 65.509032][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.531725][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.546653][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.559569][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.570541][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.581553][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.591493][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.602200][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.623346][ T4381] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 65.724160][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 65.730250][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 65.785891][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.807789][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 65.811597][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.821267][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 65.859616][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.881480][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 65.929680][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.140339][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.179755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.215866][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.226788][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.236831][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.247399][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.257339][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.291669][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.317827][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.337144][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.364230][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.411801][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 66.416880][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.418659][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.461591][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.476995][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.507642][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.542796][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.576381][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.585560][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.603366][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.808748][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.830834][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.873943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.921197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.076068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.088667][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.108451][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.130817][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.165468][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.177957][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.245220][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.265948][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.291907][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.505730][ T4415] loop2: detected capacity change from 0 to 64 [ 67.529032][ T4413] loop3: detected capacity change from 0 to 8 [ 67.546339][ T4413] process 'syz.3.11' launched './file1' with NULL argv: empty string added [ 67.558890][ T4413] SQUASHFS error: zstd decompression error: 10 [ 67.566281][ T4413] SQUASHFS error: zstd decompression failed, data probably corrupt [ 67.574588][ T4413] SQUASHFS error: Failed to read block 0x60: -5 [ 67.590660][ T4413] SQUASHFS error: zstd decompression error: 10 [ 67.597385][ T4413] SQUASHFS error: zstd decompression failed, data probably corrupt [ 67.605494][ T4413] SQUASHFS error: Failed to read block 0x60: -5 [ 67.972485][ T4421] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12'. [ 68.863533][ T4424] random: crng reseeded on system resumption [ 70.143610][ T4437] loop3: detected capacity change from 0 to 128 [ 71.165279][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171889][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.258039][ T11] kworker/u4:1: attempt to access beyond end of device [ 71.258039][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 72.770964][ T4457] loop3: detected capacity change from 0 to 24 [ 72.777534][ T4457] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 72.791644][ T4457] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 73.594025][ T4466] loop2: detected capacity change from 0 to 8 [ 73.763734][ T4466] SQUASHFS error: zstd decompression error: 10 [ 73.769960][ T4466] SQUASHFS error: zstd decompression failed, data probably corrupt [ 73.778057][ T4466] SQUASHFS error: Failed to read block 0x60: -5 [ 73.786372][ T4466] SQUASHFS error: zstd decompression error: 10 [ 73.792606][ T4466] SQUASHFS error: zstd decompression failed, data probably corrupt [ 73.800530][ T4466] SQUASHFS error: Failed to read block 0x60: -5 [ 74.033555][ T4461] loop0: detected capacity change from 0 to 32768 [ 74.119086][ T4473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.794367][ T4489] loop3: detected capacity change from 0 to 128 [ 76.295557][ T22] cfg80211: failed to load regulatory.db [ 76.683927][ T4366] kworker/u4:7: attempt to access beyond end of device [ 76.683927][ T4366] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 77.628080][ T4516] random: crng reseeded on system resumption [ 78.046674][ T4517] loop4: detected capacity change from 0 to 24 [ 78.054125][ T4517] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 78.070704][ T4517] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 79.521176][ T4526] loop2: detected capacity change from 0 to 8 [ 79.534064][ T4526] SQUASHFS error: zstd decompression error: 10 [ 79.540264][ T4526] SQUASHFS error: zstd decompression failed, data probably corrupt [ 79.548230][ T4526] SQUASHFS error: Failed to read block 0x60: -5 [ 79.555070][ T4526] SQUASHFS error: zstd decompression error: 10 [ 79.561303][ T4526] SQUASHFS error: zstd decompression failed, data probably corrupt [ 79.569218][ T4526] SQUASHFS error: Failed to read block 0x60: -5 [ 80.710308][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.554966][ T4544] loop1: detected capacity change from 0 to 128 [ 81.993616][ T51] kworker/u4:3: attempt to access beyond end of device [ 81.993616][ T51] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 82.740916][ T4560] loop4: detected capacity change from 0 to 24 [ 82.747865][ T4560] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 83.462979][ T4560] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 85.094480][ T4577] Zero length message leads to an empty skb [ 85.104366][ T4577] random: crng reseeded on system resumption [ 85.126962][ T4575] loop2: detected capacity change from 0 to 8 [ 85.154534][ T4575] SQUASHFS error: zstd decompression error: 10 [ 85.160692][ T4575] SQUASHFS error: zstd decompression failed, data probably corrupt [ 85.168616][ T4575] SQUASHFS error: Failed to read block 0x60: -5 [ 85.177163][ T4575] SQUASHFS error: zstd decompression