last executing test programs: 8.958310416s ago: executing program 3 (id=133): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1", 0xe7}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d", 0x5f}, {&(0x7f0000000100)="cfc4a70042dd", 0x6}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fd", 0x40}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17ef", 0xc4}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.764605282s ago: executing program 3 (id=136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x2e020680) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000001c0)=ANY=[@ANYBLOB='data_checksum=crc64,journal_transaction_names,norecovery,fsck,journal_flush_disabled,btree_node_prefetch,background_compression=none,reconstruct_alloc,compression=none,journal_flush_disabled,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c401a84e2a7d5434ef75659d06a696ccc3a002f4d1d3e848312ef1200e8cc156bdc225b"], 0x1, 0x593a, &(0x7f0000005b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0x0, 0x0) 4.342318014s ago: executing program 2 (id=167): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 4.148818305s ago: executing program 5 (id=170): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b0200007d000000050a0100000000000080020000000000000000000000000000000000000000000000b9000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ff0b"], 0x24b) 3.733572146s ago: executing program 2 (id=173): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x4e, 0xcd, 0x41, 0x10, 0x19d2, 0xff87, 0xda35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x30, 0xd, [{{0x9, 0x4, 0xb, 0xfc, 0x0, 0xff, 0xff, 0xff, 0x6, [@uac_as]}}]}}]}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) fallocate(r1, 0x0, 0x0, 0x80400) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x8e, "b6000000003a0fb3aceed9cb000004008b24fe0737bb001600"}}) 3.722245381s ago: executing program 1 (id=174): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 3.082420553s ago: executing program 5 (id=176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000003c0), 0x4) 3.078546769s ago: executing program 1 (id=177): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000000)=0x8) 2.788344547s ago: executing program 2 (id=179): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1", 0xe7}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d", 0x5f}, {&(0x7f0000000100)="cfc4a70042dd", 0x6}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55e", 0x4b}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17ef", 0xc4}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.678367261s ago: executing program 1 (id=180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.527363921s ago: executing program 1 (id=181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.359122807s ago: executing program 4 (id=182): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4009}, 0x4000) 2.256128447s ago: executing program 3 (id=183): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0436070c"], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.206433614s ago: executing program 4 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x2e0}}, 0x0) 2.101216964s ago: executing program 5 (id=185): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4b0ec2221df2a4"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.021649676s ago: executing program 0 (id=186): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 1.886347649s ago: executing program 4 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x4000000, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xa}}}}}, 0x28}}, 0x0) 1.827812545s ago: executing program 2 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x48, 0x2, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 1.65940848s ago: executing program 3 (id=189): sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="a77bb7fa6e36d0951067eb795daa5d54d9303c1c6c86cc917710b6046ced1be5e0f91d6a97391fa644f5f88da88044ed7490b9bb7cc4695ef2e72d0757d954974d8dd114da91", 0x46}], 0x1}}], 0x1, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.594319141s ago: executing program 4 (id=190): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x58c, &(0x7f00000005c0)="$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") syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040e04093520"], 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x242, 0x2a1) socket$inet_tcp(0x2, 0x1, 0x0) 1.578108551s ago: executing program 3 (id=191): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") creat(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.482156552s ago: executing program 0 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.371813976s ago: executing program 3 (id=193): prctl$PR_MCE_KILL_GET(0x22) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1000000000011) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.310372298s ago: executing program 2 (id=194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3000046, &(0x7f00000005c0), 0x3, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000340)={@multicast2, @remote, 0xffffffffffffffff, "54538467ada5f40c7b6404d04497b29cc185bd259957625e3eca9285fb8481ad", 0x6, 0x63, 0x4, 0x377f}, 0x3c) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) sync() 1.243153548s ago: executing program 0 (id=195): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x1f0, &(0x7f0000000240)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000004) 927.827865ms ago: executing program 0 (id=196): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x10}, 0x18) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 902.495055ms ago: executing program 5 (id=197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x5ec0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14000801}, 0x40000) 818.408213ms ago: executing program 4 (id=198): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="420000000300"], 0x42) 703.704358ms ago: executing program 0 (id=199): ioperm(0x0, 0xfffc, 0x8005) personality(0xc417fec07cb910d1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)={0x0, 0x989680}, 0x0) 501.071041ms ago: executing program 5 (id=200): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1", 0xe7}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d", 0x5f}, {&(0x7f0000000100)="cfc4a70042dd", 0x6}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55e", 0x4b}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17ef", 0xc4}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 382.229691ms ago: executing program 1 (id=201): r0 = syz_io_uring_setup(0x36b, &(0x7f0000000140)={0x0, 0x431f, 0x10c1, 0x0, 0x6}, &(0x7f0000000480), &(0x7f0000000500)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000200000000010000000000008000000100"/44], 0x60) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x21, &(0x7f0000000340), 0x1) socket$inet6(0xa, 0xb, 0x40000008) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 380.535682ms ago: executing program 0 (id=202): socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 298.619824ms ago: executing program 4 (id=203): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000062fc67919edb07be6148"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 269.183351ms ago: executing program 2 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x5, 0x7fffffff}}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0xf6e2, 0x3, 0x7363, {0x0, 0x800}}) 2.103477ms ago: executing program 1 (id=205): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 0s ago: executing program 5 (id=206): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x39, 0x0) chmod(0x0, 0xbc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7872, 0x567a, 0x13, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 86.388594][ T5815] cgroup: Unknown subsys name 'net' [ 86.535490][ T5815] cgroup: Unknown subsys name 'cpuset' [ 86.544972][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.120678][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.688281][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.696852][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.704835][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.708786][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.718896][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.728200][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.728427][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.743211][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.754704][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.763046][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.770826][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.780413][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.788209][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.797211][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.802217][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.804785][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.821052][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.828420][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.831955][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.836313][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.849435][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.862229][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.871618][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.879378][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.888471][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.888622][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.903239][ T5851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.910554][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.920898][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.931119][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.933228][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.947047][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.954666][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.963284][ T5136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.974009][ T5136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.982397][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.505303][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 93.630453][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 93.694191][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 93.766149][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 93.790558][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.798747][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.807216][ T5828] bridge_slave_0: entered allmulticast mode [ 93.814454][ T5828] bridge_slave_0: entered promiscuous mode [ 93.836992][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 93.857381][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.864875][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.872608][ T5828] bridge_slave_1: entered allmulticast mode [ 93.879449][ T5828] bridge_slave_1: entered promiscuous mode [ 93.990702][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.029386][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.101999][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.186072][ T5828] team0: Port device team_slave_0 added [ 94.200712][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.208235][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.215716][ T5833] bridge_slave_0: entered allmulticast mode [ 94.223110][ T5833] bridge_slave_0: entered promiscuous mode [ 94.232256][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.239398][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.246920][ T5833] bridge_slave_1: entered allmulticast mode [ 94.254175][ T5833] bridge_slave_1: entered promiscuous mode [ 94.299424][ T5828] team0: Port device team_slave_1 added [ 94.328437][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.335774][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.343565][ T5832] bridge_slave_0: entered allmulticast mode [ 94.350402][ T5832] bridge_slave_0: entered promiscuous mode [ 94.362676][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.369795][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.377664][ T5839] bridge_slave_0: entered allmulticast mode [ 94.384744][ T5839] bridge_slave_0: entered promiscuous mode [ 94.393810][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.400976][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.408167][ T5839] bridge_slave_1: entered allmulticast mode [ 94.415901][ T5839] bridge_slave_1: entered promiscuous mode [ 94.438010][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.445293][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.453172][ T5834] bridge_slave_0: entered allmulticast mode [ 94.460125][ T5834] bridge_slave_0: entered promiscuous mode [ 94.480637][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.488041][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.495351][ T5832] bridge_slave_1: entered allmulticast mode [ 94.502998][ T5832] bridge_slave_1: entered promiscuous mode [ 94.550183][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.557465][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.569298][ T5834] bridge_slave_1: entered allmulticast mode [ 94.576796][ T5834] bridge_slave_1: entered promiscuous mode [ 94.596955][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.618850][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.626025][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.633700][ T5829] bridge_slave_0: entered allmulticast mode [ 94.640578][ T5829] bridge_slave_0: entered promiscuous mode [ 94.658694][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.666661][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.692738][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.707313][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.716996][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.724420][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.750528][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.782495][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.789636][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.797902][ T5829] bridge_slave_1: entered allmulticast mode [ 94.805472][ T5829] bridge_slave_1: entered promiscuous mode [ 94.814465][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.850319][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.862664][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.884702][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.902142][ T5831] Bluetooth: hci0: command tx timeout [ 94.920613][ T5833] team0: Port device team_slave_0 added [ 94.930464][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.953242][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.981540][ T5831] Bluetooth: hci1: command tx timeout [ 94.989808][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.017769][ T5839] team0: Port device team_slave_0 added [ 95.026808][ T5839] team0: Port device team_slave_1 added [ 95.034599][ T5833] team0: Port device team_slave_1 added [ 95.061659][ T5841] Bluetooth: hci3: command tx timeout [ 95.063748][ T5834] team0: Port device team_slave_0 added [ 95.067359][ T5831] Bluetooth: hci4: command tx timeout [ 95.078500][ T5841] Bluetooth: hci2: command tx timeout [ 95.078512][ T5835] Bluetooth: hci5: command tx timeout [ 95.094559][ T5832] team0: Port device team_slave_0 added [ 95.102760][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.167633][ T5834] team0: Port device team_slave_1 added [ 95.175505][ T5832] team0: Port device team_slave_1 added [ 95.209544][ T5829] team0: Port device team_slave_0 added [ 95.220135][ T5828] hsr_slave_0: entered promiscuous mode [ 95.227381][ T5828] hsr_slave_1: entered promiscuous mode [ 95.234849][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.242643][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.268897][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.281370][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.288347][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.315203][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.347705][ T5829] team0: Port device team_slave_1 added [ 95.364312][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.371428][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.398088][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.410483][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.417492][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.443522][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.470670][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.477990][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.504053][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.517063][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.524318][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.550523][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.579164][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.586799][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.613443][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.657350][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.664522][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.691385][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.705486][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.714634][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.740819][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.774486][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.782217][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.808889][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.851961][ T5839] hsr_slave_0: entered promiscuous mode [ 95.858434][ T5839] hsr_slave_1: entered promiscuous mode [ 95.865745][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.873672][ T5839] Cannot create hsr debugfs directory [ 95.950306][ T5832] hsr_slave_0: entered promiscuous mode [ 95.957097][ T5832] hsr_slave_1: entered promiscuous mode [ 95.963616][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.972018][ T5832] Cannot create hsr debugfs directory [ 96.006454][ T5833] hsr_slave_0: entered promiscuous mode [ 96.014456][ T5833] hsr_slave_1: entered promiscuous mode [ 96.020688][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.028961][ T5833] Cannot create hsr debugfs directory [ 96.070158][ T5829] hsr_slave_0: entered promiscuous mode [ 96.076778][ T5829] hsr_slave_1: entered promiscuous mode [ 96.083347][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.091435][ T5829] Cannot create hsr debugfs directory [ 96.119623][ T5834] hsr_slave_0: entered promiscuous mode [ 96.126135][ T5834] hsr_slave_1: entered promiscuous mode [ 96.136079][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.144093][ T5834] Cannot create hsr debugfs directory [ 96.586453][ T1197] cfg80211: failed to load regulatory.db [ 96.674923][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.702946][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.715986][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.727946][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.772646][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.800701][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.837674][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.854482][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.896739][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.907564][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.926002][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.937031][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.981282][ T5841] Bluetooth: hci0: command tx timeout [ 97.015124][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.046083][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.059202][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.061279][ T5841] Bluetooth: hci1: command tx timeout [ 97.099903][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.141477][ T5831] Bluetooth: hci2: command tx timeout [ 97.141521][ T5835] Bluetooth: hci4: command tx timeout [ 97.146928][ T5831] Bluetooth: hci3: command tx timeout [ 97.158021][ T5841] Bluetooth: hci5: command tx timeout [ 97.175404][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.194433][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.220009][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.251276][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.325912][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.345549][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.359103][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.392698][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.416946][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.439695][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.493458][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.510587][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.517902][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.534038][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.546009][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.601446][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.608664][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.618896][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.626026][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.673295][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.680436][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.708951][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.754439][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.775250][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.792653][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.799779][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.811866][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.818967][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.869262][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.905913][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.913153][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.963465][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.999661][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.006890][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.074245][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.081470][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.165444][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.174229][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.181433][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.296834][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.326300][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.424012][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.455147][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.462318][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.502804][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.509942][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.760070][ T5828] veth0_vlan: entered promiscuous mode [ 98.848596][ T5828] veth1_vlan: entered promiscuous mode [ 98.917255][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.008773][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.020800][ T5828] veth0_macvtap: entered promiscuous mode [ 99.063852][ T5841] Bluetooth: hci0: command tx timeout [ 99.075563][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.114335][ T5828] veth1_macvtap: entered promiscuous mode [ 99.144827][ T5841] Bluetooth: hci1: command tx timeout [ 99.193183][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.218877][ T5839] veth0_vlan: entered promiscuous mode [ 99.222273][ T5841] Bluetooth: hci5: command tx timeout [ 99.230188][ T5841] Bluetooth: hci3: command tx timeout [ 99.235980][ T5831] Bluetooth: hci4: command tx timeout [ 99.240935][ T5835] Bluetooth: hci2: command tx timeout [ 99.247042][ T5834] veth0_vlan: entered promiscuous mode [ 99.290431][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.338542][ T5833] veth0_vlan: entered promiscuous mode [ 99.364153][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.374240][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.383844][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.393007][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.418471][ T5839] veth1_vlan: entered promiscuous mode [ 99.435218][ T5833] veth1_vlan: entered promiscuous mode [ 99.480372][ T5834] veth1_vlan: entered promiscuous mode [ 99.594509][ T5833] veth0_macvtap: entered promiscuous mode [ 99.616925][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.629188][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.636563][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.649340][ T5833] veth1_macvtap: entered promiscuous mode [ 99.714599][ T5839] veth0_macvtap: entered promiscuous mode [ 99.739022][ T5839] veth1_macvtap: entered promiscuous mode [ 99.758483][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.769419][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.781104][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.788963][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.793211][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.839095][ T5834] veth0_macvtap: entered promiscuous mode [ 99.856278][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.877320][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.889112][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.904656][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.916830][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.939347][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.950302][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.956565][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.974191][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.987974][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.997637][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.007308][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.016371][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.042060][ T5834] veth1_macvtap: entered promiscuous mode [ 100.065454][ T5829] veth0_vlan: entered promiscuous mode [ 