last executing test programs: 2m38.54302502s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 2m6.517735257s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 1m36.147814824s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 51.692900656s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 28.514978199s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 8.939204626s ago: executing program 4 (id=1584): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000240)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@ref_verify}, {@user_subvol_rm}, {@ssd}, {@max_inline={'max_inline', 0x3d, [0x36, 0x33, 0x39, 0x38, 0x78, 0x38, 0x39]}}, {@max_inline={'max_inline', 0x3d, [0x33, 0x6, 0x25, 0x1a, 0x31, 0x2d, 0x78]}}, {@noenospc_debug}, {@space_cache_v2}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 6.314145047s ago: executing program 4 (id=1603): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfe9, &(0x7f0000001e00)=""/4073}, 0x90) 5.614964318s ago: executing program 2 (id=1606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b}) 5.428475653s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80800) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xed) 4.011535575s ago: executing program 2 (id=1610): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 3.96721333s ago: executing program 4 (id=1612): r0 = io_uring_setup(0x66a, &(0x7f00000002c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.850227146s ago: executing program 5 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.659140443s ago: executing program 1 (id=1615): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.632391697s ago: executing program 4 (id=1616): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, &(0x7f0000000000)) 3.524473977s ago: executing program 5 (id=1617): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 3.395216002s ago: executing program 3 (id=1618): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000c40)='S', 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 3.336031315s ago: executing program 1 (id=1619): socket$igmp6(0xa, 0x3, 0x2) getuid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4278693, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, 0x400}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r3, @ANYBLOB="0324"], 0x28}}, 0x0) mkdir(0x0, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000000b14010000000000000000000900020073797a3100000000"], 0x38}}, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x261, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60454c309f7710cb}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100b2bbd7000fddbdf250c00000008003b00e3d0000008003100f5ffffff08000600", @ANYRES32=0x0, @ANYBLOB="08003b00ff010000"], 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) 3.335694982s ago: executing program 4 (id=1620): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) userfaultfd(0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="ce", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x2, 0x20008880) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x2a, &(0x7f00000003c0)}, &(0x7f0000000380)=0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r9 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGLED(r8, 0x80284504, &(0x7f0000000000)=""/30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x414d6714bf78e135}, 0x9c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 3.146182571s ago: executing program 3 (id=1621): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.390230718s ago: executing program 2 (id=1622): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) 2.334414198s ago: executing program 5 (id=1623): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.279216596s ago: executing program 3 (id=1624): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfe9, &(0x7f0000001e00)=""/4073}, 0x90) 2.262708332s ago: executing program 4 (id=1625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mark_victim\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs={0x0, 0x0, 0x40001}, 0x2f) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf282000000008000359cb4cad676fd8657130653977e0d3be1e013f3545bad58c631629bf6a834ff821c0973ee9bea1e86cea86aace17d29d026094436c95544c218356389e94f2b8ff60252ffc46591a25d6a4b92f4fb85b9057fa8bdd9f1eaa8468b130f603dfcf31f1e10c421be39f52e0b284083a8e77f9defd257b2aad5dd14f226db396f32de81a62198f694d27b0f8000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000e0000006e000000ed7102fab81998b9934268a8e66a6fdc50931dac310af2c3fb41a34999178acd3abdd7c5e44d40a932945e27082e8a0011bacca2fed612abcbc66562d844162d76a7b19ed3de46dc7e84f4d5e554c70a71febe47c6766d880218cf69f1694bdec4fd0afd76de2ab48b0a36fd7aa7863d7d2bd30b8f90c2c684f9e141b915c0ccb7caedc857e1310eaf"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.071145785s ago: executing program 3 (id=1626): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010102"], 0xb8}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.062515093s ago: executing program 1 (id=1627): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.988805419s ago: executing program 2 (id=1628): r0 = io_uring_setup(0x66a, &(0x7f00000002c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.762656599s ago: executing program 3 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 788.177907ms ago: executing program 2 (id=1630): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "ebab"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}]}}, 0x0}, 0x0) 705.401719ms ago: executing program 3 (id=1631): syz_emit_vhci(0x0, 0x17) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x9}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x0, r3, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 694.446415ms ago: executing program 5 (id=1632): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, &(0x7f0000000000)) 599.253224ms ago: executing program 1 (id=1633): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000c40)='S', 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 517.663503ms ago: executing program 5 (id=1634): r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x8001008, r1, 0x0) fanotify_mark(r0, 0x1, 0x48001023, r1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 399.500555ms ago: executing program 1 (id=1635): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 227.371943ms ago: executing program 5 (id=1636): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xaf, 0xf6, 0x0, 0x572, 0x41, 0x39dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8f, 0xcb, 0x76}}]}}]}}, 0x0) 910.466µs ago: executing program 2 (id=1637): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) userfaultfd(0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="ce", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x2, 0x20008880) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x2a, &(0x7f00000003c0)}, &(0x7f0000000380)=0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r9 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGLED(r8, 0x80284504, &(0x7f0000000000)=""/30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x414d6714bf78e135}, 0x9c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 0s ago: executing program 1 (id=1638): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8", r1}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x300, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.661668][ T2857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.669712][ T2857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.721818][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 396.800357][ T1083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.271129][T10034] loop3: detected capacity change from 0 to 512 [ 397.459821][ T5108] Bluetooth: hci1: command tx timeout [ 397.930099][ T9994] chnl_net:caif_netlink_parms(): no params data found [ 398.078330][ T5108] Bluetooth: hci4: command tx timeout [ 398.390208][ T5108] Bluetooth: hci5: command tx timeout [ 398.499704][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.508874][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.516308][ T9986] bridge_slave_0: entered allmulticast mode [ 398.526098][ T9986] bridge_slave_0: entered promiscuous mode [ 398.926954][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.940891][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.948185][ T9986] bridge_slave_1: entered allmulticast mode [ 399.029928][ T9986] bridge_slave_1: entered promiscuous mode [ 399.524416][ T5108] Bluetooth: hci1: command tx timeout [ 399.628211][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.951223][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.150403][ T5108] Bluetooth: hci4: command tx timeout [ 400.237281][T10090] loop2: detected capacity change from 0 to 128 [ 400.278391][T10090] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 400.304886][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.328996][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.343076][ T9994] bridge_slave_0: entered allmulticast mode [ 400.358965][ T9717] sysv_free_block: trying to free block not in datazone [ 400.369565][ T9994] bridge_slave_0: entered promiscuous mode [ 400.407533][ T9717] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 400.428764][ T9986] team0: Port device team_slave_0 added [ 400.463019][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.470744][ T5108] Bluetooth: hci5: command tx timeout [ 400.472879][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.487889][ T9994] bridge_slave_1: entered allmulticast mode [ 400.496252][ T9994] bridge_slave_1: entered promiscuous mode [ 400.573366][T10014] chnl_net:caif_netlink_parms(): no params data found [ 400.622479][ T9986] team0: Port device team_slave_1 added [ 400.764890][T10098] loop2: detected capacity change from 0 to 64 [ 400.825374][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.943400][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.960094][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.986737][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.002508][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.066496][ T1083] bridge_slave_1: left allmulticast mode [ 401.074796][ T1083] bridge_slave_1: left promiscuous mode [ 401.305878][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.326064][ T1083] bridge_slave_0: left allmulticast mode [ 401.335575][ T1083] bridge_slave_0: left promiscuous mode [ 401.342028][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.370118][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 401.581029][ T1083] bridge_slave_1: left allmulticast mode [ 401.589440][ T1083] bridge_slave_1: left promiscuous mode [ 401.595465][ T5108] Bluetooth: hci1: command tx timeout [ 401.602131][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.616620][ T1083] bridge_slave_0: left allmulticast mode [ 401.622534][ T1083] bridge_slave_0: left promiscuous mode [ 401.628536][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.670514][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 401.687075][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 401.698632][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.707003][ T9] usb 4-1: Product: syz [ 401.711349][ T9] usb 4-1: Manufacturer: syz [ 401.716042][ T9] usb 4-1: SerialNumber: syz [ 401.723705][ T9] usb 4-1: config 0 descriptor?? [ 401.735438][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 402.230772][ T5108] Bluetooth: hci4: command tx timeout [ 402.552822][ T5108] Bluetooth: hci5: command tx timeout [ 402.769541][T10121] loop2: detected capacity change from 0 to 128 [ 402.807515][T10121] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 402.867833][ T9717] sysv_free_block: trying to free block not in datazone [ 402.878350][ T9717] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 403.119215][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.164020][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.185090][ T1083] bond0 (unregistering): Released all slaves [ 403.304455][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.318442][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.332352][ T1083] bond0 (unregistering): Released all slaves [ 403.353155][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.366518][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.404091][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.497890][ T9994] team0: Port device team_slave_0 added [ 403.528032][ T9849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 403.590675][ T9994] team0: Port device team_slave_1 added [ 403.653729][ T9849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 403.762111][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.769130][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.795200][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.809793][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.851973][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.859294][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.868412][T10014] bridge_slave_0: entered allmulticast mode [ 403.877648][T10014] bridge_slave_0: entered promiscuous mode [ 403.889649][ T9849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.928322][ T9986] hsr_slave_0: entered promiscuous mode [ 403.935743][ T9986] hsr_slave_1: entered promiscuous mode [ 403.943477][ T9986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.953714][ T9986] Cannot create hsr debugfs directory [ 403.968963][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.989887][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.017536][ T9] gspca_stk1135: reg_w 0x2ff err -71 [ 404.028340][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.041439][ T9] gspca_stk1135: Sensor write failed [ 404.048428][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.059033][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.059053][ T9] gspca_stk1135: Sensor write failed [ 404.059094][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.059109][ T9] gspca_stk1135: Sensor read failed [ 404.059149][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.069742][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.120098][ T9] gspca_stk1135: Sensor read failed [ 404.125420][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 404.130692][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.138067][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.140882][T10014] bridge_slave_1: entered allmulticast mode [ 404.153816][T10014] bridge_slave_1: entered promiscuous mode [ 404.161164][ T9849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.166292][ T9] gspca_stk1135: Sensor read failed [ 404.174068][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.180939][ T9] gspca_stk1135: Sensor read failed [ 404.186446][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.211718][ T9] gspca_stk1135: Sensor write failed [ 404.217213][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 404.224389][ T9] gspca_stk1135: Sensor write failed [ 404.229929][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 404.241769][ T9] usb 4-1: USB disconnect, device number 42 [ 404.310976][ T5108] Bluetooth: hci4: command tx timeout [ 404.479170][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.493689][T10132] loop2: detected capacity change from 0 to 64 [ 404.494904][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.699420][T10135] loop2: detected capacity change from 0 to 512 [ 404.740191][T10135] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 404.759472][T10135] EXT4-fs (loop2): invalid journal inode [ 404.799882][T10135] EXT4-fs (loop2): can't get journal size [ 404.842049][T10135] EXT4-fs (loop2): 1 truncate cleaned up [ 404.867077][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.897028][ T9994] hsr_slave_0: entered promiscuous mode [ 404.905263][ T9994] hsr_slave_1: entered promiscuous mode [ 404.945994][ T9994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.953777][ T9994] Cannot create hsr debugfs directory [ 405.051600][T10014] team0: Port device team_slave_0 added [ 405.074791][T10014] team0: Port device team_slave_1 added [ 405.162939][ T9717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.230437][T10145] loop3: detected capacity change from 0 to 128 [ 405.252123][T10145] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 405.350348][ T9479] sysv_free_block: trying to free block not in datazone [ 405.381933][ T9479] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 405.488973][T10151] loop3: detected capacity change from 0 to 256 [ 405.613312][T10014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.635721][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.663074][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.748131][T10155] loop3: detected capacity change from 0 to 64 [ 405.815644][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.823990][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.853336][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.940382][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 406.006294][ T1083] hsr_slave_0: left promiscuous mode [ 406.022033][ T1083] hsr_slave_1: left promiscuous mode [ 406.028287][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.040356][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.048896][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.056909][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.069363][ T1083] hsr_slave_0: left promiscuous mode [ 406.076143][ T1083] hsr_slave_1: left promiscuous mode [ 406.082955][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.091031][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.099051][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.108079][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.155554][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 406.164525][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.179686][ T1083] veth1_macvtap: left promiscuous mode [ 406.185271][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.194626][ T1083] veth0_macvtap: left promiscuous mode [ 406.200372][ T1083] veth1_vlan: left promiscuous mode [ 406.205712][ T1083] veth0_vlan: left promiscuous mode [ 406.211035][ T25] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.222879][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 406.242994][ T1083] veth1_macvtap: left promiscuous mode [ 406.248557][ T1083] veth0_macvtap: left promiscuous mode [ 406.254687][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.265236][ T1083] veth1_vlan: left promiscuous mode [ 406.270536][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.278559][ T25] usb 3-1: Product: syz [ 406.280436][ T1083] veth0_vlan: left promiscuous mode [ 406.283060][ T25] usb 3-1: Manufacturer: syz [ 406.292762][ T25] usb 3-1: SerialNumber: syz [ 406.512026][ T25] usb 3-1: 0:2 : does not exist [ 406.558001][ T25] usb 3-1: USB disconnect, device number 37 [ 406.820494][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.289678][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 407.336715][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 407.394355][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 407.620307][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 407.631458][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 407.650117][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.670360][ T25] usb 3-1: Product: syz [ 407.677254][ T25] usb 3-1: Manufacturer: syz [ 407.690030][ T25] usb 3-1: SerialNumber: syz [ 407.706868][ T25] usb 3-1: config 0 descriptor?? [ 407.731929][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 408.415800][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 408.474518][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 409.292680][T10014] hsr_slave_0: entered promiscuous mode [ 409.337085][T10014] hsr_slave_1: entered promiscuous mode [ 409.348447][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.360071][T10014] Cannot create hsr debugfs directory [ 409.388393][T10163] loop3: detected capacity change from 0 to 512 [ 409.410237][T10163] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 409.432106][T10163] EXT4-fs (loop3): invalid journal inode [ 409.437873][T10163] EXT4-fs (loop3): can't get journal size [ 409.459370][T10163] EXT4-fs (loop3): 1 truncate cleaned up [ 409.468600][T10163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.615284][ T9479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.887609][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.919297][T10169] loop3: detected capacity change from 0 to 64 [ 409.991490][ T25] gspca_stk1135: reg_w 0x2ff err -71 [ 409.997863][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.039016][ T25] gspca_stk1135: Sensor write failed [ 410.045381][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.065016][ T25] gspca_stk1135: Sensor write failed [ 410.083201][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.090707][ T25] gspca_stk1135: Sensor read failed [ 410.096859][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.104081][ T25] gspca_stk1135: Sensor read failed [ 410.109399][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 410.118884][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.136159][ T25] gspca_stk1135: Sensor read failed [ 410.176704][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.189659][ T25] gspca_stk1135: Sensor read failed [ 410.196572][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.204475][ T25] gspca_stk1135: Sensor write failed [ 410.209952][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 410.231027][ T25] gspca_stk1135: Sensor write failed [ 410.238912][ T25] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 410.254506][ T25] usb 3-1: USB disconnect, device number 38 [ 410.372550][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.531414][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.538601][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.674332][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.681607][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.900358][ T5116] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 411.080470][ T5166] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 411.123962][ T5116] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 411.150327][ T5116] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 411.173280][ T5116] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 411.207018][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 411.241141][ T5116] usb 4-1: Product: syz [ 411.253866][ T5116] usb 4-1: SerialNumber: syz [ 411.286668][ T5116] option 4-1:7.0: GSM modem (1-port) converter detected [ 411.304323][ T5166] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 411.316871][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.374086][ T5166] usb 3-1: config 0 descriptor?? [ 411.403177][ T5166] cp210x 3-1:0.0: cp210x converter detected [ 411.586211][ T1083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.836436][ T5166] usb 3-1: cp210x converter now attached to ttyUSB1 [ 411.874488][ T1083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.941537][ T9986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.968718][ T9986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.018675][ T9986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.031293][ T5168] usb 3-1: USB disconnect, device number 39 [ 412.063399][ T5168] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 412.081542][ T5168] cp210x 3-1:0.0: device disconnected [ 412.137293][ T1083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.189055][ T9986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.293986][ T1083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.396505][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.772617][ T1083] bridge_slave_1: left allmulticast mode [ 412.780116][ T1083] bridge_slave_1: left promiscuous mode [ 412.814995][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.852242][ T1083] bridge_slave_0: left allmulticast mode [ 412.857939][ T1083] bridge_slave_0: left promiscuous mode [ 412.901492][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.436384][ T9] usb 4-1: USB disconnect, device number 43 [ 413.449389][ T9] option 4-1:7.0: device disconnected [ 414.221013][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.249740][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.264735][ T1083] bond0 (unregistering): Released all slaves [ 414.501204][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 414.680355][ T9] usb 4-1: device descriptor read/64, error -71 [ 414.749816][T10244] loop2: detected capacity change from 0 to 64 [ 414.973219][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 415.002340][T10250] loop2: detected capacity change from 0 to 8 [ 415.066537][ T1083] hsr_slave_0: left promiscuous mode [ 415.085955][ T1083] hsr_slave_1: left promiscuous mode [ 415.103915][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.122887][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.144247][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.160237][ T9] usb 4-1: device descriptor read/64, error -71 [ 415.169388][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.245027][ T1083] veth1_macvtap: left promiscuous mode [ 415.265433][ T1083] veth0_macvtap: left promiscuous mode [ 415.278666][ T1083] veth1_vlan: left promiscuous mode [ 415.284683][ T9] usb usb4-port1: attempt power cycle [ 415.291557][ T1083] veth0_vlan: left promiscuous mode [ 415.710263][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 415.759545][ T9] usb 4-1: device descriptor read/8, error -71 [ 416.040643][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 416.102078][ T9] usb 4-1: device descriptor read/8, error -71 [ 416.230597][ T9] usb usb4-port1: unable to enumerate USB device [ 416.641478][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 416.855485][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 416.892455][ T9] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 416.925533][ T9] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 416.936429][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 416.963633][ T9] usb 3-1: Product: syz [ 416.970272][ T9] usb 3-1: SerialNumber: syz [ 416.999932][ T9] option 3-1:7.0: GSM modem (1-port) converter detected [ 417.367549][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 417.523580][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 417.933128][T10298] loop3: detected capacity change from 0 to 2048 [ 418.046383][T10299] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.677796][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.895123][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.983665][ T9849] veth0_vlan: entered promiscuous mode [ 419.094298][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.101541][ T9396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.136884][T10308] loop3: detected capacity change from 0 to 512 [ 419.193266][ T9849] veth1_vlan: entered promiscuous mode [ 419.200312][T10014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.213908][T10308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 419.229635][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.236853][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.265852][T10308] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1317: invalid block [ 419.282588][ T5168] usb 3-1: USB disconnect, device number 40 [ 419.295010][T10014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.303077][ T5168] option 3-1:7.0: device disconnected [ 419.304668][T10308] EXT4-fs (loop3): Remounting filesystem