error: 10 [ 85.183406][ T4575] SQUASHFS error: zstd decompression failed, data probably corrupt [ 85.191373][ T4575] SQUASHFS error: Failed to read block 0x60: -5 [ 86.204227][ T4589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.57'. [ 87.383119][ T4596] loop4: detected capacity change from 0 to 128 [ 88.399464][ T4591] kworker/u4:16: attempt to access beyond end of device [ 88.399464][ T4591] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 89.748977][ T4611] loop0: detected capacity change from 0 to 24 [ 89.755922][ T4611] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 89.767918][ T4611] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 91.943429][ T4624] loop0: detected capacity change from 0 to 8 [ 92.113678][ T4624] SQUASHFS error: zstd decompression error: 10 [ 92.119882][ T4624] SQUASHFS error: zstd decompression failed, data probably corrupt [ 92.128321][ T4624] SQUASHFS error: Failed to read block 0x60: -5 [ 92.134866][ T4624] SQUASHFS error: zstd decompression error: 10 [ 92.141082][ T4624] SQUASHFS error: zstd decompression failed, data probably corrupt [ 92.148974][ T4624] SQUASHFS error: Failed to read block 0x60: -5 [ 93.302151][ T4636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 94.108719][ T4635] loop4: detected capacity change from 0 to 128 [ 94.806276][ T4449] kworker/u4:11: attempt to access beyond end of device [ 94.806276][ T4449] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 95.412690][ T4661] random: crng reseeded on system resumption [ 97.082273][ T4673] loop3: detected capacity change from 0 to 8 [ 97.210519][ T4673] SQUASHFS error: zstd decompression error: 10 [ 97.216769][ T4673] SQUASHFS error: zstd decompression failed, data probably corrupt [ 97.224769][ T4673] SQUASHFS error: Failed to read block 0x60: -5 [ 97.238951][ T4673] SQUASHFS error: zstd decompression error: 10 [ 97.245256][ T4673] SQUASHFS error: zstd decompression failed, data probably corrupt [ 97.253262][ T4673] SQUASHFS error: Failed to read block 0x60: -5 [ 97.851244][ T4676] loop4: detected capacity change from 0 to 24 [ 97.858014][ T4676] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 97.866287][ T4676] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 100.162943][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 101.095697][ T4701] loop0: detected capacity change from 0 to 128 [ 102.107002][ T1120] kworker/u4:5: attempt to access beyond end of device [ 102.107002][ T1120] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 103.675324][ T4721] loop3: detected capacity change from 0 to 8 [ 103.704542][ T4720] loop1: detected capacity change from 0 to 24 [ 103.714397][ T4720] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 103.767654][ T4721] SQUASHFS error: zstd decompression error: 10 [ 103.773920][ T4721] SQUASHFS error: zstd decompression failed, data probably corrupt [ 103.781902][ T4721] SQUASHFS error: Failed to read block 0x60: -5 [ 103.790895][ T4721] SQUASHFS error: zstd decompression error: 10 [ 103.797064][ T4721] SQUASHFS error: zstd decompression failed, data probably corrupt [ 103.805195][ T4721] SQUASHFS error: Failed to read block 0x60: -5 [ 103.818982][ T4720] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 104.861691][ T4733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 105.266018][ T4714] loop0: detected capacity change from 0 to 32768 [ 105.447046][ T4714] read_mapping_page failed! [ 105.462401][ T4714] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 105.491238][ T4714] Mount JFS Failure: -5 [ 106.694455][ T4754] random: crng reseeded on system resumption [ 106.739825][ T4756] loop2: detected capacity change from 0 to 128 [ 107.609571][ T4449] kworker/u4:11: attempt to access beyond end of device [ 107.609571][ T4449] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 109.987987][ T4777] loop1: detected capacity change from 0 to 8 [ 110.018736][ T4777] SQUASHFS error: zstd decompression error: 10 [ 110.025060][ T4777] SQUASHFS error: zstd decompression failed, data probably corrupt [ 110.033042][ T4777] SQUASHFS error: Failed to read block 0x60: -5 [ 110.040695][ T4777] SQUASHFS error: zstd decompression error: 10 [ 110.046926][ T4777] SQUASHFS error: zstd decompression failed, data probably corrupt [ 110.054905][ T4777] SQUASHFS error: Failed to read block 0x60: -5 [ 110.848301][ T4783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 112.657768][ T4791] loop1: detected capacity change from 0 to 24 [ 112.664685][ T4791] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 112.685692][ T4791] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.847840][ T4794] loop1: detected capacity change from 0 to 128 [ 114.942676][ T4477] kworker/u4:13: attempt to access beyond end of device [ 114.942676][ T4477] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 115.011672][ T4797] loop0: detected capacity change from 0 to 32768 [ 116.631307][ T4830] loop2: detected capacity change from 0 to 8 [ 116.922788][ T4828] SQUASHFS error: zstd decompression error: 10 [ 116.928995][ T4828] SQUASHFS error: zstd decompression failed, data probably corrupt [ 116.936960][ T4828] SQUASHFS error: Failed to read block 0x60: -5 [ 116.944122][ T4828] SQUASHFS error: zstd decompression error: 10 [ 116.950272][ T4828] SQUASHFS error: zstd decompression failed, data probably corrupt [ 116.958177][ T4828] SQUASHFS error: Failed to read block 0x60: -5 [ 117.919294][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 118.192444][ T4839] loop2: detected capacity change from 0 to 24 [ 118.199700][ T4839] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 118.206802][ T4839] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 118.668026][ T4848] random: crng reseeded on system resumption [ 118.801796][ T4847] loop3: detected capacity change from 0 to 1024 [ 118.914076][ T4847] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 118.968692][ T4851] loop1: detected capacity change from 0 to 128 [ 119.876574][ T9] kworker/u4:0: attempt to access beyond end of device [ 119.876574][ T9] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 124.250688][ T4880] loop0: detected capacity change from 0 to 8 [ 125.320786][ T4878] SQUASHFS error: zstd decompression error: 10 [ 125.326988][ T4878] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.334971][ T4878] SQUASHFS error: Failed to read block 0x60: -5 [ 125.341568][ T4878] SQUASHFS error: zstd decompression error: 10 [ 125.347739][ T4878] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.355725][ T4878] SQUASHFS error: Failed to read block 0x60: -5 [ 125.444615][ T4886] loop2: detected capacity change from 0 to 24 [ 125.451679][ T4886] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 125.458883][ T4886] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 125.864117][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 126.683545][ T4898] loop4: detected capacity change from 0 to 128 [ 127.648748][ T51] kworker/u4:3: attempt to access beyond end of device [ 127.648748][ T51] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 127.790522][ T4908] loop2: detected capacity change from 0 to 32768 [ 127.802969][ T4908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.147 (4908) [ 127.822327][ T4908] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.833115][ T4908] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.841872][ T4908] BTRFS info (device loop2): setting nodatacow, compression disabled [ 127.849943][ T4908] BTRFS info (device loop2): max_inline at 0 [ 127.855958][ T4908] BTRFS info (device loop2): enabling disk space caching [ 127.863008][ T4908] BTRFS info (device loop2): turning off barriers [ 127.869410][ T4908] BTRFS info (device loop2): doing ref verification [ 127.876019][ T4908] BTRFS info (device loop2): force clearing of disk cache [ 127.883194][ T4908] BTRFS info (device loop2): enabling ssd optimizations [ 127.890138][ T4908] BTRFS info (device loop2): max_inline at 4096 [ 127.896406][ T4908] BTRFS info (device loop2): disk space caching is enabled [ 128.441454][ T4933] random: crng reseeded on system resumption [ 128.461275][ T4908] BTRFS info (device loop2): rebuilding free space tree [ 128.488373][ T4908] BTRFS info (device loop2): disabling free space tree [ 128.495392][ T4908] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.505170][ T4908] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.611781][ T4908] Bluetooth: MGMT ver 1.22 [ 128.862807][ T4937] BTRFS error (device loop2: state M): unrecognized mount option '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 129.592340][ T4943] loop3: detected capacity change from 0 to 8 [ 129.631764][ T4943] SQUASHFS error: zstd decompression error: 10 [ 129.637993][ T4943] SQUASHFS error: zstd decompression failed, data probably corrupt [ 129.646463][ T4943] SQUASHFS error: Failed to read block 0x60: -5 [ 129.656366][ T4943] SQUASHFS error: zstd decompression error: 10 [ 129.662610][ T4943] SQUASHFS error: zstd decompression failed, data probably corrupt [ 129.671399][ T4943] SQUASHFS error: Failed to read block 0x60: -5 [ 131.272414][ T4947] loop3: detected capacity change from 0 to 32768 [ 131.284130][ T4266] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.734916][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741267][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010488][ T4983] loop0: detected capacity change from 0 to 8 [ 133.094983][ T4983] SQUASHFS error: zstd decompression error: 10 [ 133.101555][ T4983] SQUASHFS error: zstd decompression failed, data probably corrupt [ 133.109604][ T4983] SQUASHFS error: Failed to read block 0x60: -5 [ 133.153836][ T4983] SQUASHFS error: zstd decompression error: 10 [ 133.160140][ T4983] SQUASHFS error: zstd decompression failed, data probably corrupt [ 133.168293][ T4983] SQUASHFS error: Failed to read block 0x60: -5 [ 137.194409][ T5012] loop2: detected capacity change from 0 to 24 [ 137.201318][ T5012] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 137.211763][ T5012] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 137.900020][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 139.099406][ T5021] loop0: detected capacity change from 0 to 1024 [ 139.204918][ T5021] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 139.893211][ T5009] loop1: detected capacity change from 0 to 32768 [ 142.231187][ T5049] loop2: detected capacity change from 0 to 24 [ 142.244221][ T5049] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 142.251574][ T5049] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 142.711736][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 143.391621][ T5057] loop4: detected capacity change from 0 to 32768 [ 143.408395][ T5057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.190 (5057) [ 143.453339][ T5057] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.463623][ T5057] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 143.472347][ T5057] BTRFS info (device loop4): setting nodatacow, compression disabled [ 143.480421][ T5057] BTRFS info (device loop4): max_inline at 0 [ 143.486420][ T5057] BTRFS info (device loop4): enabling disk space caching [ 143.493919][ T5057] BTRFS info (device loop4): turning off barriers [ 143.500338][ T5057] BTRFS info (device loop4): doing ref verification [ 143.506952][ T5057] BTRFS info (device loop4): force clearing of disk cache [ 143.514357][ T5057] BTRFS info (device loop4): enabling ssd optimizations [ 143.521346][ T5057] BTRFS info (device loop4): max_inline at 4096 [ 143.527574][ T5057] BTRFS info (device loop4): disk space caching is enabled [ 144.044822][ T5057] BTRFS info (device loop4): rebuilding free space tree [ 144.059737][ T5057] BTRFS info (device loop4): disabling free space tree [ 144.067624][ T5057] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.077297][ T5057] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.978561][ T4269] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.226476][ T4387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop4 scanned by udevd (4387) [ 146.285448][ T5070] loop3: detected capacity change from 0 to 32768 [ 149.108747][ T5123] loop1: detected capacity change from 0 to 8 [ 149.901259][ T5119] SQUASHFS error: zstd decompression error: 10 [ 149.907492][ T5119] SQUASHFS error: zstd decompression failed, data probably corrupt [ 149.915547][ T5119] SQUASHFS error: Failed to read block 0x60: -5 [ 149.922136][ T5119] SQUASHFS error: zstd decompression error: 10 [ 149.928335][ T5119] SQUASHFS error: zstd decompression failed, data probably corrupt [ 149.936351][ T5119] SQUASHFS error: Failed to read block 0x60: -5 [ 150.042871][ T5124] binder: BINDER_SET_CONTEXT_MGR already set [ 150.049853][ T5124] binder: 5120:5124 ioctl 4018620d 2000000002c0 returned -16 [ 150.844504][ T5131] loop4: detected capacity change from 0 to 32768 [ 150.889113][ T5131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.206 (5131) [ 150.907384][ T5131] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.916421][ T5133] loop1: detected capacity change from 0 to 256 [ 150.917634][ T5131] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 150.932562][ T5131] BTRFS info (device loop4): force clearing of disk cache [ 150.939679][ T5131] BTRFS info (device loop4): enabling auto defrag [ 150.946123][ T5131] BTRFS info (device loop4): enabling disk space caching [ 150.953383][ T5131] BTRFS info (device loop4): disk space caching is enabled [ 151.045261][ T26] audit: type=1326 audit(1755322706.812:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8ab8ebe9 code=0x7ffc0000 [ 151.079734][ T26] audit: type=1326 audit(1755322706.842:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad8ab8d550 code=0x7ffc0000 [ 151.091601][ T5133] exfat: Deprecated parameter 'namecase' [ 151.101972][ T26] audit: type=1326 audit(1755322706.842:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 151.129881][ T26] audit: type=1326 audit(1755322706.