100.091925][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.106798][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.117422][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.128336][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.140188][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.156495][ T5832] veth0_vlan: entered promiscuous mode [ 100.174149][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.188443][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.199871][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.212381][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.222899][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.233888][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.245422][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.265318][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.276958][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.301546][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.313634][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.323819][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.334730][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.347625][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.372150][ T5839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.393469][ T5839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.404638][ T5839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.413933][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.430347][ T5832] veth1_vlan: entered promiscuous mode [ 100.440013][ T5829] veth1_vlan: entered promiscuous mode [ 100.452906][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.468560][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.478179][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.487113][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.660214][ T5829] veth0_macvtap: entered promiscuous mode [ 100.709322][ T5829] veth1_macvtap: entered promiscuous mode [ 100.764111][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.764989][ T5832] veth0_macvtap: entered promiscuous mode [ 100.772052][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.799407][ T5944] loop3: detected capacity change from 0 to 2048 [ 100.813454][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.862850][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.936392][ T5832] veth1_macvtap: entered promiscuous mode [ 100.956585][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.966372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.967173][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.975253][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.985631][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.002888][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.012808][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.023315][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.033583][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.044429][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.055485][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.069946][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.082467][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.092383][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.103506][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.113388][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.124935][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.135757][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.146325][ T5835] Bluetooth: hci0: command tx timeout [ 101.152641][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.162792][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.173627][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.185887][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.206326][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.217147][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.225095][ T5835] Bluetooth: hci1: command tx timeout [ 101.235657][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.247440][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.260024][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.268435][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.287995][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.298748][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.319378][ T5835] Bluetooth: hci3: command tx timeout [ 101.325968][ T5835] Bluetooth: hci4: command tx timeout [ 101.331785][ T5136] Bluetooth: hci5: command tx timeout [ 101.337414][ T5136] Bluetooth: hci2: command tx timeout [ 101.347895][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.367056][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.380540][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.393381][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.407415][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.419228][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.429257][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.440182][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.450461][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.461695][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.471650][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.482265][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.484423][ T5951] loop3: detected capacity change from 0 to 1024 [ 101.492196][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.492235][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.493452][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.532466][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.542153][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.551537][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.560292][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.665225][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.676144][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.685591][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.694656][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.707825][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.721564][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.738077][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.758559][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.759698][ T5951] EXT4-fs: Ignoring removed orlov option [ 101.783650][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.794124][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.803556][ T5951] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.829570][ T5951] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 101.886623][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.020007][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.028610][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.143510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.153941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.247541][ T5951] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 102.270055][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.292811][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.397344][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.427561][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.489642][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.827282][ T5975] loop4: detected capacity change from 0 to 256 [ 102.844823][ T5975] exfat: Deprecated parameter 'namecase' [ 102.850575][ T5975] exfat: Deprecated parameter 'utf8' [ 102.903012][ T5957] dccp_close: ABORT with 120 bytes unread [ 102.991722][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 103.149329][ T5968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.170199][ T5968] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.341682][ T5975] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 103.371417][ T5968] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.418457][ T5986] loop0: detected capacity change from 0 to 2048 [ 103.441671][ T5968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.453797][ T5968] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.505678][ T5984] loop3: detected capacity change from 0 to 4096 [ 103.540190][ T5968] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.566655][ T5989] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.628389][ T5984] ======================================================= [ 103.628389][ T5984] WARNING: The mand mount option has been deprecated and [ 103.628389][ T5984] and is ignored by this kernel. Remove the mand [ 103.628389][ T5984] option from the mount to silence this warning. [ 103.628389][ T5984] ======================================================= [ 103.667214][ T5968] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 103.681020][ T5968] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 