read-only [ 419.319585][T10014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.334094][T10014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.341375][T10308] EXT4-fs (loop3): 2 truncates cleaned up [ 419.349565][T10308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.498743][ T9479] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.575116][ T9994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.637975][ T9994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.718645][ T9994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.780170][ T5168] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 419.780682][ T9994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.849725][ T9849] veth0_macvtap: entered promiscuous mode [ 419.972733][ T9849] veth1_macvtap: entered promiscuous mode [ 419.983902][ T5168] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 420.009463][ T5168] usb 3-1: config 1 has no interface number 1 [ 420.028213][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.029777][ T5168] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.059703][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.084138][ T5168] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 420.094894][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.117892][ T5168] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.128306][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.147522][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.161531][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.177719][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.198154][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.211101][ T5167] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 420.222771][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.236291][ T5168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.255268][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.275819][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.289382][ T5168] usb 3-1: Product: syz [ 420.300078][ T5168] usb 3-1: Manufacturer: syz [ 420.304694][ T5168] usb 3-1: SerialNumber: syz [ 420.319484][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.340162][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.371015][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.392791][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.415652][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.419381][ T5167] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 420.425989][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.447754][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.455212][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.461710][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.492201][ T5167] usb 4-1: config 0 descriptor?? [ 420.514913][ T5167] cp210x 4-1:0.0: cp210x converter detected [ 420.524023][ T9849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.535767][ T9849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.547626][ T9849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.564492][ T9849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.569945][ T5168] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 420.655987][ T5168] usb 3-1: USB disconnect, device number 41 [ 420.745817][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.966686][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.986506][ T5167] usb 4-1: cp210x converter now attached to ttyUSB0 [ 421.043751][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.093573][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.148374][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.158548][ T5168] usb 4-1: USB disconnect, device number 48 [ 421.193232][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.213286][ T5168] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.247081][ T5168] cp210x 4-1:0.0: device disconnected [ 421.253848][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.388258][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.395556][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.449415][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.478957][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.491559][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.514059][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.521308][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.535929][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.543199][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.619234][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.626532][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.918555][T10355] loop5: detected capacity change from 0 to 64 [ 422.159389][ T9986] veth0_vlan: entered promiscuous mode [ 422.179434][T10358] loop3: detected capacity change from 0 to 4096 [ 422.289629][ T9986] veth1_vlan: entered promiscuous mode [ 422.400672][T10365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.507918][ T9986] veth0_macvtap: entered promiscuous mode [ 422.559758][ T9986] veth1_macvtap: entered promiscuous mode [ 422.619405][T10367] loop5: detected capacity change from 0 to 2048 [ 422.707963][T10373] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.759825][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.820272][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.841858][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.910101][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.930840][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.960759][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.992651][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.030279][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.065089][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.078035][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.108830][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.135060][T10358] loop3: detected capacity change from 4096 to 0 [ 423.144389][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.165859][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.186151][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.232474][T10365] segctord: attempt to access beyond end of device [ 423.232474][T10365] loop3: rw=2049, sector=166, nr_sectors = 30 limit=0 [ 423.240115][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.290081][T10365] NILFS (loop3): I/O error writing log (start-blocknr=83, block-count=15) in segment 1 [ 423.306072][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.359649][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.374525][T10390] Illegal XDP return value 12202 on prog (id 81) dev N/A, expect packet loss! [ 423.385714][T10365] segctord: attempt to access beyond end of device [ 423.385714][T10365] loop3: rw=2049, sector=256, nr_sectors = 32 limit=0 [ 423.399631][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.416431][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=16) in segment 2 [ 423.426871][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.439736][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.460288][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.483771][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.501668][T10388] loop2: detected capacity change from 0 to 2048 [ 423.550832][T10388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.716946][ T9986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.738197][ T9986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.770158][ T9986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.799310][ T9986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.913524][T10365] segctord: attempt to access beyond end of device [ 423.913524][T10365] loop3: rw=2049, sector=256, nr_sectors = 36 limit=0 [ 423.968344][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.004220][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=18) in segment 2 [ 424.044777][T10365] segctord: attempt to access beyond end of device [ 424.044777][T10365] loop3: rw=2049, sector=256, nr_sectors = 38 limit=0 [ 424.076452][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.115489][ T9479] syz-executor: attempt to access beyond end of device [ 424.115489][ T9479] loop3: rw=395265, sector=4088, nr_sectors = 2 limit=0 [ 424.132740][ T9479] Buffer I/O error on dev loop3, logical block 2044, lost sync page write [ 424.143101][ T9479] NILFS (loop3): unable to write superblock: err=-5 [ 424.158773][ T9479] syz-executor: attempt to access beyond end of device [ 424.158773][ T9479] loop3: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 424.191849][ T9479] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 424.201134][ T9479] NILFS (loop3): unable to write superblock: err=-5 [ 424.209840][T10365] segctord: attempt to access beyond end of device [ 424.209840][T10365] loop3: rw=2049, sector=256, nr_sectors = 38 limit=0 [ 424.225180][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.248640][T10365] segctord: attempt to access beyond end of device [ 424.248640][T10365] loop3: rw=2049, sector=256, nr_sectors = 38 limit=0 [ 424.259837][ T2795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.273859][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.289465][T10365] segctord: attempt to access beyond end of device [ 424.289465][T10365] loop3: rw=2049, sector=256, nr_sectors = 38 limit=0 [ 424.308308][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.319637][T10365] segctord: attempt to access beyond end of device [ 424.319637][T10365] loop3: rw=2049, sector=256, nr_sectors = 38 limit=0 [ 424.335082][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.351680][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.364458][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.376002][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.381851][T10402] tipc: Started in network mode [ 424.393573][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.405105][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.406357][T10402] tipc: Node identity 22e7c39ce9a5, cluster identity 4711 [ 424.423852][T10402] tipc: Enabled bearer , priority 0 [ 424.433868][T10365] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.438809][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.461902][ T5168] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 424.486673][ T2795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.491097][ T9479] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.512287][T10399] tipc: Resetting bearer [ 424.524324][ T9479] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.537254][ T9479] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.565717][ T9479] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=19) in segment 2 [ 424.579105][ T9479] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 424.594194][T10398] tipc: Disabling bearer [ 424.607393][ T9479] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 424.618277][ T9479] NILFS (loop3): unable to write superblock: err=-5 [ 424.663717][ T5168] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.691551][ T2795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.696769][ T5168] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.761823][ T5168] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.780884][ T5168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.817749][ T5168] usb 6-1: invalid MIDI out EP 0 [ 424.827257][ T2795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.921952][ T2842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.929819][ T2842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.151577][ T5168] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 425.161187][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.212498][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.228362][ T5168] usb 6-1: USB disconnect, device number 27 [ 425.273473][ T9994] veth0_vlan: entered promiscuous mode [ 425.319622][T10014] veth0_vlan: entered promiscuous mode [ 425.541830][ T9749] udevd[9749]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.607494][ T2795] bridge_slave_1: left allmulticast mode [ 425.647356][ T2795] bridge_slave_1: left promiscuous mode [ 425.672282][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.714571][ T2795] bridge_slave_0: left allmulticast mode [ 425.731676][ T2795] bridge_slave_0: left promiscuous mode [ 425.737492][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.911588][T10413] loop5: detected capacity change from 0 to 2048 [ 426.020690][T10415] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.666039][ T9851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.720204][ T9851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.730432][ T9851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.759921][ T9851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.772360][ T9851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 426.779808][ T9851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.801957][T10424] loop5: detected capacity change from 0 to 2048 [ 426.863550][T10424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.974787][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1341'. [ 427.681102][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.735020][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.785101][ T2795] bond0 (unregistering): Released all slaves [ 427.862689][ T9994] veth1_vlan: entered promiscuous mode [ 427.929512][T10014] veth1_vlan: entered promiscuous mode [ 428.191036][T10435] loop5: detected capacity change from 0 to 32768 [ 428.211336][T10435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1342 (10435) [ 428.264427][T10435] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.305505][T10435] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 