last executing test programs: 4m44.42091176s ago: executing program 1 (id=11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = open(0x0, 0x0, 0x40) fcntl$notify(r1, 0x402, 0x79) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0xc97c, @none, 0x6, 0x1}, 0xe) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000080)=[{r7, 0x1020}], 0x1, 0x20000082) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4m43.331195876s ago: executing program 1 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000000c0)=@getaddr={0x0, 0x16, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x4008004) 4m41.172419347s ago: executing program 1 (id=13): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000000c0)=@getaddr={0x0, 0x16, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x4008004) 4m39.681667232s ago: executing program 1 (id=15): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@multicast, @remote, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "6bf6b251f9880b35"}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) syz_clone3(&(0x7f0000002340)={0x40082a440, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 4m37.710026431s ago: executing program 1 (id=16): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000000c0)=@getaddr={0x0, 0x16, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x4008004) 4m36.080011148s ago: executing program 1 (id=18): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 4m19.523096056s ago: executing program 32 (id=18): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 2m2.963642648s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) 2m0.473492582s ago: executing program 0 (id=221): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setgroups(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) io_setup(0x7, &(0x7f0000000280)=0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0xfffffc98}]) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, r0, 0x0, 0x3a) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 1m57.069876911s ago: executing program 0 (id=226): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m50.063530836s ago: executing program 0 (id=238): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m44.272575689s ago: executing program 0 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setgroups(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) io_setup(0x7, &(0x7f0000000280)=0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0xfffffc98}]) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, r1, 0x0, 0x3a) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1m42.577198949s ago: executing program 0 (id=250): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x0, 0x5, {{0xa, 0x4, 0x1, 0x2e, 0x28, 0x65, 0x0, 0x33, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4, 0xd2, 0x3, 0xc}, @ssrr={0x89, 0x3, 0x1c}, @timestamp={0x44, 0x4, 0xc3, 0x0, 0x4}, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x7, [0x8776]}]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0xffffffff, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r6, 0x402, 0x8000003d) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r5}, 0x18) 1m26.687265834s ago: executing program 33 (id=250): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x0, 0x5, {{0xa, 0x4, 0x1, 0x2e, 0x28, 0x65, 0x0, 0x33, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4, 0xd2, 0x3, 0xc}, @ssrr={0x89, 0x3, 0x1c}, @timestamp={0x44, 0x4, 0xc3, 0x0, 0x4}, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x7, [0x8776]}]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0xffffffff, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r6, 0x402, 0x8000003d) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r5}, 0x18) 12.438837038s ago: executing program 4 (id=582): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f00000017c0)=ANY=[@ANYRES32=r0], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x100, 0x2, 0x0, 0x0, "0000fa00ea8000"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x541b, &(0x7f0000000ec0)) 11.595320239s ago: executing program 2 (id=585): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 9.836238752s ago: executing program 4 (id=601): vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aac84dd7bfeccc2fcdc1aa2f", 0xc}], 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000dbffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 9.3540112s ago: executing program 7 (id=589): r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x40, 0x0, 0x37e}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @exit, @jmp={0x5, 0x1, 0xb, 0x7, 0x2, 0x1, 0x10}]}, 0x0, 0xb, 0x0, 0x0, 0x1f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x112cf}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000042a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 9.353540077s ago: executing program 4 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009"], 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086412, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000540)) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c80), r7) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4800) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000006c0)='./file1\x00', 0x2002400, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRES8=r6, @ANYRESHEX=r3], 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r8, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 6.148871403s ago: executing program 7 (id=593): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000daffffff", @ANYRES64=r0], 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x1d8) 6.148671572s ago: executing program 5 (id=594): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/233, 0xe9}], 0x1, 0xa6, 0x0) 5.873043943s ago: executing program 4 (id=595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x7, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.847709114s ago: executing program 5 (id=597): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000300)=0x800) 5.541068447s ago: executing program 5 (id=598): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 5.108621386s ago: executing program 4 (id=602): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000500)={0x40, 0xd, 0x1, '`'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.10362445s ago: executing program 7 (id=603): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.691151174s ago: executing program 2 (id=605): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) close_range(r0, 0xffffffffffffffff, 0x0) 4.661766051s ago: executing program 7 (id=606): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.405146156s