103.805038][ T5968] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 103.815036][ T5968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.821331][ T5984] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 103.831047][ T5976] dccp_close: ABORT with 124 bytes unread [ 103.896530][ T5968] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.988867][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 104.151864][ T5968] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.201748][ T5968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.210942][ T5968] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.330506][ T5996] loop2: detected capacity change from 0 to 256 [ 104.365951][ T5968] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.388119][ T29] audit: type=1326 audit(1734844693.976:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb04585d29 code=0x0 [ 104.428064][ T5984] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 104.462201][ T5968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.468604][ T5968] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.480607][ T5968] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.492468][ T5996] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.530709][ T5136] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 104.554415][ T5996] FAT-fs (loop2): Filesystem has been set read-only [ 104.562668][ T5996] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.576164][ T5996] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.589446][ T29] audit: type=1800 audit(1734844694.186:3): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 104.596234][ T5996] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.622986][ T5996] erofs (device erofs): cannot read erofs superblock [ 104.652292][ T29] audit: type=1800 audit(1734844694.236:4): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file2" dev="loop3" ino=31 res=0 errno=0 [ 104.937922][ T6021] fuse: Bad value for 'fd' [ 105.066188][ T6024] Bluetooth: MGMT ver 1.23 [ 105.189372][ T29] audit: type=1326 audit(1734844694.786:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffa385d29 code=0x7ffc0000 [ 105.228873][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.310880][ T29] audit: type=1326 audit(1734844694.786:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffa385d29 code=0x7ffc0000 [ 105.396233][ T29] audit: type=1326 audit(1734844694.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7efffa385d29 code=0x7ffc0000 [ 105.461925][ T5136] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.490034][ T29] audit: type=1326 audit(1734844694.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffa385d29 code=0x7ffc0000 [ 105.512737][ T29] audit: type=1326 audit(1734844694.856:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffa385d29 code=0x7ffc0000 [ 105.550563][ T6035] loop5: detected capacity change from 0 to 128 [ 105.698153][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.710940][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout [ 105.717997][ T6040] TCP: out of memory -- consider tuning tcp_mem [ 105.861194][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.995106][ T6047] tipc: Started in network mode [ 106.000072][ T6047] tipc: Node identity 7f000001, cluster identity 4711 [ 106.048543][ T6047] tipc: Enabled bearer , priority 10 [ 106.121421][ T6037] loop4: detected capacity change from 0 to 8192 [ 106.206774][ T6037] syz.4.36: attempt to access beyond end of device [ 106.206774][ T6037] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.231261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.271021][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.307152][ T6053] netlink: 'syz.3.44': attribute type 3 has an invalid length. [ 106.325610][ T6037] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 106.348169][ T6037] FAT-fs (loop4): Filesystem has been set read-only [ 106.356245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 106.430270][ T6056] loop1: detected capacity change from 0 to 64 [ 106.448860][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.525210][ T6037] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 106.533583][ T6037] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 106.581807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.582097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.624324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 106.858280][ T6045] loop0: detected capacity change from 0 to 32768 [ 106.933839][ T6045] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.41 (6045) [ 107.028259][ T6045] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 107.047513][ T1197] tipc: Node number set to 2130706433 [ 107.056353][ T6045] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 107.142216][ T6045] BTRFS info (device loop0): using free-space-tree [ 107.301385][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.485327][ T6071] binder_alloc: 6070: binder_alloc_buf, no vma [ 107.594051][ T5136] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.801476][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout [ 107.852362][ T47] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.862293][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.870337][ T47] usb 3-1: Product: syz [ 107.875250][ T47] usb 3-1: Manufacturer: syz [ 107.879890][ T47] usb 3-1: SerialNumber: syz [ 107.942147][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.950054][ T47] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.078393][ T6045] BTRFS info (device loop0): rebuilding free space tree [ 108.136754][ T6101] loop1: detected capacity change from 0 to 47 [ 108.153975][ T5895] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.194563][ T6103] mmap: syz.3.58 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.340886][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.881169][ T5936] usb 3-1: USB disconnect, device number 2 [ 109.899874][ T5895] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 109.907333][ T5895] ath9k_htc: Failed to initialize the device [ 109.915729][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.915775][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 109.921825][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.941957][ T5936] usb 3-1: ath9k_htc: USB layer deinitialized [ 110.083829][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.100618][ T6125] loop5: detected capacity change from 0 to 512 [ 110.225564][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.239645][ T6125] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.300389][ T5833] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 110.450674][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.467650][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.684568][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.777258][ T47] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 110.788691][ T47] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 110.838396][ T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 110.925250][ T47] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 110.980070][ T47] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 111.014285][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.409552][ T6147] loop5: detected capacity change from 0 to 32768 [ 111.439478][ T6155] loop0: detected capacity change from 0 to 128 [ 111.446870][ T6138] TCP: out of memory -- consider tuning tcp_mem [ 111.481654][ T6147] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.75 (6147) [ 111.534614][ T6147] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 111.556054][ T6147] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 111.561513][ T6155] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.568429][ T6147] BTRFS info (device loop5): using free-space-tree [ 111.647432][ T6155] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.986453][ T6147] BTRFS info (device loop5): rebuilding free space tree [ 112.035301][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.113687][ T47] ath6kl: Failed to submit usb control message: -110 [ 112.120621][ T47] ath6kl: unable to send the bmi data to the device: -110 [ 112.133504][ T47] ath6kl: Unable to send get target info: -110 [ 112.167227][ T47] ath6kl: Failed to init ath6kl core: -110 [ 112.210059][ T47] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 112.418941][ T5839] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 113.076662][ T6198] loop2: detected capacity change from 0 to 512 [ 113.166059][ T6198] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.93: bad orphan inode 15 [ 113.211264][ T6198] ext4_test_bit(bit=14, block=5) = 0 [ 113.225983][ T6198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.319379][ T6181] loop3: detected capacity change from 0 to 32768 [ 113.334061][ T6181] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.84 (6181) [ 113.357606][ T6181] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 113.385773][ T6198] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.401505][ T6181] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 113.411293][ T6181] BTRFS info (device loop3): using free-space-tree [ 113.482052][ T8] usb 5-1: USB disconnect, device number 2 [ 113.498096][ T6198] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.558942][ T6205] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 113.571359][ T6215] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.602843][ T6219] capability: warning: `syz.5.97' uses 32-bit capabilities (legacy support in use) [ 113.700670][ T6215] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.716887][ T6215] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.742223][ T6181] BTRFS info (device loop3): rebuilding free space tree [ 113.756352][ T6198] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.799493][ T6232] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.836291][ T6198] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.860596][ T6198] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.93: iget: bad extended attribute block 1 [ 113.918736][ T6198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 114.156644][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.421436][ T6238] loop4: detected capacity change from 0 to 128 [ 114.463850][ T6238] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.471370][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 114.499810][ T6238] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.625552][ T5828] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.717744][ T6247] loop1: detected capacity change from 0 to 2048 [ 114.804748][ T6247] loop1: p1 < > p4 [ 114.829449][ T6247] loop1: p4 size 8388608 extends beyond EOD, truncated [ 115.229463][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.302800][ T6256] loop9: detected capacity change from 0 to 7 [ 115.340646][ T6257] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.371047][ T6256] Dev loop9: unable to read RDB block 7 [ 115.386966][ T6256] loop9: AHDI p2 [ 115.398591][ T6256] loop9: partition table partially beyond EOD, truncated [ 115.418390][ T6258] loop0: detected capacity change from 0 to 512 [ 115.504578][ T6258] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.557316][ T6258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 115.622799][ T6258] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.630528][ T6258] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.110: invalid indirect mapped block 2185560079 (level 1) [ 115.754103][ T6258] EXT4-fs (loop0): Remounting filesystem read-only [ 115.775143][ T6258] EXT4-fs (loop0): 1 truncate cleaned up [ 115.867637][ T5831] Bluetooth: hci5: unexpected cc 0x202d length: 5 > 1 [ 115.875378][ T5831] Bluetooth: hci5: unexpected event for opcode 0x202d [ 115.882565][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 116.064449][ T6269] i2c i2c-0: Invalid block write size 142 [ 116.073839][ T6253] loop1: detected capacity change from 0 to 32768 [ 116.245882][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.517055][ T6279] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 117.202301][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.266635][ T6299] warning: `syz.2.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.368022][ T6272] loop5: detected capacity change from 0 to 32768 [ 117.415260][ T6272] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.115 (6272) [ 117.503049][ T6272] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 117.518670][ T6272] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 117.562396][ T6272] BTRFS info (device loop5): using free-space-tree [ 117.830119][ T6272] BTRFS info (device loop5): rebuilding free space tree [ 117.854415][ T6325] loop2: detected capacity change from 0 to 512 [ 118.093642][ T6325] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.132: invalid indirect mapped block 4294967295 (level 1) [ 118.108198][ T6337] i2c i2c-0: Invalid block write size 142 [ 118.113384][ T6325] EXT4-fs (loop2): Remounting filesystem read-only [ 118.122244][ T6325] EXT4-fs (loop2): 2 truncates cleaned up [ 118.142128][ T6325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.308246][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.317812][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.480885][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 118.499505][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.517417][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 118.546297][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.584594][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.710040][ T5895] usb 4-1: config 0 descriptor?? [ 118.731633][ T5839] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 118.775099][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 119.831623][ T6373] loop1: detected capacity change from 0 to 512 [ 119.968537][ T6359] loop2: detected capacity change from 0 to 32768 [ 120.018246][ T6359] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.145 (6359) [ 120.041328][ T6359] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 120.073824][ T6359] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 120.109045][ T6359] BTRFS info (device loop2): using free-space-tree [ 120.182161][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.201598][ T6359] BTRFS info (device loop2): rebuilding free space tree [ 120.231154][ T6373] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.355425][ T6399] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 120.460285][ T6401] i2c i2c-0: Invalid block write size 142 [ 120.706931][ T6362] loop3: detected capacity change from 0 to 32768 [ 120.767821][ T5834] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 120.894308][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.936737][ T6362] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,journal_flush_disabled,fsck,norecovery,reconstruct_alloc [ 120.983785][ T6362] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 120.992520][ T6362] bcachefs (loop3): Version upgrade required: [ 120.992520][ T6362] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 120.992520][ T6362] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 120.992520][ T6362] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 121.165853][ T6362] bcachefs (loop3): dropping and reconstructing all alloc info [ 121.277408][ T6362] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 121.290121][ T6362] bcachefs (loop3): bch2_fs_recovery(): error EINTR [ 121.296857][ T6362] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 121.305910][ T6362] bcachefs (loop3): shutting down [ 121.377061][ T6362] bcachefs (loop3): shutdown complete [ 121.441457][ T6424] @: renamed from vlan0 (while UP) [ 121.542277][ T6426] loop2: detected capacity change from 0 to 256 [ 121.579746][ T6375] loop5: detected capacity change from 0 to 32768 [ 121.605995][ T6426] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.616899][ T6375] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.152 (6375) [ 121.634546][ T6375] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 121.655805][ T6375] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 121.666440][ T6375] BTRFS info (device loop5): using free-space-tree [ 122.078093][ T6450] process 'syz.2.164' launched '/dev/fd/3' with NULL argv: empty string added [ 122.110453][ T6450] loop2: detected capacity change from 0 to 1024 [ 122.118380][ T6450] EXT4-fs: quotafile must be on filesystem root [ 122.169032][ T6375] BTRFS info (device loop5): rebuilding free space tree [ 122.446337][ T6454] loop4: detected capacity change from 0 to 1024 [ 122.476244][ T6454] EXT4-fs: quotafile must be on filesystem root [ 122.671816][ T6459] loop1: detected capacity change from 0 to 1024 [ 122.679103][ T6459] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.745823][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.762166][ T5839] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.932825][ T6459] io-wq is not configured for unbound workers [ 123.043295][ T6471] syz_tun: entered allmulticast mode [ 123.079951][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.091980][ T6471] syz_tun: left allmulticast mode [ 123.151682][ T1197] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 123.339396][ T6473] i2c i2c-0: Invalid block write size 142 [ 123.343627][ T1197] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 123.375848][ T1197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.422752][ T1197] usb 1-1: config 0 has no interface number 0 [ 123.428935][ T1197] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 123.452478][ T6477] loop4: detected capacity change from 0 to 512 [ 123.468884][ T1197] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 123.479206][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 123.490137][ T1197] usb 1-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 123.514196][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 123.526324][ T1197] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 123.556032][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 123.560413][ T1197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.565803][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 123.584699][ T6477] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 123.610651][ T1197] usb 1-1: Product: syz [ 123.625881][ T1197] usb 1-1: Manufacturer: syz [ 123.630532][ T1197] usb 1-1: SerialNumber: syz [ 123.635986][ T6477] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 123.668930][ T6477] EXT4-fs error (device loop4): ext4_acquire_dquot:6936: comm syz.4.175: Failed to acquire dquot type 1 [ 123.737857][ T1197] usb 1-1: config 0 descriptor?? [ 123.748651][ T6468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.761125][ T6468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.799697][ T6477] EXT4-fs (loop4): 1 truncate cleaned up [ 123.806833][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.820162][ T6477] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.938464][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.041800][ T1197] ath6kl: Failed to submit usb control message: -71 [ 124.048538][ T1197] ath6kl: unable to send the bmi data to the device: -71 [ 124.056027][ T1197] ath6kl: Unable to send get target info: -71 [ 124.097305][ T1197] ath6kl: Failed to init ath6kl core: -71 [ 124.107183][ T1197] ath6kl_usb 1-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 124.150961][ T1197] usb 1-1: USB disconnect, device number 2 [ 124.298315][ T6362] bcachefs: bch2_fs_get_tree() error: EINTR [ 124.426792][ T1197] usb 4-1: USB disconnect, device number 2 [ 124.595347][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 124.670897][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.870919][ T5936] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.879206][ T5936] usb 2-1: config 0 has no interface number 0 [ 124.908330][ T5936] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.945368][ T5936] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.964370][ T5936] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 124.979261][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.012091][ T5936] usb 2-1: config 0 descriptor?? [ 125.227782][ T6516] loop3: detected capacity change from 0 to 128 [ 125.437497][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.452464][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.490334][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.505431][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.513130][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.526562][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.553078][ T6520] loop4: detected capacity change from 0 to 1024 [ 125.591850][ T5936] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 125.592013][ T6524] loop0: detected capacity change from 0 to 256 [ 125.663836][ T5936] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 125.679080][ T6520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.694251][ T5936] hid_prodikeys: hid-prodikeys: failed to find output report [ 125.694251][ T5936] [ 125.731096][ T5936] usb 2-1: USB disconnect, device number 2 [ 125.741414][ T6520] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.764482][ T5831] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 125.788015][ T6529] loop2: detected capacity change from 0 to 1024 [ 125.880890][ T1197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.942967][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.993871][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.071157][ T1197] usb 4-1: Using ep0 maxpacket: 16 [ 126.089673][ T1197] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.110988][ T1197] usb 4-1: config 0 has no interface number 0 [ 126.117935][ T1197] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.175837][ T1197] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 126.221312][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.257429][ T1197] usb 4-1: Product: syz [ 126.283550][ T1197] usb 4-1: SerialNumber: syz [ 126.331059][ T1197] usb 4-1: config 0 descriptor?? [ 126.364834][ T1197] cm109 4-1:0.8: invalid payload size 2, expected 4 [ 126.425286][ T1197] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 126.533690][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.762882][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 126.769970][ C0] ------------[ cut here ]------------ [ 126.775854][ C0] URB ffff88814478b600 submitted while active [ 126.783250][ C0] WARNING: CPU: 0 PID: 6521 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 126.792970][ C0] Modules linked in: [ 126.796910][ C0] CPU: 0 UID: 0 PID: 6521 Comm: syz.3.193 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 126.807552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.817644][ C0] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 126.823355][ C0] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 2e 05 b1 fa c6 05 30 fa 5e 09 01 90 48 c7 c7 a0 0e 2e 8c 48 89 de e8 37 3f 71 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 126.843024][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00010086 [ 126.849148][ C0] RAX: 0000000000000000 RBX: ffff88814478b600 RCX: ffffc90002181000 [ 126.857253][ C0] RDX: 0000000000040000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 126.865355][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 126.873369][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000087 [ 126.881380][ C0] R13: ffff88802932b058 R14: 000000000000000f R15: 0000000000000000 [ 126.889397][ C0] FS: 000055555ba40500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 126.898381][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.905017][ C0] CR2: 0000000000000000 CR3: 0000000033d10000 CR4: 0000000000350ef0 [ 126.913043][ C0] Call Trace: [ 126.916354][ C0] [ 126.919233][ C0] ? __warn+0xea/0x3c0 [ 126.923356][ C0] ? usb_submit_urb+0x14da/0x1730 [ 126.928465][ C0] ? report_bug+0x3c0/0x580 [ 126.933049][ C0] ? handle_bug+0x54/0xa0 [ 126.937458][ C0] ? exc_invalid_op+0x17/0x50 [ 126.942212][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 126.947322][ C0] ? __warn_printk+0x1a6/0x350 [ 126.952164][ C0] ? usb_submit_urb+0x14da/0x1730 [ 126.957263][ C0] ? usb_submit_urb+0x14d9/0x1730 [ 126.962359][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.968045][ C0] ? lock_acquire+0x2f/0xb0 [ 126.972605][ C0] ? cm109_urb_irq_callback+0xed/0xb60 [ 126.978156][ C0] cm109_urb_irq_callback+0x2e7/0xb60 [ 126.983611][ C0] __usb_hcd_giveback_urb+0x38c/0x6e0 [ 126.989060][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 126.994319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.000021][ C0] dummy_timer+0x17f7/0x3960 [ 127.004689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.010368][ C0] ? mark_lock+0xb5/0xc60 [ 127.014765][ C0] ? __pfx_lock_release+0x10/0x10 [ 127.019862][ C0] ? lock_acquire+0x2f/0xb0 [ 127.024422][ C0] ? debug_object_deactivate+0x13b/0x370 [ 127.030116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.035804][ C0] ? find_held_lock+0x2d/0x110 [ 127.040653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.046353][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 127.051802][ C0] ? __pfx_lock_release+0x10/0x10 [ 127.056896][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 127.061902][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.067592][ C0] ? mark_held_locks+0x9f/0xe0 [ 127.072420][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.078306][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 127.083312][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 127.088601][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 127.094397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.100097][ C0] hrtimer_run_softirq+0x17d/0x350 [ 127.105280][ C0] handle_softirqs+0x216/0x8f0 [ 127.110125][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 127.115480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.116669][ T6557] binder: BINDER_SET_CONTEXT_MGR already set [ 127.121180][ C0] __irq_exit_rcu+0x109/0x170 [ 127.121261][ C0] irq_exit_rcu+0x9/0x30 [ 127.121315][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 127.121376][ C0] [ 127.121391][ C0] [ 127.121408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.121478][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 