428.325757][T10435] BTRFS info (device loop5): using free-space-tree [ 428.379860][T10437] loop2: detected capacity change from 0 to 32768 [ 428.415108][T10437] BTRFS: device /dev/loop2 (7:2) using temp-fsid b9434f59-6ac5-45a8-bddb-c16d52de5f50 [ 428.450790][T10437] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1343 (10437) [ 428.487818][T10437] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.490167][ T5116] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 428.508948][T10437] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 428.536673][T10437] BTRFS info (device loop2): using free-space-tree [ 428.787471][ T5116] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.807032][ T5116] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.818851][ T5116] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.834372][ T5116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.866897][ T9994] veth0_macvtap: entered promiscuous mode [ 428.881024][ T9851] Bluetooth: hci0: command tx timeout [ 428.927634][ T5116] usb 5-1: invalid MIDI out EP 0 [ 428.974963][ T9994] veth1_macvtap: entered promiscuous mode [ 429.006469][ T5116] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 429.054050][T10014] veth0_macvtap: entered promiscuous mode [ 429.077322][ T9717] BTRFS info (device loop2): last unmount of filesystem b9434f59-6ac5-45a8-bddb-c16d52de5f50 [ 429.116570][ T9849] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 429.121884][ T9862] udevd[9862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.200534][ T5168] usb 5-1: USB disconnect, device number 36 [ 429.226575][ T2795] hsr_slave_0: left promiscuous mode [ 429.333393][ T2795] hsr_slave_1: left promiscuous mode [ 429.450618][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.468567][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.501348][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.545257][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.662761][ T5166] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 429.675905][ T2795] veth1_macvtap: left promiscuous mode [ 429.710171][ T2795] veth0_macvtap: left promiscuous mode [ 429.715911][ T2795] veth1_vlan: left promiscuous mode [ 429.750823][ T2795] veth0_vlan: left promiscuous mode [ 429.912212][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.952503][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.992484][ T5166] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 430.010050][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.032671][T10494] loop5: detected capacity change from 0 to 2048 [ 430.043407][ T5166] usb 3-1: config 0 descriptor?? [ 430.119070][T10497] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.508615][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.526451][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.535005][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.544020][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.553684][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.561248][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.594132][ T5166] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 430.640654][ T5166] petalynx 0003:18B1:0037.0007: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 430.723712][ T5166] usb 3-1: USB disconnect, device number 42 [ 430.950330][ T9851] Bluetooth: hci0: command tx timeout [ 431.548275][ T2795] team0 (unregistering): Port device team_slave_1 removed [ 431.617603][ T2795] team0 (unregistering): Port device team_slave_0 removed [ 431.650217][ T5168] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 431.873094][ T5168] usb 3-1: Using ep0 maxpacket: 8 [ 431.881805][ T5168] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.897168][ T5168] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 431.911969][ T5168] usb 3-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 431.932753][ T5168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.958703][ T5168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.970135][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.978193][ T5168] usb 3-1: Product: syz [ 432.000168][ T5168] usb 3-1: Manufacturer: syz [ 432.004862][ T5168] usb 3-1: SerialNumber: syz [ 432.226908][ T5168] usb 3-1: 0:2 : does not exist [ 432.279238][ T5168] usb 3-1: USB disconnect, device number 43 [ 432.458381][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 432.492042][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.578423][T10498] tipc: Enabling of bearer rejected, failed to enable media [ 432.637027][T10014] veth1_macvtap: entered promiscuous mode [ 432.674160][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.684840][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.696015][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.707444][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.711143][ T9] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.719561][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.739065][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.749572][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.780089][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.806633][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.829186][T10525] loop4: detected capacity change from 0 to 2048 [ 432.857226][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.859560][ T9] usb 6-1: invalid MIDI out EP 0 [ 432.895927][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.906259][T10526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.944463][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.966432][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.011920][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.023544][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 433.040695][ T9851] Bluetooth: hci0: command tx timeout [ 433.128653][ T9] usb 6-1: USB disconnect, device number 28 [ 433.141065][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.172622][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.216078][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.267193][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.294427][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.316282][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.328216][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.340613][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.351243][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.362086][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.384230][T10110] udevd[10110]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.404176][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.498072][ T9994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.551209][ T9994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.589457][ T9994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.609271][ T9994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.758446][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.813013][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.844467][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.869807][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.900590][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.939096][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.970300][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.002096][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.032693][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.063645][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.105976][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.149435][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.206876][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.387998][T10561] tipc: Enabled bearer , priority 0 [ 434.413179][T10559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 434.586968][T10556] tipc: Disabling bearer [ 434.685802][T10573] loop4: detected capacity change from 0 to 2048 [ 434.691949][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.737925][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.757793][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.790459][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.794832][T10574] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.801730][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.878728][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.899558][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.922539][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.937320][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.956030][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.966344][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.987682][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.013816][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.047198][T10014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.057482][T10014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.074944][T10014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.086868][T10014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.119436][ T9851] Bluetooth: hci0: command tx timeout [ 435.125046][T10420] chnl_net:caif_netlink_parms(): no params data found [ 435.652487][T10594] loop5: detected capacity change from 0 to 256 [ 435.711263][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.834790][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.985434][ T9396] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 436.193657][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.198141][ T9396] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.210193][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.222176][T10420] bridge_slave_0: entered allmulticast mode [ 436.235686][ T9396] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.251025][ T9396] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.260830][T10420] bridge_slave_0: entered promiscuous mode [ 436.268852][ T9396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.293306][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.307953][T10600] Invalid ELF header magic: != ELF [ 436.322260][ T9396] usb 3-1: invalid MIDI out EP 0 [ 436.338453][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.371013][T10420] bridge_slave_1: entered allmulticast mode [ 436.378866][T10420] bridge_slave_1: entered promiscuous mode [ 436.481113][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.488982][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.535354][ T9396] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 436.608066][ T9396] usb 3-1: USB disconnect, device number 44 [ 436.706953][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.818078][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.880514][T10110] udevd[10110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.952791][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.994750][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.115969][T10420] team0: Port device team_slave_0 added [ 437.372542][T10420] team0: Port device team_slave_1 added [ 437.463709][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.495721][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.561006][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.588398][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.640421][ T5162] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 437.672020][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.734916][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.770271][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.820442][ T5162] usb 3-1: device descriptor read/64, error -71 [ 437.870457][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.090392][ T5162] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 438.107760][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.281435][ T5162] usb 3-1: device descriptor read/64, error -71 [ 438.353268][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.388546][T10420] hsr_slave_0: entered promiscuous mode [ 438.402025][ T5162] usb usb3-port1: attempt power cycle [ 438.412253][T10420] hsr_slave_1: entered promiscuous mode [ 438.418949][T10420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.435725][T10420] Cannot create hsr debugfs directory [ 438.506290][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.820215][ T5162] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 438.860975][ T5162] usb 3-1: device descriptor read/8, error -71 [ 438.875999][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.992970][ T9396] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 439.130194][ T5162] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 439.181667][ T5162] usb 3-1: device descriptor read/8, error -71 [ 439.232491][ T9396] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.257513][ T9396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.293200][ T9396] usb 6-1: config 0 descriptor?? [ 439.317794][ T9396] cp210x 6-1:0.0: cp210x converter detected [ 439.320267][ T5162] usb usb3-port1: unable to enumerate USB device [ 439.595175][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.610979][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.631626][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.660940][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.672905][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.695213][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.711464][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 439.725790][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.751367][ T9396] usb 6-1: cp210x converter now attached to ttyUSB0 [ 439.802397][ T9396] usb 6-1: USB disconnect, device number 29 [ 439.836889][ T9396] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 