ago: executing program 2 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 4.351269983s ago: executing program 3 (id=608): pipe(&(0x7f0000000000)) r0 = epoll_create1(0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 4.331708048s ago: executing program 2 (id=609): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x120e511f, 0x0, 0x0, 0x0, 0x0, 0x0) 3.69187955s ago: executing program 5 (id=613): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.111295289s ago: executing program 5 (id=615): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r3, 0x4b63, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYBLOB="00042bbd7000ffdbdf2509000000480001800d0001007564703a73797a32000000002c0004001400010002004e24e000000100000000000000001400020002004e21ffffffff000000000000000008000300810000004400038008000300fbffffff080003000800000008000100020000000800030008000000080001000100080003007a"], 0xa0}, 0x1, 0x0, 0x0, 0x40084}, 0x2004c8d0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) 1.926035829s ago: executing program 6 (id=616): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 1.828198137s ago: executing program 6 (id=617): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44080) 1.63299051s ago: executing program 3 (id=618): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x100, 0x0) lseek(r0, 0x4, 0x1) 1.415773879s ago: executing program 3 (id=619): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x159) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x121200) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 1.140510259s ago: executing program 6 (id=620): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1.024958715s ago: executing program 3 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 984.577928ms ago: executing program 2 (id=622): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@utf8}]}, 0x1, 0x1527, &(0x7f0000000380)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 835.424274ms ago: executing program 6 (id=623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) 749.988737ms ago: executing program 3 (id=624): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000300)=0x800) 691.004983ms ago: executing program 4 (id=625): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 644.355922ms ago: executing program 7 (id=626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x1}) 532.783639ms ago: executing program 6 (id=627): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) truncate(&(0x7f0000000080)='./file1\x00', 0x637c) 384.943965ms ago: executing program 3 (id=628): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xa2, 0x8003}}}}]}, 0x4c}}, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 372.159636ms ago: executing program 2 (id=629): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = creat(&(0x7f0000000100)='./file1\x00', 0x158) write$FUSE_DIRENT(r0, 0x0, 0x130) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 353.067255ms ago: executing program 5 (id=630): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000407921770000000000000109022400010000c00309040000010300000009210017080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "4663b08d"}, @local=@item_4={0x3, 0x2, 0x9, "924ef193"}]}}, 0x0}, 0x0) 201.291027ms ago: executing program 7 (id=631): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e20, 0x1ff, 0x4e23, 0xed5e, 0x2, 0x20, 0x80, 0x5c, 0x0, 0xee00}, {0x3, 0x8, 0x80000001, 0xfffffffffffffff9, 0x65d4, 0x8, 0x8, 0x3}, {0x2, 0x2, 0x6, 0xfffffffffffffff5}, 0xa84, 0x6e6bbf, 0x2, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x3502, 0x0, 0x3, 0x2, 0x7f, 0x81}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 0s ago: executing program 6 (id=632): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 101.118055][ T5846] cgroup: Unknown subsys name 'net' [ 101.257764][ T5846] cgroup: Unknown subsys name 'cpuset' [ 101.267391][ T5846] cgroup: Unknown subsys name 'rlimit' [ 101.401384][ T9] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 102.974211][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.935841][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.950035][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.957734][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.961529][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.972871][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.981158][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.989761][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.997023][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.000076][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.012105][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.021326][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.022926][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.036809][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.044098][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.053975][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.063602][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.076664][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.087663][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.096864][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.105017][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.118162][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.128814][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.136980][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.144262][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.152696][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.161802][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.169132][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.178750][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.186112][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.194302][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.888076][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 107.065218][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 107.097586][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 107.220178][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 107.335071][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.343215][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.350999][ T5877] bridge_slave_0: entered allmulticast mode [ 107.358658][ T5877] bridge_slave_0: entered promiscuous mode [ 107.441861][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.448984][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.456896][ T5877] bridge_slave_1: entered allmulticast mode [ 107.464461][ T5877] bridge_slave_1: entered promiscuous mode [ 107.490508][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.497667][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.504933][ T5864] bridge_slave_0: entered allmulticast mode [ 107.512592][ T5864] bridge_slave_0: entered promiscuous mode [ 107.521360][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.528470][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.535939][ T5864] bridge_slave_1: entered allmulticast mode [ 107.544426][ T5864] bridge_slave_1: entered promiscuous mode [ 107.665614][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.691535][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.698698][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.706413][ T5878] bridge_slave_0: entered allmulticast mode [ 107.714040][ T5878] bridge_slave_0: entered promiscuous mode [ 107.722215][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.729943][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.737158][ T5878] bridge_slave_1: entered allmulticast mode [ 107.745230][ T5878] bridge_slave_1: entered promiscuous mode [ 107.783878][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.836682][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.932789][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.972407][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 107.986346][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.994077][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.004462][ T5865] bridge_slave_0: entered allmulticast mode [ 108.012317][ T5865] bridge_slave_0: entered promiscuous mode [ 108.021443][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.028564][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.035761][ T5865] bridge_slave_1: entered allmulticast mode [ 108.043918][ T5865] bridge_slave_1: entered promiscuous mode [ 108.052598][ T5877] team0: Port device team_slave_0 added [ 108.058781][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 108.090321][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.120082][ T5876] Bluetooth: hci3: command tx timeout [ 108.120091][ T5868] Bluetooth: hci2: command tx timeout [ 108.120232][ T5869] Bluetooth: hci0: command tx timeout [ 108.132677][ T5869] Bluetooth: hci1: command tx timeout [ 108.145178][ T5877] team0: Port device team_slave_1 added [ 108.160461][ T5864] team0: Port device team_slave_0 added [ 108.169064][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.250275][ T5864] team0: Port device team_slave_1 added [ 108.289275][ T5869] Bluetooth: hci5: command tx timeout [ 108.289442][ T5876] Bluetooth: hci4: command tx timeout [ 108.314321][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.328420][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.377223][ T5878] team0: Port device team_slave_0 added [ 108.386487][ T5878] team0: Port device team_slave_1 added [ 108.414773][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.421752][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.447907][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.461358][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.468301][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.494877][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.521258][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.528194][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.554306][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.618911][ T5865] team0: Port device team_slave_0 added [ 108.627287][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.634970][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.661087][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.703799][ T5865] team0: Port device team_slave_1 added [ 108.750421][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.757361][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.783901][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.860895][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.867861][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.893798][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.927642][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.935197][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.942467][ T5872] bridge_slave_0: entered allmulticast mode [ 108.950432][ T5872] bridge_slave_0: entered promiscuous mode [ 108.958969][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.966290][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.992446][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.005478][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.012684][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.038820][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.050181][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.057292][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.064835][ T5874] bridge_slave_0: entered allmulticast mode [ 109.072444][ T5874] bridge_slave_0: entered promiscuous mode [ 109.081280][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.088393][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.095657][ T5874] bridge_slave_1: entered allmulticast mode [ 109.103513][ T5874] bridge_slave_1: entered promiscuous mode [ 109.136978][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.144318][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.151847][ T5872] bridge_slave_1: entered allmulticast mode [ 109.159581][ T5872] bridge_slave_1: entered promiscuous mode [ 109.227181][ T5877] hsr_slave_0: entered promiscuous mode [ 109.233728][ T5877] hsr_slave_1: entered promiscuous mode [ 109.284898][ T5864] hsr_slave_0: entered promiscuous mode [ 109.291839][ T5864] hsr_slave_1: entered promiscuous mode [ 109.299083][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 109.305391][ T5864] Cannot create hsr debugfs directory [ 109.329975][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.374790][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.388053][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.420111][ T5878] hsr_slave_0: entered promiscuous mode [ 109.426711][ T5878] hsr_slave_1: entered promiscuous mode [ 109.433281][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 109.438996][ T5878] Cannot create hsr debugfs directory [ 109.448200][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.529188][ T5872] team0: Port device team_slave_0 added [ 109.629031][ T5872] team0: Port device team_slave_1 added [ 109.637987][ T5874] team0: Port device team_slave_0 