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 151.151842][ T26] audit: type=1326 audit(1755322706.842:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 151.174351][ T26] audit: type=1326 audit(1755322706.842:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 151.375131][ T5133] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 151.558483][ T5131] BTRFS info (device loop4): enabling ssd optimizations [ 151.573267][ T5131] BTRFS info (device loop4): rebuilding free space tree [ 151.641240][ T5131] BTRFS info (device loop4): disabling free space tree [ 151.648436][ T5131] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.658238][ T5131] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.710543][ T5131] BTRFS info (device loop4): checking UUID tree [ 151.797380][ T5090] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.081153][ T26] audit: type=1326 audit(1755322707.842:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 152.142963][ T26] audit: type=1326 audit(1755322707.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 152.191249][ T4269] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.401130][ T5090] usb 1-1: Using ep0 maxpacket: 16 [ 152.406816][ T26] audit: type=1326 audit(1755322708.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 152.425176][ T5090] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 152.450769][ T5090] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.459154][ T5090] usb 1-1: Product: syz [ 152.483993][ T5090] usb 1-1: Manufacturer: syz [ 152.488638][ T5090] usb 1-1: SerialNumber: syz [ 152.503773][ T26] audit: type=1326 audit(1755322708.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8ab8e7eb code=0x7ffc0000 [ 152.587074][ T5166] loop2: detected capacity change from 0 to 24 [ 152.594061][ T5166] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 152.623527][ T5166] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 152.648438][ T5090] usb 1-1: config 0 descriptor?? [ 153.370145][ T4331] usb 1-1: USB disconnect, device number 2 [ 153.894936][ T5159] loop3: detected capacity change from 0 to 32768 [ 154.373904][ T5189] loop1: detected capacity change from 0 to 8 [ 154.402131][ T5189] SQUASHFS error: zstd decompression error: 10 [ 154.408363][ T5189] SQUASHFS error: zstd decompression failed, data probably corrupt [ 154.416567][ T5189] SQUASHFS error: Failed to read block 0x60: -5 [ 154.424062][ T5189] SQUASHFS error: zstd decompression error: 10 [ 154.430263][ T5189] SQUASHFS error: zstd decompression failed, data probably corrupt [ 154.438375][ T5189] SQUASHFS error: Failed to read block 0x60: -5 [ 157.388294][ T5212] loop0: detected capacity change from 0 to 16 [ 158.323151][ T5212] erofs: (device loop0): mounted with root inode @ nid 36. [ 158.416004][ T5217] loop4: detected capacity change from 0 to 1024 [ 158.689510][ T5217] hfsplus: invalid xattr key length: 0 [ 158.814165][ T4423] hfsplus: b-tree write err: -5, ino 8 [ 158.826753][ T5224] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.394614][ T5235] loop4: detected capacity change from 0 to 8 [ 160.111592][ T5234] SQUASHFS error: zstd decompression error: 10 [ 160.117755][ T5234] SQUASHFS error: zstd decompression failed, data probably corrupt [ 160.125761][ T5234] SQUASHFS error: Failed to read block 0x60: -5 [ 160.134915][ T5234] SQUASHFS error: zstd decompression error: 10 [ 160.141085][ T5234] SQUASHFS error: zstd decompression failed, data probably corrupt [ 160.149003][ T5234] SQUASHFS error: Failed to read block 0x60: -5 [ 160.350064][ T5226] loop0: detected capacity change from 0 to 32768 [ 160.702489][ T5240] loop4: detected capacity change from 0 to 2048 [ 161.011873][ T5240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.915710][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 162.573406][ T5257] loop0: detected capacity change from 0 to 24 [ 162.580007][ T5257] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 162.587289][ T5257] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 163.748793][ T5167] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 163.782850][ T5167] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 163.819776][ T5167] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 164.690296][ T5167] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 164.854926][ T5278] fido_id[5278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.956889][ T5283] loop4: detected capacity change from 0 to 1024 [ 164.990367][ T5283] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 165.050920][ T5164] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.980793][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 165.987557][ T5164] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.021124][ T5164] usb 2-1: config 0 has no interface number 0 [ 166.074969][ T5164] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 166.127015][ T5164] usb 2-1: config 0 interface 1 has no altsetting 0 [ 166.151712][ T5164] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 166.285957][ T5289] loop3: detected capacity change from 0 to 4096 [ 166.583857][ T5296] loop4: detected capacity change from 0 to 4096 [ 166.598465][ T5296] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 167.653804][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.072711][ T5164] usb 2-1: Product: syz [ 168.076991][ T5164] usb 2-1: Manufacturer: syz [ 168.081715][ T5164] usb 2-1: SerialNumber: syz [ 168.142366][ T5164] usb 2-1: config 0 descriptor?? [ 168.160919][ T5164] usb 2-1: can't set config #0, error -71 [ 168.190523][ T5164] usb 2-1: USB disconnect, device number 2 [ 168.211775][ T5298] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.267209][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 168.267223][ T26] audit: type=1804 audit(1755322724.032:36): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.242" name="/newroot/47/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 168.470819][ T26] audit: type=1804 audit(1755322724.092:37): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.242" name="/newroot/47/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 170.380984][ T5323] loop1: detected capacity change from 0 to 1024 [ 170.480926][ T5323] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 170.577932][ T5328] loop0: detected capacity change from 0 to 8 [ 170.618812][ T5328] SQUASHFS error: zstd decompression error: 10 [ 170.625291][ T5328] SQUASHFS error: zstd decompression failed, data probably corrupt [ 170.633378][ T5328] SQUASHFS error: Failed to read block 0x60: -5 [ 170.641888][ T5328] SQUASHFS error: zstd decompression error: 10 [ 170.648102][ T5328] SQUASHFS error: zstd decompression failed, data probably corrupt [ 170.656179][ T5328] SQUASHFS error: Failed to read block 0x60: -5 [ 171.132786][ T5327] loop2: detected capacity change from 0 to 128 [ 171.515966][ T5327] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 171.672054][ T5327] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 172.721490][ T5342] loop2: detected capacity change from 0 to 512 [ 172.734934][ T5342] EXT4-fs (loop2): bad geometry: block count 65664 exceeds size of device (128 blocks) [ 173.277778][ T5334] loop0: detected capacity change from 0 to 1024 [ 173.702138][ T5355] loop3: detected capacity change from 0 to 256 [ 173.709482][ T5334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.718185][ T5334] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.722585][ T5355] exfat: Deprecated parameter 'namecase' [ 173.887081][ T5355] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 174.860234][ T5364] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 174.938310][ T5366] loop1: detected capacity