439.859425][ T9396] cp210x 6-1:0.0: device disconnected [ 439.939525][ T52] bridge_slave_1: left allmulticast mode [ 439.950566][ T52] bridge_slave_1: left promiscuous mode [ 439.956448][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.972368][ T52] bridge_slave_0: left allmulticast mode [ 439.986818][ T52] bridge_slave_0: left promiscuous mode [ 439.999433][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.237671][T10640] loop1: detected capacity change from 0 to 1024 [ 440.606740][T10648] loop4: detected capacity change from 0 to 2048 [ 440.685849][T10652] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.144520][T10656] loop4: detected capacity change from 0 to 4096 [ 441.172029][T10656] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 441.268208][T10656] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 441.755030][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.794625][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.830977][ T5108] Bluetooth: hci5: command tx timeout [ 441.863219][ T52] bond0 (unregistering): Released all slaves [ 442.360368][ T5168] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 442.492253][T10677] loop5: detected capacity change from 0 to 512 [ 442.520313][ T5168] usb 2-1: device descriptor read/64, error -71 [ 442.521254][T10677] ext4: Unknown parameter 'subj_role' [ 442.811455][ T5168] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 442.931673][T10683] loop2: detected capacity change from 0 to 2048 [ 443.011334][ T5168] usb 2-1: device descriptor read/64, error -71 [ 443.077240][T10686] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.108988][T10688] loop4: detected capacity change from 0 to 64 [ 443.132782][ T5168] usb usb2-port1: attempt power cycle [ 443.224620][ T29] audit: type=1800 audit(1721848661.619:377): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1399" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 443.561055][ T5168] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.599224][T10695] overlayfs: failed to resolve './file1': -2 [ 443.627891][ T5168] usb 2-1: device descriptor read/8, error -71 [ 443.689058][ T52] hsr_slave_0: left promiscuous mode [ 443.711827][ T52] hsr_slave_1: left promiscuous mode [ 443.729021][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.746152][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.780868][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.788342][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.904434][ T52] veth1_macvtap: left promiscuous mode [ 443.910716][ T5108] Bluetooth: hci5: command tx timeout [ 443.920448][ T5168] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 443.932427][ T52] veth0_macvtap: left promiscuous mode [ 443.953543][ T52] veth1_vlan: left promiscuous mode [ 443.958872][ T52] veth0_vlan: left promiscuous mode [ 443.961041][ T5168] usb 2-1: device descriptor read/8, error -71 [ 444.091449][ T5168] usb usb2-port1: unable to enumerate USB device [ 444.419204][T10707] loop4: detected capacity change from 0 to 1024 [ 445.263692][ T52] team0 (unregistering): Port device team_slave_1 removed [ 445.369369][ T52] team0 (unregistering): Port device team_slave_0 removed [ 445.640228][ T5162] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 445.830303][ T5162] usb 5-1: Using ep0 maxpacket: 32 [ 445.840664][ T5162] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 445.863600][ T5162] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.874561][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.889337][ T5162] usb 5-1: Product: syz [ 445.896646][ T5162] usb 5-1: Manufacturer: syz [ 445.907486][ T5162] usb 5-1: SerialNumber: syz [ 445.928004][ T5162] usb 5-1: config 0 descriptor?? [ 445.934569][T10713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.990348][ T5108] Bluetooth: hci5: command tx timeout [ 446.033852][T10701] ip6gre0: entered promiscuous mode [ 446.039161][T10701] vlan2: entered promiscuous mode [ 446.049478][T10701] ip6gre0: left promiscuous mode [ 446.172225][ T5162] usb 5-1: USB disconnect, device number 37 [ 446.610297][ T46] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 446.659662][T10724] syz.5.1412 uses obsolete (PF_INET,SOCK_PACKET) [ 446.729853][T10635] chnl_net:caif_netlink_parms(): no params data found [ 446.760868][ T5162] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 446.850246][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 446.872393][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.907659][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 446.932780][ T46] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 446.943717][T10420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.960691][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 446.969757][ T46] usb 3-1: config 1 has no interface number 1 [ 446.981535][ T5162] usb 5-1: Using ep0 maxpacket: 32 [ 446.996592][T10420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 447.005760][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.016901][ T5162] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 447.025339][ T46] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.074656][ T5162] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.082380][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.104615][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 447.110031][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.150447][ T5162] usb 5-1: Product: syz [ 447.165346][ T46] usb 3-1: Product: syz [ 447.169614][T10420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 447.180535][ T5162] usb 5-1: Manufacturer: syz [ 447.185199][ T5162] usb 5-1: SerialNumber: syz [ 447.193329][ T5162] usb 5-1: config 0 descriptor?? [ 447.201728][T10713] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 447.202829][ T46] usb 3-1: Manufacturer: syz [ 447.275414][ T46] usb 3-1: SerialNumber: syz [ 447.287398][T10420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.443709][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.470887][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.491974][T10635] bridge_slave_0: entered allmulticast mode [ 447.540652][T10635] bridge_slave_0: entered promiscuous mode [ 447.567530][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.602514][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.610489][ T46] usb 3-1: USB disconnect, device number 49 [ 447.643951][T10635] bridge_slave_1: entered allmulticast mode [ 447.671619][T10635] bridge_slave_1: entered promiscuous mode [ 447.957956][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.993885][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.070413][ T5108] Bluetooth: hci5: command tx timeout [ 448.639142][T10635] team0: Port device team_slave_0 added [ 448.703504][T10635] team0: Port device team_slave_1 added [ 448.881001][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.064028][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.082554][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.135300][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.205096][T10760] fuse: Unknown parameter 'grou00000000000000000000' [ 449.229166][T10759] ip6gre0: entered promiscuous mode [ 449.257643][T10759] vlan2: entered promiscuous mode [ 449.279606][T10759] ip6gre0: left promiscuous mode [ 449.371112][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.381559][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.417757][T10764] kernel read not supported for file /eth0 (pid: 10764 comm: syz.2.1427) [ 449.418135][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.439776][ T29] audit: type=1800 audit(1721848667.839:378): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1427" name="eth0" dev="mqueue" ino=43594 res=0 errno=0 [ 449.623657][T10635] hsr_slave_0: entered promiscuous mode [ 449.649058][T10635] hsr_slave_1: entered promiscuous mode [ 449.690295][T10635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.711817][T10635] Cannot create hsr debugfs directory [ 449.807348][ T5168] usb 5-1: USB disconnect, device number 38 [ 450.427712][T10420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.886694][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.002913][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.010237][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.035620][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.042917][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.552228][T10792] kernel read not supported for file /eth0 (pid: 10792 comm: syz.2.1439) [ 451.658851][ T29] audit: type=1800 audit(1721848670.039:379): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1439" name="eth0" dev="mqueue" ino=43594 res=0 errno=0 [ 452.180140][ T5166] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 452.391915][ T5166] usb 2-1: Using ep0 maxpacket: 32 [ 452.400888][T10775] loop4: detected capacity change from 0 to 32768 [ 452.402905][ T5166] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 452.426799][ T5166] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.436172][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.445280][ T5166] usb 2-1: Product: syz [ 452.449529][ T5166] usb 2-1: Manufacturer: syz [ 452.454237][ T5166] usb 2-1: SerialNumber: syz [ 452.456230][T10775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1432 (10775) [ 452.461639][ T5166] usb 2-1: config 0 descriptor?? [ 452.487174][T10796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 452.589628][T10775] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 452.627680][T10775] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 452.644254][ T5116] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 452.654436][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.669722][T10775] BTRFS info (device loop4): using free-space-tree [ 452.708642][T10635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.756681][ T5166] usb 2-1: USB disconnect, device number 34 [ 452.764727][T10635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.809333][T10635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.859894][T10635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.874700][ T5116] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 452.915388][ T5116] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 452.955404][ T5116] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 452.972510][ T5116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.014763][ T29] audit: type=1804 audit(1721848671.409:380): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1432" name="/newroot/23/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 453.044616][ T5116] usb 6-1: Product: syz [ 453.053123][ T5116] usb 6-1: Manufacturer: syz [ 453.057744][ T5116] usb 6-1: SerialNumber: syz [ 453.105648][ T5116] usb 6-1: config 0 descriptor?? [ 453.152154][T10806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 453.170345][T10806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 453.264108][ T9986] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 453.350171][ T5166] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 453.411544][T10420] veth0_vlan: entered promiscuous mode [ 453.422012][T10806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 453.429306][T10806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 453.477610][T10420] veth1_vlan: entered promiscuous mode [ 453.569414][T10635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.590057][ T5166] usb 2-1: Using ep0 maxpacket: 32 [ 453.624991][ T5166] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 453.677678][ T5166] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 453.720317][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 453.728578][ T5166] usb 2-1: Product: syz [ 453.749354][T10635] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.758102][ T5166] usb 2-1: Manufacturer: syz [ 453.784203][ T5166] usb 2-1: SerialNumber: syz [ 453.803886][ T5166] usb 2-1: config 0 descriptor?? [ 453.805840][T10420] veth0_macvtap: entered promiscuous mode [ 453.815572][T10796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.921046][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.928375][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.010907][T10420] veth1_macvtap: entered promiscuous mode [ 454.056981][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.064223][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.090613][ T5116] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 454.192851][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.227723][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.274854][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.295097][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.305345][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.331594][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.336247][ T5168] usb 6-1: USB disconnect, device number 30 [ 454.354543][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.381453][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.413243][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.454675][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.485209][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.518386][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.541363][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.598924][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.630039][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.658052][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.678924][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.697457][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.708397][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.720791][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.732313][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.742864][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.753966][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.764350][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.807440][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.829600][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.949275][T10420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.995420][T10420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.009892][T10420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.026603][T10420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.360189][ T46] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 455.413749][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.440087][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.536058][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.562094][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.586248][ T46] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 455.657237][ T46] usb 6-1: config 1 has no interface number 1 [ 455.695056][ T46] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.748803][ T46] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.820838][ T46] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.886169][ T46] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.908948][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.943573][ T46] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.954907][ T25] usb 2-1: USB disconnect, device number 35 [ 455.998801][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.030273][ T46] usb 6-1: Product: syz [ 456.037258][ T46] usb 6-1: Manufacturer: syz [ 456.064860][ T46] usb 6-1: SerialNumber: syz [ 456.225176][T10635] veth0_vlan: entered promiscuous mode [ 456.318511][T10635] veth1_vlan: entered promiscuous mode [ 456.420905][ T46] usb 6-1: USB disconnect, device number 31 [ 456.629245][T10635] veth0_macvtap: entered promiscuous mode [ 456.714257][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.742842][T10635] veth1_macvtap: entered promiscuous mode [ 457.729022][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.747708][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.772302][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.807973][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.869964][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.896020][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.934797][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.984722][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.020225][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.059075][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.071107][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.096789][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.121964][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.136606][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.174288][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.243034][ T5116] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 458.281071][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.321258][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.328241][T10894] loop1: detected capacity change from 0 to 32768 [ 458.346482][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.375710][T10894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1457 (10894) [ 458.381236][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.421003][T10894] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 458.437337][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.440126][T10894] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 458.466670][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.469557][T10894] BTRFS info (device loop1): using free-space-tree [ 458.479890][ T5116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.498882][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.511037][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.523367][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.529288][ T5116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.576506][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.600203][ T5116] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 458.609586][ T5116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.620240][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.638963][ T5116] usb 3-1: config 0 descriptor?? [ 458.660106][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.693996][T10635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.738541][T10635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.772130][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.804610][T10635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.850072][T10635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.858821][T10635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.890147][T10635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.073596][T10014] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.103605][ T5116] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 459.308635][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.353662][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.494535][ T5116] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71 [ 459.516620][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.561568][ T5116] usb 3-1: USB disconnect, device number 50 [ 459.569422][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.361104][ T5116] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 460.513389][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 460.582372][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 460.615485][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 460.635793][T10999] loop2: detected capacity change from 0 to 512 [ 460.652466][ T5116] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 460.690533][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.731626][ T5116] usb 2-1: config 0 descriptor?? [ 460.740156][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 460.740631][T10984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.757384][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.798962][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.969438][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.995825][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 461.047132][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 461.084748][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 461.134074][ T5116] usb 2-1: USB disconnect, device number 36 [ 461.138354][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.153599][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.200424][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.234771][ T9] usb 6-1: Product: syz [ 461.257479][ T9] usb 6-1: Manufacturer: syz [ 461.277572][ T9] usb 6-1: SerialNumber: syz [ 461.446674][T10483] udevd[10483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.512798][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.560167][ T9] cdc_ncm 6-1:1.0: bind() failure [ 461.622071][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 461.657291][ T9] cdc_ncm 6-1:1.1: bind() failure [ 461.713673][ T9] usb 6-1: USB disconnect, device number 32 [ 461.788800][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.915587][T10995] loop3: detected capacity change from 0 to 32768 [ 461.938017][T10995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1479 (10995) [ 461.967262][ T74] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.969649][T10995] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 461.991780][T10995] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 462.001325][T10995] BTRFS info (device loop3): using free-space-tree [ 462.212495][ T74] bridge_slave_1: left allmulticast mode [ 462.240421][ T74] bridge_slave_1: left promiscuous mode [ 462.246246][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.371691][ T74] bridge_slave_0: left allmulticast mode [ 462.377376][ T74] bridge_slave_0: left promiscuous mode [ 462.403977][T10995] syz.3.1479 (10995) used greatest stack depth: 17968 bytes left [ 462.450297][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.781011][T10420] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 464.058440][T11051] loop4: detected capacity change from 0 to 2048 [ 464.174358][T11051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.190200][ T5166] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 464.201813][T11051] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.263402][ T9851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.285082][ T9851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.317640][ T9851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.334369][ T9851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.431813][ T9851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 464.439785][ T9851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.660104][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 464.680616][ T5166] usb 2-1: Using ep0 maxpacket: 16 [ 464.725478][T11051] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1494: bg 0: block 288: padding at end of block bitmap is not set [ 464.746775][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 464.768569][T11051] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 464.830855][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 464.880182][ T5166] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 464.901232][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 464.933405][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.950574][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 464.984243][ T5166] usb 2-1: config 0 descriptor?? [ 465.030109][ T25] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 465.056712][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.150997][ T25] usb 3-1: config 0 descriptor?? [ 465.160550][T11057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 465.229844][ T9986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.385202][T11072] loop4: detected capacity change from 0 to 512 [ 465.453587][T11052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.487399][T11052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.804347][ T25] usb 3-1: USB disconnect, device number 51 [ 466.251636][ T5166] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 466.306193][ T5166] hid-generic 0003:0158:0100.0009: unexpected long global item [ 466.341236][ T5166] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 466.383877][ T5166] usb 2-1: USB disconnect, device number 37 [ 466.412927][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.459081][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.499219][ T74] bond0 (unregistering): Released all slaves [ 466.555445][ T9851] Bluetooth: hci5: command tx timeout [ 466.563572][T10110] udevd[10110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.478696][ T8717] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 467.685645][ T8717] usb 2-1: Using ep0 maxpacket: 16 [ 467.729906][ T8717] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 467.748245][ T8717] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 467.783607][ T8717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 467.806923][ T8717] usb 2-1: config 0 has no interface number 0 [ 467.822653][ T8717] usb 2-1: config 0 interface 104 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 467.849116][ T8717] usb 2-1: config 0 interface 104 has no altsetting 1 [ 467.867242][ T8717] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 467.910843][ T8717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.930723][ T8717] usb 2-1: Product: syz [ 467.935010][ T8717] usb 2-1: Manufacturer: syz [ 467.949821][ T8717] usb 2-1: SerialNumber: syz [ 467.977758][ T8717] usb 2-1: config 0 descriptor?? [ 468.025330][ T74] hsr_slave_0: left promiscuous mode [ 468.032999][ T74] hsr_slave_1: left promiscuous mode [ 468.048395][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.062125][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.071225][ T46] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 468.085460][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.102294][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.110169][ T1144] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 468.155239][ T74] veth1_macvtap: left promiscuous mode [ 468.169609][ T74] veth0_macvtap: left promiscuous mode [ 468.175446][ T74] veth1_vlan: left promiscuous mode [ 468.203393][ T74] veth0_vlan: left promiscuous mode [ 468.203422][ T8717] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 468.226512][ T8717] asix 2-1:0.104: probe with driver asix failed with error -71 [ 468.246282][ T8717] usb 2-1: USB disconnect, device number 38 [ 468.290128][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 468.305053][ T1144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 468.316422][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.316462][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.316512][ T46] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 468.316544][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.319328][ T46] usb 3-1: config 0 descriptor?? [ 468.389652][ T1144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 468.422064][ T1144] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 468.442031][ T1144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.469881][ T1144] usb 5-1: config 0 descriptor?? [ 468.500445][T11123] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 468.510152][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 468.525605][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 468.536837][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 