added [ 109.648136][ T5874] team0: Port device team_slave_1 added [ 109.668879][ T5865] hsr_slave_0: entered promiscuous mode [ 109.675330][ T5865] hsr_slave_1: entered promiscuous mode [ 109.681818][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 109.687534][ T5865] Cannot create hsr debugfs directory [ 109.878745][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.886075][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.912261][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.925863][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.932953][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.958914][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.971481][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.978471][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.004868][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.018160][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.025308][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.051545][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.199661][ T5876] Bluetooth: hci3: command tx timeout [ 110.205121][ T5876] Bluetooth: hci0: command tx timeout [ 110.210632][ T5876] Bluetooth: hci2: command tx timeout [ 110.211560][ T5869] Bluetooth: hci1: command tx timeout [ 110.361934][ T5869] Bluetooth: hci4: command tx timeout [ 110.361948][ T5868] Bluetooth: hci5: command tx timeout [ 110.419795][ T5874] hsr_slave_0: entered promiscuous mode [ 110.426241][ T5874] hsr_slave_1: entered promiscuous mode [ 110.432667][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 110.438386][ T5874] Cannot create hsr debugfs directory [ 110.483545][ T5872] hsr_slave_0: entered promiscuous mode [ 110.490152][ T5872] hsr_slave_1: entered promiscuous mode [ 110.496298][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 110.502165][ T5872] Cannot create hsr debugfs directory [ 110.771952][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.785041][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.828924][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.840521][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.977694][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.993166][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.006232][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.023838][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.121822][ T5878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.156443][ T5878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.167967][ T5878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.208533][ T5878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.282256][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.295830][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.335601][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.348113][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.461074][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.505697][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.519120][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.531939][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.556432][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.597950][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.648351][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.691792][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.699009][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.737824][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.744953][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.765933][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.778496][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.792339][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.808208][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.846286][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.908252][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.915395][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.940679][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.954171][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.961317][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.077712][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.178171][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.185370][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.200579][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.207727][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.289651][ T5869] Bluetooth: hci2: command tx timeout [ 112.289969][ T5868] Bluetooth: hci0: command tx timeout [ 112.295073][ T5869] Bluetooth: hci1: command tx timeout [ 112.300940][ T5876] Bluetooth: hci3: command tx timeout [ 112.357039][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.393091][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.441097][ T5876] Bluetooth: hci5: command tx timeout [ 112.447281][ T5868] Bluetooth: hci4: command tx timeout [ 112.536297][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.585915][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.635408][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.668756][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.675929][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.691890][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.699093][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.746182][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.753352][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.766802][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.773961][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.803645][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.880113][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.887271][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.916231][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.952064][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.959238][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.002796][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.068064][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.206767][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.230027][ T5864] veth0_vlan: entered promiscuous mode [ 113.345065][ T5865] veth0_vlan: entered promiscuous mode [ 113.374054][ T5864] veth1_vlan: entered promiscuous mode [ 113.467633][ T5865] veth1_vlan: entered promiscuous mode [ 113.617617][ T5865] veth0_macvtap: entered promiscuous mode [ 113.642011][ T5864] veth0_macvtap: entered promiscuous