change from 0 to 4096 [ 174.948518][ T5366] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 175.013939][ T5366] ntfs3: loop1: Failed to load $Extend. [ 176.456133][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 176.662679][ T5376] loop2: detected capacity change from 0 to 1024 [ 176.819040][ T5376] hfsplus: invalid xattr key length: 0 [ 177.141850][ T5383] loop0: detected capacity change from 0 to 8 [ 177.766599][ T5382] SQUASHFS error: zstd decompression error: 10 [ 177.772858][ T5382] SQUASHFS error: zstd decompression failed, data probably corrupt [ 177.780831][ T5382] SQUASHFS error: Failed to read block 0x60: -5 [ 177.801001][ T5382] SQUASHFS error: zstd decompression error: 10 [ 177.807158][ T5382] SQUASHFS error: zstd decompression failed, data probably corrupt [ 177.815072][ T5382] SQUASHFS error: Failed to read block 0x60: -5 [ 178.113986][ T1120] hfsplus: b-tree write err: -5, ino 8 [ 178.302561][ T5390] loop2: detected capacity change from 0 to 736 [ 178.520816][ T5091] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.837682][ T5399] binder: BINDER_SET_CONTEXT_MGR already set [ 178.844066][ T5399] binder: 5397:5399 ioctl 4018620d 2000000002c0 returned -16 [ 179.112333][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.624344][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.769608][ T5091] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 179.825998][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.908493][ T5091] usb 4-1: config 0 descriptor?? [ 180.410920][ T5091] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 180.427466][ T5091] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 180.620108][ T5091] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 180.760886][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 180.767215][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 180.767240][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 180.773285][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 180.773315][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 180.889226][ T5419] loop4: detected capacity change from 0 to 24 [ 180.895961][ T5419] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 180.904736][ T5419] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 181.431602][ T5091] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 181.565134][ T5091] usb 4-1: USB disconnect, device number 2 [ 181.948941][ T5423] fido_id[5423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 182.343847][ T5421] loop2: detected capacity change from 0 to 40427 [ 182.385566][ T5421] F2FS-fs (loop2): invalid crc value [ 182.399079][ T5421] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.410971][ T5167] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.637804][ T5421] F2FS-fs (loop2): Start checkpoint disabled! [ 182.640977][ T5167] usb 4-1: Using ep0 maxpacket: 32 [ 182.653391][ T5167] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.699190][ T5167] usb 4-1: config 0 has no interface number 0 [ 182.730037][ T5421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.736487][ T5167] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 182.803803][ T5167] usb 4-1: config 0 interface 1 has no altsetting 0 [ 182.825564][ T5167] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 182.929823][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.100397][ T5167] usb 4-1: Product: syz [ 183.188054][ T5167] usb 4-1: Manufacturer: syz [ 183.501173][ T5167] usb 4-1: SerialNumber: syz [ 183.571679][ T5167] usb 4-1: config 0 descriptor?? [ 183.604585][ T5441] loop1: detected capacity change from 0 to 64 [ 184.726663][ T5167] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 184.779982][ T5167] cx231xx 4-1:0.1: Failed to read PCB config [ 184.812342][ T4477] kworker/u4:13: attempt to access beyond end of device [ 184.812342][ T4477] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 184.838566][ T5167] cx231xx: probe of 4-1:0.1 failed with error -71 [ 184.986903][ T5167] usb 4-1: USB disconnect, device number 3 [ 185.121735][ T5447] loop1: detected capacity change from 0 to 128 [ 185.470838][ T5167] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.195510][ T4449] kworker/u4:11: attempt to access beyond end of device [ 186.195510][ T4449] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 186.218900][ T5451] loop3: detected capacity change from 0 to 4096 [ 186.310182][ T5451] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 186.330811][ T5167] usb 4-1: device not accepting address 4, error -71 [ 186.346730][ T5453] loop0: detected capacity change from 0 to 1024 [ 186.409536][ T5451] ntfs3: loop3: Failed to load $Extend. [ 186.493421][ T5455] loop1: detected capacity change from 0 to 128 [ 186.880325][ T5455] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 189.655154][ T5474] loop3: detected capacity change from 0 to 32768 [ 189.689253][ T5474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.300 (5474) [ 189.728823][ T5474] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.749391][ T5474] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 189.767323][ T5474] BTRFS info (device loop3): turning on sync discard [ 189.827128][ T5474] BTRFS info (device loop3): setting nodatacow, compression disabled [ 189.864886][ T5474] BTRFS info (device loop3): turning off barriers [ 189.915942][ T5474] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 189.989535][ T5468] loop2: detected capacity change from 0 to 32768 [ 189.996156][ T5474] BTRFS info (device loop3): trying to use backup root at mount time [ 190.030939][ T5474] BTRFS info (device loop3): metadata ratio 3 [ 190.111066][ T5474] BTRFS info (device loop3): enabling auto defrag [ 190.118377][ T5474] BTRFS info (device loop3): doing ref verification [ 190.134179][ T5474] BTRFS info (device loop3): max_inline at 0 [ 190.140196][ T5474] BTRFS info (device loop3): using free space tree [ 190.202754][ T5468] XFS (loop2): Mounting V5 Filesystem [ 190.234680][ T5492] loop0: detected capacity change from 0 to 8 [ 190.270226][ T5492] SQUASHFS error: zstd decompression error: 10 [ 190.276480][ T5492] SQUASHFS error: zstd decompression failed, data probably corrupt [ 190.284649][ T5492] SQUASHFS error: Failed to read block 0x60: -5 [ 190.302519][ T5492] SQUASHFS error: zstd decompression error: 10 [ 190.308741][ T5492] SQUASHFS error: zstd decompression failed, data probably corrupt [ 190.316943][ T5492] SQUASHFS error: Failed to read block 0x60: -5 [ 190.728984][ T5468] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 190.903812][ T4336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.997791][ T5157] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 191.072438][ T5468] XFS (loop2): Starting recovery (logdev: internal) [ 191.083213][ T5474] BTRFS error (device loop3): failed to load root extent [ 191.113141][ T5474] BTRFS warning (device loop3): try to load backup roots slot 1 [ 191.246184][ T4449] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 191.261638][ T5474] BTRFS warning (device loop3): couldn't read tree root [ 191.261655][ T4336] usb 5-1: Using ep0 maxpacket: 32 [ 191.268666][ T5474] BTRFS warning (device loop3): try to load backup