468.590864][ T9] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 468.610109][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.630163][ T9851] Bluetooth: hci5: command tx timeout [ 468.637452][ T9] usb 6-1: config 0 descriptor?? [ 468.790523][ T1144] usb 5-1: USB disconnect, device number 39 [ 468.857060][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 468.874446][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.919001][ T46] usb 3-1: USB disconnect, device number 52 [ 469.057698][T11129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.079331][T11129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.096946][ T9] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 469.105672][ T9] hid-generic 0003:0158:0100.000A: unexpected long global item [ 469.117513][ T9] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 469.228439][ T9749] udevd[9749]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.299510][ T1144] usb 6-1: USB disconnect, device number 33 [ 469.612814][T11147] loop2: detected capacity change from 0 to 512 [ 469.692372][T11147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1520: bg 0: block 393: padding at end of block bitmap is not set [ 469.731820][T11147] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 469.792166][T11147] EXT4-fs (loop2): 2 truncates cleaned up [ 469.804625][ T74] team0 (unregistering): Port device team_slave_1 removed [ 469.814265][T11147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.966625][ T74] team0 (unregistering): Port device team_slave_0 removed [ 470.120154][ T1144] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 470.322872][ T1144] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 470.348186][ T1144] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.369931][ T1144] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 470.381550][ T1144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.389555][ T1144] usb 3-1: Product: syz [ 470.395417][ T1144] usb 3-1: Manufacturer: syz [ 470.400507][ T1144] usb 3-1: SerialNumber: syz [ 470.421510][ T1144] usb 3-1: config 0 descriptor?? [ 470.434404][ T1144] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 470.446163][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 470.456712][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 470.465704][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 470.474982][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 470.484772][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 470.493168][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 470.513921][ T1144] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 470.522170][ T5167] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 470.535062][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 470.543006][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 470.556636][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 470.564695][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 470.572893][ T1144] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 470.594222][ T1144] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 470.625649][ T25] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 470.668751][T11145] process 'syz.2.1520' launched './file2' with NULL argv: empty string added [ 470.710832][ T9851] Bluetooth: hci5: command tx timeout [ 470.722351][ T5167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.751988][ T5167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.768965][ T5167] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 470.782502][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.789660][ T5165] usb 3-1: USB disconnect, device number 53 [ 470.803501][ T5167] usb 5-1: config 0 descriptor?? [ 470.811195][ T5165] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 470.835999][ T25] usb 6-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=39.dc [ 470.849730][ T5165] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 470.870287][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.887255][ T25] usb 6-1: Product: syz [ 470.899289][ T25] usb 6-1: Manufacturer: syz [ 470.905220][ T5165] keyspan 3-1:0.0: device disconnected [ 470.910770][ T25] usb 6-1: SerialNumber: syz [ 470.924986][ T25] usb 6-1: config 0 descriptor?? [ 470.942627][ T25] gspca_main: conex-2.14.0 probing 0572:0041 [ 471.282594][ T5167] kone 0003:1E7D:2CED.000B: item fetching failed at offset 2/5 [ 471.301739][T11062] chnl_net:caif_netlink_parms(): no params data found [ 471.339907][ T5167] kone 0003:1E7D:2CED.000B: parse failed [ 471.380263][ T5167] kone 0003:1E7D:2CED.000B: probe with driver kone failed with error -22 [ 471.452132][ T9717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.570032][ T25] usb 6-1: USB disconnect, device number 34 [ 471.582527][ T5167] usb 5-1: USB disconnect, device number 40 [ 472.020674][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.059483][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.093008][T11062] bridge_slave_0: entered allmulticast mode [ 472.143814][T11062] bridge_slave_0: entered promiscuous mode [ 472.188097][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.224834][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.260526][T11062] bridge_slave_1: entered allmulticast mode [ 472.284424][T11062] bridge_slave_1: entered promiscuous mode [ 472.687387][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.760690][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.769810][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 472.790396][ T9851] Bluetooth: hci5: command tx timeout [ 473.019587][T11062] team0: Port device team_slave_0 added [ 473.084913][T11062] team0: Port device team_slave_1 added [ 473.310700][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.331190][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.344944][T11184] loop2: detected capacity change from 0 to 32768 [ 473.367536][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.372892][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.399571][ T5167] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 473.408938][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.450884][T11184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1531 (11184) [ 473.451807][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.493777][T11184] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 473.561418][T11184] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 473.574427][T11184] BTRFS info (device loop2): using free-space-tree [ 473.620706][ T5167] usb 5-1: Using ep0 maxpacket: 8 [ 473.631442][ T5167] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.642252][ T5167] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.654541][ T5167] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 473.685601][T11062] hsr_slave_0: entered promiscuous mode [ 473.700137][ T5167] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.709230][ T5167] usb 5-1: config 1 has no interface number 1 [ 473.716128][ T5167] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.731111][ T5167] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.746010][T11062] hsr_slave_1: entered promiscuous mode [ 473.747313][ T5167] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.761914][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.771088][ T5167] usb 5-1: Product: syz [ 473.775384][ T5167] usb 5-1: Manufacturer: syz [ 473.781848][ T5167] usb 5-1: SerialNumber: syz [ 473.782615][T11062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.809846][T11062] Cannot create hsr debugfs directory [ 474.078451][ T9717] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 474.100502][ T5167] usb 5-1: USB disconnect, device number 41 [ 474.280513][T10968] udevd[10968]: setting owner of /dev/bus/usb/005/041 to uid=0, gid=0 failed: No such file or directory [ 474.525612][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.553364][ T25] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 474.808269][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.873940][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.914295][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 474.963978][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.081126][ T25] usb 6-1: config 0 descriptor?? [ 475.115142][T11269] loop1: detected capacity change from 0 to 1024 [ 475.165701][T11269] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 475.275171][T11269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.353318][ T29] audit: type=1804 audit(1721848693.749:381): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1552" name="/newroot/26/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 475.417404][T11269] EXT4-fs warning (device loop1): ext4_resize_fs:2018: can't read last block, resize aborted [ 475.634867][T10014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.652434][ T25] kone 0003:1E7D:2CED.000C: item fetching failed at offset 2/5 [ 475.702685][ T25] kone 0003:1E7D:2CED.000C: parse failed [ 475.757818][ T25] kone 0003:1E7D:2CED.000C: probe with driver kone failed with error -22 [ 475.854511][ T25] usb 6-1: USB disconnect, device number 35 [ 476.359116][T11298] loop1: detected capacity change from 0 to 2048 [ 476.453027][T11298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.501401][T11298] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.956173][T11316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1560: bg 0: block 288: padding at end of block bitmap is not set [ 476.977160][T11316] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 477.176369][T11062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.277261][T11062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.422510][T11062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.535378][T11062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.546733][ T5167] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 477.576792][T10014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.698911][T11285] loop4: detected capacity change from 0 to 32768 [ 477.742830][T11285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1556 (11285) [ 477.756201][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 477.800988][ T5167] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 477.849224][ T5167] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 477.856236][T11329] loop1: detected capacity change from 0 to 512 [ 477.895895][T11285] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.910918][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 477.941682][T11285] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 477.950616][ T5167] usb 6-1: Product: syz [ 477.954795][ T5167] usb 6-1: Manufacturer: syz [ 477.959398][ T5167] usb 6-1: SerialNumber: syz [ 477.997661][T11285] BTRFS info (device loop4): using free-space-tree [ 478.022079][T11329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 478.049823][ T5167] usb 6-1: config 0 descriptor?? [ 478.096522][T11312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 478.118267][T11329] EXT4-fs (loop1): 1 truncate cleaned up [ 478.141815][T11329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.154823][T11333] loop2: detected capacity change from 0 to 1024 [ 478.208520][T11333] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 478.271880][T11329] overlayfs: failed to resolve './file0': -2 [ 478.291453][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.322447][T11329] syz.1.1567 (pid 11329) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 478.363128][T11333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.377333][ T5167] usb 6-1: USB disconnect, device number 36 [ 478.418951][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.480965][ T29] audit: type=1804 audit(1721848696.869:382): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1569" name="/newroot/105/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 478.505652][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.512866][ T8717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.514093][T11333] EXT4-fs warning (device loop2): ext4_resize_fs:2018: can't read last block, resize aborted [ 478.609703][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.616970][ T8717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.681318][T10014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.832231][ T9717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.833968][ T9986] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.980133][ T5167] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 479.201906][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 479.248526][ T5167] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 479.313350][ T5167] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 479.361995][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 479.402232][ T5167] usb 6-1: Product: syz [ 479.406442][ T5167] usb 6-1: Manufacturer: syz [ 479.434705][ T5167] usb 6-1: SerialNumber: syz [ 479.471214][ T5167] usb 6-1: config 0 descriptor?? [ 479.491644][T11312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.724083][ T5167] usb 6-1: USB disconnect, device number 37 [ 479.748191][T11386] fuse: Unknown parameter 'grou00000000000000000000' [ 479.826112][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.124133][T11062] veth0_vlan: entered promiscuous mode [ 480.223495][T11062] veth1_vlan: entered promiscuous mode [ 480.359189][T11062] veth0_macvtap: entered promiscuous mode [ 480.439051][T11062] veth1_macvtap: entered promiscuous mode [ 480.585897][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.640566][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.659579][T11416] loop5: detected capacity change from 0 to 512 [ 