mode [ 113.677547][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.697575][ T5864] veth1_macvtap: entered promiscuous mode [ 113.708287][ T5865] veth1_macvtap: entered promiscuous mode [ 113.788382][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.814492][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.841837][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.888163][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.947483][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.968277][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.009848][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.046791][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.103025][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.110959][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.159324][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.174286][ T5874] veth0_vlan: entered promiscuous mode [ 114.183128][ T3509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.217697][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.273702][ T3509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.345178][ T5874] veth1_vlan: entered promiscuous mode [ 114.363019][ T5876] Bluetooth: hci3: command tx timeout [ 114.363042][ T5868] Bluetooth: hci0: command tx timeout [ 114.368426][ T5876] Bluetooth: hci1: command tx timeout [ 114.374675][ T5868] Bluetooth: hci2: command tx timeout [ 114.465996][ T5872] veth0_vlan: entered promiscuous mode [ 114.493979][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.502175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.519957][ T5868] Bluetooth: hci5: command tx timeout [ 114.524360][ T5876] Bluetooth: hci4: command tx timeout [ 114.598296][ T5872] veth1_vlan: entered promiscuous mode [ 114.612842][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.640003][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.682372][ T5878] veth0_vlan: entered promiscuous mode [ 114.718231][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.726987][ T5874] veth0_macvtap: entered promiscuous mode [ 114.732962][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.748829][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.771845][ T5874] veth1_macvtap: entered promiscuous mode [ 114.785724][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.862167][ T5878] veth1_vlan: entered promiscuous mode [ 114.884715][ T5872] veth0_macvtap: entered promiscuous mode [ 114.919004][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.934229][ T5872] veth1_macvtap: entered promiscuous mode [ 115.052545][ T5878] veth0_macvtap: entered promiscuous mode [ 115.105866][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.132407][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.359554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.372670][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.383026][ T5878] veth1_macvtap: entered promiscuous mode [ 116.506415][ T6010] vivid-001: disconnect [ 116.731879][ T6003] vivid-001: reconnect [ 116.766740][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.799298][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.809438][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.889063][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.154425][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.176024][ T3509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.224743][ T5877] veth0_vlan: entered promiscuous mode [ 117.968674][ T3509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.987708][ T3509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.025573][ T5877] veth1_vlan: entered promiscuous mode [ 118.053719][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.226816][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.264804][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.324956][ T3509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.439204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.447473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.575114][ T6024] vivid-002: disconnect [ 118.699291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 118.749948][ T3509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.029946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.127354][ T3509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.179524][ T3509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.314159][ T6020] vivid-002: reconnect [ 119.623344][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.643776][ T5877] veth0_macvtap: entered promiscuous mode [ 119.657886][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.768021][ T5877] veth1_macvtap: entered promiscuous mode [ 120.616585][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.634326][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.660865][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.673262][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.724710][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.739055][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.798186][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.814696][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.824490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.833211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.841858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.851080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 120.939636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.982794][ T6034] vivid-002: disconnect [ 121.236080][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.713870][ T6030] vivid-002: reconnect [ 121.726424][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.759942][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.767738][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.991987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.026536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.802629][ T6071] vivid-004: disconnect [ 126.211512][ T6063] vivid-004: reconnect [ 128.826653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.879214][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.106259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.149702][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.392481][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.467941][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.994346][ T6104] vivid-000: disconnect [ 130.509837][ T6099] vivid-000: reconnect [ 140.374969][ T6171] Zero length message leads to an empty skb [ 