roots slot 2 [ 191.269275][ T5474] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 191.371072][ T5474] BTRFS warning (device loop3): couldn't read tree root [ 191.455090][ T4336] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.494781][ T5474] BTRFS warning (device loop3): try to load backup roots slot 3 [ 191.520468][ T5474] BTRFS info (device loop3): enabling ssd optimizations [ 191.528668][ T4336] usb 5-1: config 0 has no interface number 0 [ 191.539206][ T5474] BTRFS info (device loop3): rebuilding free space tree [ 191.548970][ T4336] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 191.575204][ T5474] BTRFS info (device loop3): checking UUID tree [ 191.585540][ T4336] usb 5-1: config 0 interface 1 has no altsetting 0 [ 191.721274][ T5468] XFS (loop2): Ending recovery (logdev: internal) [ 191.750444][ T4336] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 191.768726][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.779626][ T4336] usb 5-1: Product: syz [ 191.820155][ T4336] usb 5-1: Manufacturer: syz [ 191.843533][ T4336] usb 5-1: SerialNumber: syz [ 191.868612][ T4266] XFS (loop2): Unmounting Filesystem [ 191.877569][ T4336] usb 5-1: config 0 descriptor?? [ 192.190452][ T4336] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 192.222134][ T4336] cx231xx 5-1:0.1: Failed to read PCB config [ 192.224258][ T4278] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.228165][ T4336] cx231xx: probe of 5-1:0.1 failed with error -71 [ 192.301751][ T4336] usb 5-1: USB disconnect, device number 2 [ 193.180177][ T26] audit: type=1326 audit(1755322748.942:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a4b8ebe9 code=0x7ffc0000 [ 193.211088][ T5169] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 193.246519][ T26] audit: type=1326 audit(1755322748.982:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18a4b8d550 code=0x7ffc0000 [ 193.395939][ T26] audit: type=1326 audit(1755322748.992:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.446495][ T26] audit: type=1326 audit(1755322748.992:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.490926][ T5091] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.500021][ T26] audit: type=1326 audit(1755322749.002:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.522169][ T5169] usb 5-1: Using ep0 maxpacket: 32 [ 193.528767][ T5169] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.547182][ T5169] usb 5-1: config 0 has no interface number 0 [ 193.567039][ T5169] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 193.577693][ T26] audit: type=1326 audit(1755322749.002:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.608721][ T5169] usb 5-1: config 0 interface 1 has no altsetting 0 [ 193.628582][ T5169] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 193.652563][ T26] audit: type=1326 audit(1755322749.272:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.680877][ T5091] usb 3-1: Using ep0 maxpacket: 16 [ 193.689428][ T5169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.699832][ T5091] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 193.716181][ T5169] usb 5-1: Product: syz [ 193.720853][ T5169] usb 5-1: Manufacturer: syz [ 193.725460][ T5169] usb 5-1: SerialNumber: syz [ 193.736055][ T5526] loop3: detected capacity change from 0 to 32768 [ 193.738160][ T5091] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 193.746972][ T26] audit: type=1326 audit(1755322749.272:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 193.761095][ T5091] usb 3-1: Product: syz [ 193.779976][ T5169] usb 5-1: config 0 descriptor?? [ 193.805252][ T5091] usb 3-1: Manufacturer: syz [ 193.821000][ T5091] usb 3-1: SerialNumber: syz [ 193.864762][ T5091] usb 3-1: config 0 descriptor?? [ 194.048305][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.054874][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.107332][ T26] audit: type=1326 audit(1755322749.452:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 194.484152][ T5091] usb 3-1: USB disconnect, device number 2 [ 194.599050][ T26] audit: type=1326 audit(1755322749.452:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18a4b8e7eb code=0x7ffc0000 [ 194.638461][ T5169] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 194.660884][ T5169] cx231xx 5-1:0.1: Failed to read PCB config [ 194.666935][ T5169] cx231xx: probe of 5-1:0.1 failed with error -71 [ 194.676042][ T5169] usb 5-1: USB disconnect, device number 3 [ 194.986064][ T5543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.003287][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.061892][ T5547] loop2: detected capacity change from 0 to 2048 [ 195.939592][ T5559] loop1: detected capacity change from 0 to 32768 [ 196.006133][ T5559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.317 (5559) [ 196.063346][ T5559] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.073590][ T5559] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 196.082244][ T5559] BTRFS info (device loop1): force clearing of disk cache [ 196.089404][ T5559] BTRFS info (device loop1): enabling auto defrag [ 196.095839][ T5559] BTRFS info (device loop1): enabling disk space caching [ 196.102858][ T5559] BTRFS info (device loop1): disk space caching is enabled [ 196.625182][ T5559] BTRFS info (device loop1): enabling ssd optimizations [ 196.639072][ T5559] BTRFS info (device loop1): rebuilding free space tree [ 196.654236][ T5559] BTRFS info (device loop1): disabling free space tree [ 196.661220][ T5559] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.670877][ T5559] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.683262][ T5559] BTRFS info (device loop1): checking UUID tree [ 196.748893][ T5545] loop4: detected capacity change from 0 to 32768 [ 196.782524][ T5545] XFS: noikeep mount option is deprecated. [ 196.950022][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.192678][ T5545] XFS (loop4): Mounting V5 Filesystem [ 197.487233][ T5545] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 197.570631][ T5545] XFS (loop4): Starting recovery (logdev: internal) [ 197.827032][ T5545] XFS (loop4): Ending recovery (logdev: internal) [ 198.201343][ T4269] XFS (loop4): Unmounting Filesystem [ 198.303133][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 198.624567][ T5604] loop3: detected capacity change from 0 to 32768 [ 198.649710][ T5614] loop2: detected capacity change from 0 to 2048 [ 198.810978][ T4368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 199.330799][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 199.339611][ T4368] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 199.366580][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 199.374753][ T4368] usb 1-1: Product: syz [ 199.378950][ T4368] usb 1-1: Manufacturer: syz [ 199.383652][ T4368] usb 1-1: SerialNumber: syz [ 199.409120][ T4368] usb 1-1: config 0 descriptor?? [ 199.757718][ T4368] usb 1-1: USB disconnect, device number 3 [ 199.830222][ T5632] loop4: detected capacity change from 0 to 1024 [ 199.912780][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 199.912794][ T26] audit: type=1800 audit(1755322755.682:66): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.336" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 