480.676148][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.730352][T11416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 480.750123][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.763881][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.774891][T11411] loop1: detected capacity change from 0 to 1024 [ 480.804306][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.838340][T11416] EXT4-fs (loop5): 1 truncate cleaned up [ 480.845642][T11416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.892902][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.905938][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.915963][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.926546][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.936580][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.947148][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.957213][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.969119][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.008120][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.050853][ T9849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.057082][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.106491][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.160841][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.180277][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.214470][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.249484][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.290369][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.320052][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.360079][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.392334][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.432438][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.465069][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.496303][T11062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.554545][T11062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.612382][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.684296][T11062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.730152][T11062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.769799][T11062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.806299][T11062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.862067][T11438] fuse: Unknown parameter 'grou00000000000000000000' [ 482.002283][T11409] loop4: detected capacity change from 0 to 32768 [ 482.051020][T11409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1584 (11409) [ 482.131929][T11409] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 482.188320][T11409] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 482.243569][T11409] BTRFS info (device loop4): using free-space-tree [ 482.344976][ T2842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.398345][ T2842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.469510][ T29] audit: type=1326 audit(1721848700.849:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 482.596571][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.647757][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.661622][ T29] audit: type=1326 audit(1721848700.849:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 482.735711][ T29] audit: type=1326 audit(1721848700.899:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 482.787766][ T29] audit: type=1326 audit(1721848700.899:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 482.825155][ T29] audit: type=1326 audit(1721848700.899:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 482.916328][ T29] audit: type=1326 audit(1721848700.899:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 483.008338][ T29] audit: type=1326 audit(1721848700.909:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 483.048737][T11481] loop2: detected capacity change from 0 to 512 [ 483.099222][T11481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 483.135148][ T29] audit: type=1326 audit(1721848700.909:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 483.215935][T11481] EXT4-fs (loop2): 1 truncate cleaned up [ 483.293023][T11481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.376453][ T29] audit: type=1326 audit(1721848700.909:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 483.426120][ T9986] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.500388][ T29] audit: type=1326 audit(1721848700.939:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.5.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb2575f19 code=0x7ffc0000 [ 483.641973][ T9717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.850259][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 484.104710][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 484.139688][ T25] usb 6-1: config 168 has an invalid descriptor of length 49, skipping remainder of the config [ 484.184124][ T25] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.226430][ T25] usb 6-1: config 168 has an invalid descriptor of length 49, skipping remainder of the config [ 484.235609][ T2795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.285959][ T25] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.327835][ T25] usb 6-1: config 168 has an invalid descriptor of length 49, skipping remainder of the config [ 484.360741][ T25] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.432822][ T25] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 484.448813][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.453812][ T2795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.463602][ T25] usb 6-1: Product: syz [ 484.495080][ T25] usb 6-1: Manufacturer: syz [ 484.513670][ T25] usb 6-1: SerialNumber: syz [ 484.618992][ T2795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.736917][ T2795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.761667][ T25] adutux 6-1:168.0: interrupt endpoints not found [ 484.792673][ T25] usb 6-1: USB disconnect, device number 38 [ 484.956667][ T2795] bridge_slave_1: left allmulticast mode [ 484.965302][ T2795] bridge_slave_1: left promiscuous mode [ 484.981212][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.001952][ T2795] bridge_slave_0: left allmulticast mode [ 485.007635][ T2795] bridge_slave_0: left promiscuous mode [ 485.020447][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.341370][T11528] fuse: Unknown parameter 'group_i00000000000000000000' [ 486.358759][T11553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1619'. [ 486.376643][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.388301][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.398003][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.408279][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.419694][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 486.427369][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.611117][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.637050][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.655169][ T2795] bond0 (unregistering): Released all slaves [ 487.262555][ T2842] Bluetooth: hci6: Frame reassembly failed (-84) [ 487.286388][ T2842] Bluetooth: hci6: Frame reassembly failed (-84) [ 488.474712][ T9851] Bluetooth: hci5: command tx timeout [ 488.815930][T11598] overlayfs: missing 'lowerdir' [ 489.211545][ T2795] hsr_slave_0: left promiscuous mode [ 489.215153][ C1] Oops: general protection fault, probably for non-canonical address 0xe3fffa2201f19a2c: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 489.229595][ C1] KASAN: maybe wild-memory-access in range [0x1ffff1100f8cd160-0x1ffff1100f8cd167] [ 489.238873][ C1] CPU: 1 UID: 0 PID: 11605 Comm: syz.1.1635 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 489.249285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 489.259335][ C1] RIP: 0010:__dev_flush+0x5b/0x160 [ 489.264452][ C1] Code: 48 89 ef e8 47 d6 3e 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 15 d6 3e 00 48 8b 03 48 89 44 [ 489.284076][ C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00010212 [ 489.290160][ C1] RAX: dffffc0000000000 RBX: 1ffff1100f8cd160 RCX: ffff88807c668000 [ 489.298136][ C1] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc90009177810 [ 489.306134][ C1] RBP: ffffc90009177810 R08: ffffffff89697d9a R09: 1ffffffff1f5f4bd [ 489.314102][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: 0000000000000000 [ 489.322070][ C1] R13: 03fffe2201f19a2c R14: 0000000000000000 R15: ffffc90009177810 [ 489.330043][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 489.339314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.345891][ C1] CR2: 00007f484bb1f784 CR3: 000000001f0d4000 CR4: 0000000000350ef0 [ 489.353861][ C1] Call Trace: [ 489.357136][ C1] [ 489.360003][ C1] ? __die_body+0x88/0xe0 [ 489.364348][ C1] ? die_addr+0x108/0x140 [ 489.368690][ C1] ? exc_general_protection+0x3dd/0x5d0 [ 489.374266][ C1] ? asm_exc_general_protection+0x26/0x30 [ 489.380003][ C1] ? xdp_do_check_flushed+0x10a/0x240 [ 489.385405][ C1] ? __dev_flush+0x5b/0x160 [ 489.389915][ C1] xdp_do_check_flushed+0x129/0x240 [ 489.395128][ C1] __napi_poll+0xe4/0x490 [ 489.399464][ C1] net_rx_action+0x89b/0x1240 [ 489.404164][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 489.409282][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.414914][ C1] ? sched_clock+0x4a/0x70 [ 489.419347][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 489.425691][ C1] handle_softirqs+0x2c6/0x970 [ 489.430465][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 489.435237][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 489.440533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.446168][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 489.451377][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 489.455989][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 489.461198][ C1] irq_exit_rcu+0x9/0x30 [ 489.465442][ C1] common_interrupt+0xaa/0xd0 [ 489.470130][ C1] [ 489.473055][ C1] [ 489.475978][ C1] asm_common_interrupt+0x26/0x40 [ 489.481012][ C1] RIP: 0010:do_exit+0x1d35/0x27f0 [ 489.486043][ C1] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 e4 35 a4 00 48 8b 1b 41 bc 08 00 00 00 4a 8d 3c 23 48 89 f8 48 c1 e8 03 42 80 3c 38 00 <74> 05 e8 c4 35 a4 00 4a 83 3c 23 00 75 0b e8 58 ea 3c 00 49 83 c4 [ 489.505671][ C1] RSP: 0018:ffffc90009177ac0 EFLAGS: 00000246 [ 489.511743][ C1] RAX: 1ffff9200122eb28 RBX: ffffc90009170000 RCX: ffff88807c668000 [ 489.519710][ C1] RDX: 0000000000000000 RSI: ffffffff8bcae720 RDI: ffffc90009175940 [ 489.527679][ C1] RBP: ffffc90009177c20 R08: ffffffff8fafa5ef R09: 1ffffffff1f5f4bd [ 489.535735][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: 0000000000005940 [ 489.543704][ C1] R13: 1ffff1100f8cd0c4 R14: 0000000000000000 R15: dffffc0000000000 [ 489.551690][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.557327][ C1] ? __pfx_do_exit+0x10/0x10 [ 489.561915][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.567291][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.572944][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 489.578946][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 489.585288][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 489.590684][ C1] do_group_exit+0x207/0x2c0 [ 489.595279][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.600498][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.606160][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 489.611369][ C1] get_signal+0x16a1/0x1740 [ 489.615882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.621517][ C1] ? __pfx_get_signal+0x10/0x10 [ 489.626379][ C1] arch_do_signal_or_restart+0x96/0x860 [ 489.631939][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.638103][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 489.644109][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 489.649843][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 489.655400][ C1] do_syscall_64+0x100/0x230 [ 489.660000][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.665638][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.671546][ C1] RIP: 0033:0x7f0683775f19 [ 489.675957][ C1] Code: Unable to access opcode bytes at 0x7f0683775eef. [ 489.682966][ C1] RSP: 002b:00007f06831ff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 489.691380][ C1] RAX: fffffffffffffe00 RBX: 00007f0683905f68 RCX: 00007f0683775f19 [ 489.699349][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0683905f68 [ 489.707328][ C1] RBP: 00007f0683905f60 R08: 00007f06831ff6c0 R09: 00007f06831ff6c0 [ 489.715307][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0683905f6c [ 489.723275][ C1] R13: 000000000000000b R14: 00007ffd50953bb0 R15: 00007ffd50953c98 [ 489.731256][ C1] [ 489.734265][ C1] Modules linked in: [ 489.738287][ C1] ---[ end trace 0000000000000000 ]--- [ 489.743877][ C1] RIP: 0010:__dev_flush+0x5b/0x160 [ 489.749004][ C1] Code: 48 89 ef e8 47 d6 3e 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 15 d6 3e 00 48 8b 03 48 89 44 [ 489.768719][ C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00010212 [ 489.774801][ C1] RAX: dffffc0000000000 RBX: 1ffff1100f8cd160 RCX: ffff88807c668000 [ 489.782782][ C1] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc90009177810 [ 489.790764][ C1] RBP: ffffc90009177810 R08: ffffffff89697d9a R09: 1ffffffff1f5f4bd [ 489.798726][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f4be R12: 0000000000000000 [ 489.806705][ C1] R13: 03fffe2201f19a2c R14: 0000000000000000 R15: ffffc90009177810 [ 489.814684][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 489.823618][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.830205][ C1] CR2: 00007f484bb1f784 CR3: 000000001f0d4000 CR4: 0000000000350ef0 [ 489.838170][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 489.845578][ C1] Kernel Offset: disabled [ 489.849888][ C1] Rebooting in 86400 seconds..