127.156546][ T6557] binder: 6556:6557 ioctl 4018620d 200001c0 returned -16 [ 127.160389][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 92 4c f6 48 89 df e8 8e 11 4d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f6 3d f6 65 8b 05 e6 b3 d9 74 85 c0 74 16 5b [ 127.160436][ C0] RSP: 0018:ffffc9000eb0fbd0 EFLAGS: 00000246 [ 127.193226][ C0] RAX: 0000000000000002 RBX: ffff888047c9c860 RCX: 1ffffffff2dd0186 [ 127.201242][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1dc20 [ 127.209265][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dc9ba8 [ 127.217281][ C0] R10: ffffffff96e4dd47 R11: 0000000000000004 R12: ffff88802cd34540 [ 127.225293][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888047c9c978 [ 127.233320][ C0] raw_event_queue_add+0x19a/0x220 [ 127.238496][ C0] gadget_disconnect+0x5a/0x130 [ 127.243406][ C0] usb_gadget_disconnect_locked+0x20d/0x4f0 [ 127.249362][ C0] gadget_unbind_driver+0xd7/0x4e0 [ 127.254526][ C0] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 127.260195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.265869][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 127.271646][ C0] device_remove+0xcb/0x170 [ 127.276198][ C0] device_release_driver_internal+0x44a/0x610 [ 127.282327][ C0] driver_detach+0xd8/0x1b0 [ 127.286885][ C0] ? __pfx_raw_release+0x10/0x10 [ 127.291870][ C0] bus_remove_driver+0x13b/0x2c0 [ 127.296857][ C0] driver_unregister+0x76/0xb0 [ 127.301677][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 127.307445][ C0] raw_release+0x1ae/0x2b0 [ 127.311913][ C0] __fput+0x3fb/0xb60 [ 127.315955][ C0] task_work_run+0x151/0x250 [ 127.320590][ C0] ? __pfx_task_work_run+0x10/0x10 [ 127.325741][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 127.331510][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 127.337199][ C0] do_syscall_64+0xda/0x250 [ 127.341763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.347720][ C0] RIP: 0033:0x7ff87d585d29 [ 127.352166][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.371895][ C0] RSP: 002b:00007ffded446e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 127.380344][ C0] RAX: 0000000000000000 RBX: 000000000001ea54 RCX: 00007ff87d585d29 [ 127.388344][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 127.396339][ C0] RBP: 00007ff87d777ba0 R08: 0000000000000001 R09: 00007ffded44712f [ 127.404334][ C0] R10: 00007ff87d400000 R11: 0000000000000246 R12: 000000000001ef3c [ 127.412334][ C0] R13: 00007ff87d775fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 127.420352][ C0] [ 127.423391][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.430686][ C0] CPU: 0 UID: 0 PID: 6521 Comm: syz.3.193 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 127.441307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.451394][ C0] Call Trace: [ 127.454703][ C0] [ 127.457563][ C0] dump_stack_lvl+0x3d/0x1f0 [ 127.462206][ C0] panic+0x71d/0x800 [ 127.466156][ C0] ? __pfx_panic+0x10/0x10 [ 127.470631][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 127.475885][ C0] ? usb_submit_urb+0x14da/0x1730 [ 127.480964][ C0] check_panic_on_warn+0xab/0xb0 [ 127.485961][ C0] __warn+0xf6/0x3c0 [ 127.489891][ C0] ? usb_submit_urb+0x14da/0x1730 [ 127.494968][ C0] report_bug+0x3c0/0x580 [ 127.499351][ C0] handle_bug+0x54/0xa0 [ 127.503563][ C0] exc_invalid_op+0x17/0x50 [ 127.508121][ C0] asm_exc_invalid_op+0x1a/0x20 [ 127.513028][ C0] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 127.518712][ C0] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 2e 05 b1 fa c6 05 30 fa 5e 09 01 90 48 c7 c7 a0 0e 2e 8c 48 89 de e8 37 3f 71 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 127.538354][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00010086 [ 127.544455][ C0] RAX: 0000000000000000 RBX: ffff88814478b600 RCX: ffffc90002181000 [ 127.552454][ C0] RDX: 0000000000040000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 127.560541][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.568538][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000087 [ 127.576531][ C0] R13: ffff88802932b058 R14: 000000000000000f R15: 0000000000000000 [ 127.584626][ C0] ? __warn_printk+0x1a6/0x350 [ 127.589454][ C0] ? usb_submit_urb+0x14d9/0x1730 [ 127.594639][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.600305][ C0] ? lock_acquire+0x2f/0xb0 [ 127.604844][ C0] ? cm109_urb_irq_callback+0xed/0xb60 [ 127.610363][ C0] cm109_urb_irq_callback+0x2e7/0xb60 [ 127.615794][ C0] __usb_hcd_giveback_urb+0x38c/0x6e0 [ 127.621215][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 127.626453][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.632166][ C0] dummy_timer+0x17f7/0x3960 [ 127.636815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.642480][ C0] ? mark_lock+0xb5/0xc60 [ 127.646844][ C0] ? __pfx_lock_release+0x10/0x10 [ 127.651920][ C0] ? lock_acquire+0x2f/0xb0 [ 127.656463][ C0] ? debug_object_deactivate+0x13b/0x370 [ 127.662138][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.667805][ C0] ? find_held_lock+0x2d/0x110 [ 127.672656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.678322][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 127.683751][ C0] ? __pfx_lock_release+0x10/0x10 [ 127.688818][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 127.693799][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.699466][ C0] ? mark_held_locks+0x9f/0xe0 [ 127.704268][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.710122][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 127.715103][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 127.720399][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 127.726166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.731845][ C0] hrtimer_run_softirq+0x17d/0x350 [ 127.737012][ C0] handle_softirqs+0x216/0x8f0 [ 127.741829][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 127.747160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.752833][ C0] __irq_exit_rcu+0x109/0x170 [ 127.757551][ C0] irq_exit_rcu+0x9/0x30 [ 127.761838][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 127.767525][ C0] [ 127.770473][ C0] [ 127.773422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.779458][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 127.785921][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 92 4c f6 48 89 df e8 8e 11 4d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f6 3d f6 65 8b 05 e6 b3 d9 74 85 c0 74 16 5b [ 127.805623][ C0] RSP: 0018:ffffc9000eb0fbd0 EFLAGS: 00000246 [ 127.811745][ C0] RAX: 0000000000000002 RBX: ffff888047c9c860 RCX: 1ffffffff2dd0186 [ 127.819740][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1dc20 [ 127.827738][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dc9ba8 [ 127.835735][ C0] R10: ffffffff96e4dd47 R11: 0000000000000004 R12: ffff88802cd34540 [ 127.843729][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888047c9c978 [ 127.851751][ C0] raw_event_queue_add+0x19a/0x220 [ 127.856931][ C0] gadget_disconnect+0x5a/0x130 [ 127.861838][ C0] usb_gadget_disconnect_locked+0x20d/0x4f0 [ 127.867787][ C0] gadget_unbind_driver+0xd7/0x4e0 [ 127.872954][ C0] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 127.878624][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.884294][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 127.890152][ C0] device_remove+0xcb/0x170 [ 127.894697][ C0] device_release_driver_internal+0x44a/0x610 [ 127.900823][ C0] driver_detach+0xd8/0x1b0 [ 127.905374][ C0] ? __pfx_raw_release+0x10/0x10 [ 127.910357][ C0] bus_remove_driver+0x13b/0x2c0 [ 127.915338][ C0] driver_unregister+0x76/0xb0 [ 127.920152][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 127.925921][ C0] raw_release+0x1ae/0x2b0 [ 127.930385][ C0] __fput+0x3fb/0xb60 [ 127.934415][ C0] task_work_run+0x151/0x250 [ 127.939048][ C0] ? __pfx_task_work_run+0x10/0x10 [ 127.944196][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 127.949959][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 127.955648][ C0] do_syscall_64+0xda/0x250 [ 127.960213][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.966161][ C0] RIP: 0033:0x7ff87d585d29 [ 127.970603][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.990243][ C0] RSP: 002b:00007ffded446e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 127.998694][ C0] RAX: 0000000000000000 RBX: 000000000001ea54 RCX: 00007ff87d585d29 [ 128.006688][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 128.014699][ C0] RBP: 00007ff87d777ba0 R08: 0000000000000001 R09: 00007ffded44712f [ 128.022696][ C0] R10: 00007ff87d400000 R11: 0000000000000246 R12: 000000000001ef3c [ 128.030691][ C0] R13: 00007ff87d775fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 128.038714][ C0] [ 128.041991][ C0] Kernel Offset: disabled [ 128.046400][ C0] Rebooting in 86400 seconds..