201.479736][ T5648] loop4: detected capacity change from 0 to 8 [ 201.963224][ T4280] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 201.971907][ T4280] Bluetooth: hci1: Injecting HCI hardware error event [ 201.982340][ T4279] Bluetooth: hci1: hardware error 0x00 [ 203.400853][ T4280] Bluetooth: hci0: command 0x0c20 tx timeout [ 204.283925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.301750][ T5660] loop4: detected capacity change from 0 to 2048 [ 205.864210][ T5681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.884658][ T5678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.891092][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 206.120861][ T5091] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.321191][ T5091] usb 5-1: Using ep0 maxpacket: 16 [ 206.350547][ T5091] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 206.386522][ T5693] loop2: detected capacity change from 0 to 8 [ 206.868830][ T5693] SQUASHFS error: zstd decompression error: 10 [ 206.875170][ T5693] SQUASHFS error: zstd decompression failed, data probably corrupt [ 206.883946][ T5693] SQUASHFS error: Failed to read block 0x60: -5 [ 206.893708][ T5693] SQUASHFS error: zstd decompression error: 10 [ 206.899922][ T5693] SQUASHFS error: zstd decompression failed, data probably corrupt [ 206.908081][ T5693] SQUASHFS error: Failed to read block 0x60: -5 [ 206.936736][ T5091] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 206.945947][ T5091] usb 5-1: Product: syz [ 206.950268][ T5091] usb 5-1: Manufacturer: syz [ 206.957365][ T5091] usb 5-1: SerialNumber: syz [ 206.967018][ T5091] usb 5-1: config 0 descriptor?? [ 207.188045][ T5091] usb 5-1: USB disconnect, device number 4 [ 207.517281][ T5702] loop0: detected capacity change from 0 to 2048 [ 207.557355][ T4387] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.195508][ T5710] loop2: detected capacity change from 0 to 24 [ 208.202395][ T5710] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 208.425107][ T5710] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 210.419949][ T5721] loop1: detected capacity change from 0 to 32768 [ 210.471568][ T5721] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.362 (5721) [ 210.475490][ T5735] loop4: detected capacity change from 0 to 512 [ 210.512144][ T5735] EXT4-fs (loop4): bad geometry: block count 65664 exceeds size of device (128 blocks) [ 210.555380][ T5721] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.646445][ T5721] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 210.714411][ T5721] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 210.734585][ T5721] BTRFS info (device loop1): use zstd compression, level 3 [ 210.750251][ T5721] BTRFS info (device loop1): using free space tree [ 211.138879][ T5752] loop4: detected capacity change from 0 to 128 [ 211.216920][ T5721] BTRFS info (device loop1): enabling ssd optimizations [ 211.244367][ T5752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.263433][ T5752] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.500757][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 211.933316][ T4337] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 212.140835][ T4337] usb 5-1: Using ep0 maxpacket: 16 [ 212.149514][ T4337] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 212.197196][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 212.242090][ T4337] usb 5-1: Product: syz [ 212.256551][ T4337] usb 5-1: Manufacturer: syz [ 212.269162][ T4337] usb 5-1: SerialNumber: syz [ 212.442282][ T4337] usb 5-1: config 0 descriptor?? [ 212.886717][ T5766] loop0: detected capacity change from 0 to 4096 [ 212.902738][ T4337] usb 5-1: USB disconnect, device number 5 [ 213.163966][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.233001][ T5766] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 213.311170][ T4274] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 213.626822][ T5778] overlayfs: upper fs does not support tmpfile. [ 213.679389][ T5786] binder: 5784:5786 ioctl c0306201 200000000080 returned -14 [ 213.723649][ T5778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.916281][ T5803] loop4: detected capacity change from 0 to 24 [ 214.939071][ T5803] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 215.088274][ T5803] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 215.587866][ T5810] loop0: detected capacity change from 0 to 1024 [ 216.849864][ T5818] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 216.904085][ T5817] loop2: detected capacity change from 0 to 512 [ 217.104952][ T5817] EXT4-fs (loop2): too many log groups per flexible block group [ 217.191010][ T5817] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 217.199063][ T5817] EXT4-fs (loop2): mount failed [ 218.524262][ T5830] loop2: detected capacity change from 0 to 2048 [ 218.741063][ T5836] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.824178][ T5836] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 218.855751][ T5836] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 218.885288][ T5836] Remounting filesystem read-only [ 220.466712][ T5843] loop2: detected capacity change from 0 to 32768 [ 220.520164][ T5843] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.395 (5843) [ 220.525008][ T5843] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 220.525098][ T5843] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 220.525150][ T5843] BTRFS info (device loop2): enabling auto defrag [ 220.525186][ T5843] BTRFS info (device loop2): ignoring bad roots [ 220.525224][ T5843] BTRFS info (device loop2): unrecognized rescue option 'isuperflags' [ 220.525249][ T5843] BTRFS error (device loop2): unrecognized rescue value isuperflags [ 220.527554][ T5843] BTRFS error (device loop2): open_ctree failed: -22 [ 222.208396][ T4387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4387) [ 223.116050][ T5887] loop3: detected capacity change from 0 to 8 [ 223.476706][ T5887] SQUASHFS error: zstd decompression error: 10 [ 223.483076][ T5887] SQUASHFS error: zstd decompression failed, data probably corrupt [ 223.491190][ T5887] SQUASHFS error: Failed to read block 0x60: -5 [ 223.500794][ T5887] SQUASHFS error: zstd decompression error: 10 [ 223.507010][ T5887] SQUASHFS error: zstd decompression failed, data probably corrupt [ 223.515118][ T5887] SQUASHFS error: Failed to read block 0x60: -5 [ 223.896957][ T5865] loop2: detected capacity change from 0 to 32768 [ 223.957798][ T5865] XFS: noikeep mount option is deprecated. [ 223.989446][ T5895] loop4: detected capacity change from 0 to 24 [ 224.009284][ T5895] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 224.052441][ T5865] XFS (loop2): Mounting V5 Filesystem [ 224.193654][ T5895] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 225.045663][ T5865] XFS (loop2): Ending clean mount [ 225.086157][ T5865] XFS (loop2): Quotacheck needed: Please wait. [ 226.101159][ T5865] XFS (loop2): Quotacheck: Done. [ 226.223897][ T4266] XFS (loop2): Unmounting Filesystem [ 226.425840][ T5914] loop3: detected capacity change from 0 to 32768 [ 226.474080][ T5914] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.414 (5914) [ 226.574783][ T5914] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 226.640922][ T5914] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 226.789499][ T5914] BTRFS info (device loop3): use no compression [ 226.938666][ T5914] BTRFS info (device loop3): turning on flush-on-commit [ 227.013529][ T5928] netlink: 240 bytes leftover after parsing attributes in process `syz.2.417'. [ 227.031036][ T5914] BTRFS info (device loop3): using free space tree [ 227.726358][ T5914] BTRFS info (device loop3): enabling ssd optimizations [ 228.089334][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.171594][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.403388][ T4278] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 232.240079][ T6004] loop0: detected capacity change from 0 to 8 [ 232.285804][ T6004] SQUASHFS error: zstd decompression error: 10 [ 232.292135][ T6004] SQUASHFS error: zstd decompression failed, data probably corrupt [ 232.300227][ T6004] SQUASHFS error: Failed to read block 0x60: -5 [ 232.309703][ T6004] SQUASHFS error: zstd decompression error: 10 [ 232.315995][ T6004] SQUASHFS error: zstd decompression failed, data probably corrupt [ 232.324156][ T6004] SQUASHFS error: Failed to read block 0x60: -5 [ 232.800902][ T4968] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 233.012365][ T4968] usb 3-1: Using ep0 maxpacket: 32 [ 233.099582][ T4968] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.789068][ T4968] usb 3-1: config 0 has no interface number 0 [ 233.812571][ T4968] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 233.829383][ T4968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.838626][ T4968] usb 3-1: Product: syz [ 233.844545][ T4968] usb 3-1: Manufacturer: syz [ 233.849301][ T4968] usb 3-1: SerialNumber: syz [ 233.864134][ T4968] usb 3-1: config 0 descriptor?? [ 233.875962][ T4968] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 233.887108][ T4968] usb 3-1: selecting invalid altsetting 1 [ 233.893905][ T4968] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 233.915400][ T4968] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 233.922236][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.926207][ T4968] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 233.953812][ T5168] wlan1: authenticate with 08:02:11:00:00:00 [ 233.971515][ T5168] wlan1: No legacy rates in association response [ 233.986282][ T4968] usb 3-1: media controller created [ 234.010037][ T5168] [ 234.012632][ T5168] ============================= [ 234.017520][ T5168] WARNING: suspicious RCU usage [ 234.022442][ T5168] 6.1.148-syzkaller #0 Not tainted [ 234.027559][ T5168] ----------------------------- [ 234.032430][ T5168] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 234.041111][ T5168] [ 234.041111][ T5168] other info that might help us debug this: [ 234.041111][ T5168] [ 234.051362][ T5168] [ 234.051362][ T5168] rcu_scheduler_active = 2, debug_locks = 1 [ 234.059404][ T5168] 4 locks held by kworker/0:11/5168: [ 234.064697][ T5168] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 234.075085][ T5168] #1: ffffc9001c057d00 ((work_completion)(&rdev->conn_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 234.086703][ T5168] #2: ffff8880748807c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0xb1/0x410 [ 234.096639][ T5168] #3: ffff888026468d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0x13d/0x410 [ 234.106135][ T5168] [ 234.106135][ T5168] stack backtrace: [ 234.112071][ T5168] CPU: 0 PID: 5168 Comm: kworker/0:11 Not tainted 6.1.148-syzkaller #0 [ 234.120307][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.130348][ T5168] Workqueue: events cfg80211_conn_work [ 234.135818][ T5168] Call Trace: [ 234.139085][ T5168] [ 234.142006][ T5168] dump_stack_lvl+0x168/0x22e [ 234.146680][ T5168] ? show_regs_print_info+0x12/0x12 [ 234.151867][ T5168] ? load_image+0x3b0/0x3b0 [ 234.156365][ T5168] lockdep_rcu_suspicious+0x1dd/0x300 [ 234.161731][ T5168] sta_remove_link+0x356/0x4b0 [ 234.166502][ T5168] sta_info_free+0x50/0x670 [ 234.171189][ T5168] ? ieee80211_prep_connection+0x52d/0x1420 [ 234.177098][ T5168] ieee80211_prep_connection+0xf5e/0x1420 [ 234.182828][ T5168] ? ieee80211_prep_connection+0x52d/0x1420 [ 234.188727][ T5168] ieee80211_mgd_auth+0xc3f/0x1200 [ 234.193850][ T5168] ? __local_bh_enable_ip+0x12a/0x1b0 [ 234.199223][ T5168] ? ieee80211_mlme_notify_scan_completed+0x400/0x400 [ 234.206000][ T5168] ? rcu_is_watching+0x11/0xa0 [ 234.210782][ T5168] cfg80211_mlme_auth+0x5e6/0x9f0 [ 234.215824][ T5168] cfg80211_conn_do_work+0x3f1/0xc30 [ 234.221110][ T5168] ? cfg80211_conn_work+0x410/0x410 [ 234.226390][ T5168] ? mutex_lock_nested+0x10/0x10 [ 234.231339][ T5168] ? mark_lock+0x94/0x320 [ 234.235664][ T5168] ? __lock_acquire+0x13c0/0x7c50 [ 234.240710][ T5168] cfg80211_conn_work+0x2c0/0x410 [ 234.245743][ T5168] ? trace_rdev_return_int+0x240/0x240 [ 234.251213][ T5168] ? __lock_acquire+0x13c0/0x7c50 [ 234.256245][ T5168] ? psi_task_switch+0x398/0x6d0 [ 234.261198][ T5168] ? verify_lock_unused+0x140/0x140 [ 234.266450][ T5168] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.272439][ T5168] ? read_lock_is_recursive+0x10/0x10 [ 234.277798][ T5168] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 234.283703][ T5168] ? _raw_spin_unlock+0x40/0x40 [ 234.288543][ T5168] ? _raw_spin_unlock_irq+0x1f/0x40 [ 234.293728][ T5168] ? process_one_work+0x7a1/0x1160 [ 234.298843][ T5168] process_one_work+0x898/0x1160 [ 234.303792][ T5168] ? worker_detach_from_pool+0x240/0x240 [ 234.309433][ T5168] ? _raw_spin_lock_irq+0xab/0xe0 [ 234.314448][ T5168] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 234.319815][ T5168] ? kthread_data+0x4b/0xc0 [ 234.324330][ T5168] worker_thread+0xaa2/0x1250 [ 234.329043][ T5168] kthread+0x29d/0x330 [ 234.333099][ T5168] ? worker_clr_flags+0x1a0/0x1a0 [ 234.338104][ T5168] ? kthread_blkcg+0xd0/0xd0 [ 234.342689][ T5168] ret_from_fork+0x1f/0x30 [ 234.347112][ T5168] [ 234.434102][ T6015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.437540][ T4968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.450960][ T6007] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 235.492981][ T4968] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 235.500265][ T4968] zl10353_read_register: readreg error (reg=127, ret==-71) [ 235.532894][ T4968] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 235.595353][ T4968] usb 3-1: USB disconnect, device number 3 [ 235.601377][ T5091] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.780866][ T5091] usb 1-1: Using ep0 maxpacket: 16 [ 235.787433][ T5091] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.796404][ T5091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.806554][ T5091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.817635][ T5091] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.826721][ T5091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.835031][ T5091] usb 1-1: Product: syz [ 235.839208][ T5091] usb 1-1: Manufacturer: syz [ 235.843851][ T5091] usb 1-1: SerialNumber: syz [ 236.257667][ T5091] usb 1-1: 0:2 : does not exist [ 236.873904][ T5091] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 236.906364][ T5091] usb 1-1: USB disconnect, device number 4