142.400294][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.406801][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.616803][ T5868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.637235][ T5868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.646397][ T5868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.664558][ T5868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.673797][ T5868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.621636][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.962127][ T5876] Bluetooth: hci6: command tx timeout [ 155.841284][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.999312][ T5876] Bluetooth: hci6: command tx timeout [ 157.302587][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.866540][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.089312][ T5876] Bluetooth: hci6: command tx timeout [ 161.257742][ T5876] Bluetooth: hci6: command tx timeout [ 162.593952][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 164.880569][ T59] bridge_slave_1: left allmulticast mode [ 164.901462][ T59] bridge_slave_1: left promiscuous mode [ 164.908031][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.310766][ T59] bridge_slave_0: left allmulticast mode [ 166.334480][ T59] bridge_slave_0: left promiscuous mode [ 166.359450][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.145216][ T6343] netlink: 96 bytes leftover after parsing attributes in process `syz.3.61'. [ 169.308802][ T5935] IPVS: starting estimator thread 0... [ 169.403232][ T6349] IPVS: using max 21 ests per chain, 50400 per kthread [ 172.288977][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.341976][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.566725][ T59] bond0 (unregistering): Released all slaves [ 178.657187][ T6395] vivid-000: disconnect [ 178.708318][ T6388] vivid-000: reconnect [ 182.224556][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.629370][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.636650][ T6237] bridge_slave_0: entered allmulticast mode [ 182.685405][ T6237] bridge_slave_0: entered promiscuous mode [ 184.243631][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.256240][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.310731][ T6237] bridge_slave_1: entered allmulticast mode [ 184.349574][ T6237] bridge_slave_1: entered promiscuous mode [ 186.319563][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.333718][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.496824][ T6466] loop4: detected capacity change from 0 to 256 [ 187.547320][ T6466] ======================================================= [ 187.547320][ T6466] WARNING: The mand mount option has been deprecated and [ 187.547320][ T6466] and is ignored by this kernel. Remove the mand [ 187.547320][ T6466] option from the mount to silence this warning. [ 187.547320][ T6466] ======================================================= [ 189.290616][ T59] hsr_slave_0: left promiscuous mode [ 189.649527][ T59] hsr_slave_1: left promiscuous mode [ 189.672787][ T6481] vivid-001: disconnect [ 189.690838][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.758571][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.783508][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.794719][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.927593][ T59] veth1_macvtap: left promiscuous mode [ 190.159435][ T59] veth0_macvtap: left promiscuous mode [ 190.165141][ T59] veth1_vlan: left promiscuous mode [ 190.172919][ T6478] vivid-001: reconnect [ 190.205977][ T59] veth0_vlan: left promiscuous mode [ 196.388987][ T59] team0 (unregistering): Port device team_slave_1 removed [ 197.259883][ T59] team0 (unregistering): Port device team_slave_0 removed [ 200.281212][ T6237] team0: Port device team_slave_0 added [ 200.303245][ T6237] team0: Port device team_slave_1 added [ 200.368664][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.397170][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.457921][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.484187][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.495039][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.522064][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.977971][ T6545] loop0: detected capacity change from 0 to 256 [ 201.020363][ T6237] hsr_slave_0: entered promiscuous mode [ 201.334410][ T6550] vivid-004: disconnect [ 201.845961][ T6544] vivid-004: reconnect [ 202.014550][ T6237] hsr_slave_1: entered promiscuous mode [ 202.056248][ T6237] debugfs: 'hsr0' already exists in 'hsr' [ 202.099299][ T6237] Cannot create hsr debugfs directory [ 202.273882][ T6554] loop4: detected capacity change from 0 to 256 [ 203.804244][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.810633][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.815159][ T6619] vivid-000: disconnect [ 211.940929][ T6608] vivid-000: reconnect [ 213.599415][ T6624] loop2: detected capacity change from 0 to 256 [ 215.563716][ T6640] loop3: detected capacity change from 0 to 256 [ 216.748031][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.756477][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.764217][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.773870][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.790715][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.839498][ T5868] Bluetooth: hci0: command tx timeout [ 218.873493][ T36] bridge_slave_1: left allmulticast mode [ 218.899419][ T36] bridge_slave_1: left promiscuous mode [ 218.935957][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.013856][ T36] bridge_slave_0: left allmulticast mode [ 220.080626][ T36] bridge_slave_0: left promiscuous mode [ 220.101453][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.252663][ T5868] Bluetooth: hci0: command tx timeout [ 223.639264][ T5868] Bluetooth: hci0: command tx timeout [ 223.664451][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.108055][ T6697] loop4: detected capacity change from 0 to 256 [ 224.435129][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.858971][ T36] bond0 (unregistering): Released all slaves [ 225.719238][ T5868] Bluetooth: hci0: command tx timeout [ 226.103726][ T6711] loop3: detected capacity change from 0 to 256 [ 226.167533][ T36] hsr_slave_0: left promiscuous mode [ 227.317252][ T36] hsr_slave_1: left promiscuous mode [ 227.927161][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.007989][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.392417][ T36] team0 (unregistering): Port device team_slave_1 removed [ 231.530667][ T5178] Bluetooth: hci5: command 0x0406 tx timeout [ 231.536763][ T5178] Bluetooth: hci1: command 0x0406 tx timeout [ 231.542947][ T5178] Bluetooth: hci4: command 0x0406 tx timeout [ 231.550386][ T5178] Bluetooth: hci2: command 0x0406 tx timeout [ 231.556669][ T5178] Bluetooth: hci3: command 0x0406 tx timeout [ 232.484367][ T36] team0 (unregistering): Port device team_slave_0 removed [ 234.154818][ T6767] loop4: detected capacity change from 0 to 256 [ 240.496448][ T6643] chnl_net:caif_netlink_parms(): no params data found [ 244.659523][ T6836] loop4: detected capacity change from 0 to 256 [ 245.068424][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.178171][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.267040][ T6643] bridge_slave_0: entered allmulticast mode [ 245.301340][ T6643] bridge_slave_0: entered promiscuous mode [ 245.331520][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.359005][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.405816][ T6643] bridge_slave_1: entered allmulticast mode [ 245.433595][ T6643] bridge_slave_1: entered promiscuous mode [ 245.708290][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.774893][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.009518][ T6643] team0: Port device team_slave_0 added [ 247.018740][ T6643] team0: Port device team_slave_1 added [ 247.231599][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.258920][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.339194][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.376176][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.403565][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.549235][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.211207][ T6643] hsr_slave_0: entered promiscuous mode [ 249.275024][ T6643] hsr_slave_1: entered promiscuous mode [ 249.304185][ T6643] debugfs: 'hsr0' already exists in 'hsr' [ 249.333606][ T6643] Cannot create hsr debugfs directory [ 252.910283][ T6643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.195172][ T6643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.420171][ T6643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.414190][ T6643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.724555][ T6911] loop4: detected capacity change from 0 to 256 [ 255.402509][ T6917] loop0: detected capacity change from 0 to 256 [ 259.079889][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.114023][ T6643] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.135004][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.142209][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.423668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.430902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.012252][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.355208][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.362161][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.714341][ T6993] loop5: detected capacity change from 0 to 256 [ 266.765054][ T6994] loop3: detected capacity change from 0 to 256 [ 270.937636][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.945953][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.989356][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.000051][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.009408][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.909383][ T51] Bluetooth: hci0: command tx timeout [ 275.959904][ T51] Bluetooth: hci0: command tx timeout [ 276.270843][ T7075] loop0: detected capacity change from 0 to 256 [ 277.807040][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 278.425822][ T51] Bluetooth: hci0: command tx timeout [ 280.439390][ T51] Bluetooth: hci0: command tx timeout [ 280.461599][ T7099] loop0: detected capacity change from 0 to 256 [ 285.498565][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.552551][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.600063][ T7031] bridge_slave_0: entered allmulticast mode [ 285.657338][ T7031] bridge_slave_0: entered promiscuous mode [ 285.720547][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.727706][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.753697][ T7141] loop4: detected capacity change from 0 to 256 [ 285.882154][ T7031] bridge_slave_1: entered allmulticast mode [ 286.642032][ T7031] bridge_slave_1: entered promiscuous mode [ 287.829516][ T6035] bridge_slave_1: left allmulticast mode [ 287.835199][ T6035] bridge_slave_1: left promiscuous mode [ 287.882623][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.110759][ T6035] bridge_slave_0: left allmulticast mode [ 288.116444][ T6035] bridge_slave_0: left promiscuous mode [ 288.182527][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.261780][ T7180] loop3: detected capacity change from 0 to 256 [ 292.666580][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.725603][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.745885][ T6035] bond0 (unregistering): Released all slaves [ 293.647469][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.691405][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.169656][ T6035] hsr_slave_0: left promiscuous mode [ 295.216254][ T7211] loop2: detected capacity change from 0 to 256 [ 295.233519][ T6035] hsr_slave_1: left promiscuous mode [ 295.269761][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.406353][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.600262][ T6035] team0 (unregistering): Port device team_slave_1 removed [ 298.695107][ T6035] team0 (unregistering): Port device team_slave_0 removed [ 298.827309][ T7232] loop5: detected capacity change from 0 to 256 [ 300.595974][ T7031] team0: Port device team_slave_0 added [ 300.763228][ T7031] team0: Port device team_slave_1 added [ 301.339255][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.405479][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.099530][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.113637][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.120881][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.147141][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.071084][ T7031] hsr_slave_0: entered promiscuous mode [ 303.097293][ T7031] hsr_slave_1: entered promiscuous mode [ 303.120153][ T7031] debugfs: 'hsr0' already exists in 'hsr' [ 303.143931][ T7031] Cannot create hsr debugfs directory [ 305.409811][ T7283] loop3: detected capacity change from 0 to 256 [ 312.376746][ T7347] vivid-004: disconnect [ 312.608048][ T7338] vivid-004: reconnect [ 313.132483][ T7031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.232581][ T7031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.069933][ T7031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.184185][ T7031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.454829][ T7368] loop2: detected capacity change from 0 to 256 [ 318.192171][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.291958][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.418377][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.425633][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.535755][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.542976][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.682605][ T7031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.780134][ T7420] vivid-000: disconnect [ 322.281739][ T7415] vivid-000: reconnect [ 322.938164][ T7437] binder: 7436:7437 unknown command 0 [ 322.960848][ T7437] binder: 7436:7437 ioctl c0306201 200000000080 returned -22 [ 323.010301][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.031604][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.046861][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.060083][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.075331][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.113766][ T1005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.254336][ T7444] tmpfs: Bad value for 'mpol' [ 323.261601][ T7445] loop3: detected capacity change from 0 to 16 [ 323.267555][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.288982][ T7445] erofs (device loop3): mounted with root inode @ nid 36. [ 323.354052][ T7445] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 323.385222][ T7445] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 323.418233][ T7445] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 323.435868][ T7445] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 323.471963][ T7445] syz.3.284: attempt to access beyond end of device [ 323.471963][ T7445] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 323.541583][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 323.555243][ T7445] syz.3.284: attempt to access beyond end of device [ 323.555243][ T7445] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 323.578254][ T1005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.594774][ T7445] syz.3.284: attempt to access beyond end of device [ 323.594774][ T7445] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 323.660268][ T7445] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 323.701746][ T7445] erofs (device loop3): read error -117 @ 0 of nid 36 [ 323.724455][ T7455] loop2: detected capacity change from 0 to 128 [ 323.734070][ T7445] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 323.782507][ T7455] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 323.845272][ T7455] hpfs: filesystem error: improperly stopped [ 323.867417][ T1005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.912411][ T7455] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 323.976086][ T7455] hpfs: You really don't want any checks? You are crazy... [ 324.036046][ T7455] hpfs: hpfs_map_sector(): read error [ 324.079240][ T7455] hpfs: code page support is disabled [ 324.085161][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.139704][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.159701][ T7455] hpfs: filesystem error: unable to find root dir [ 324.207004][ T1005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.247941][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.260260][ T7455] hpfs: hpfs_map_sector(): read error [ 324.264760][ T5988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 324.314026][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.323227][ T7465] loop5: detected capacity change from 0 to 2048 [ 324.329457][ T7455] hpfs: hpfs_map_sector(): read error [ 324.345750][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.355524][ T7455] hpfs: hpfs_map_sector(): read error [ 324.364910][ T7455] hpfs: hpfs_map_4sectors(): unaligned read [ 324.398216][ T7455] hpfs: hpfs_map_sector(): read error [ 324.448946][ T7465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.449287][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 324.504552][ T5988] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 324.535288][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.569245][ T5988] usb 5-1: Product: syz [ 324.584326][ T5988] usb 5-1: Manufacturer: syz [ 324.591291][ T7465] UDF-fs: warning (device loop5): udf_rmdir: empty directory has nlink != 2 (0) [ 324.614817][ T5988] usb 5-1: SerialNumber: syz [ 324.732036][ T5988] usb 5-1: config 0 descriptor?? [ 324.772685][ T5988] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 325.017233][ T5988] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 325.059252][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 325.104004][ T5988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 325.170290][ T5871] Bluetooth: hci2: command tx timeout [ 325.181988][ T5988] usb 5-1: USB disconnect, device number 2 [ 325.203734][ T1005] bridge_slave_1: left allmulticast mode [ 325.224228][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.245304][ T1005] bridge_slave_1: left promiscuous mode [ 325.245414][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.278273][ T44] usb 3-1: Product: syz [ 325.283473][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.304393][ T44] usb 3-1: Manufacturer: syz [ 325.309005][ T44] usb 3-1: SerialNumber: syz [ 325.335833][ T1005] bridge_slave_0: left allmulticast mode [ 325.385763][ T44] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 325.389360][ T1005] bridge_slave_0: left promiscuous mode [ 325.420088][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.436139][ T7490] loop5: detected capacity change from 0 to 1024 [ 325.468619][ T5989] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.822951][ T5988] usb 3-1: USB disconnect, device number 2 [ 325.870554][ T6044] hfsplus: b-tree write err: -5, ino 4 [ 326.049915][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 326.129686][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 326.187814][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.199122][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.218454][ T1005] bond0 (unregistering): Released all slaves [ 326.224519][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 326.232841][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.244364][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.254559][ T5955] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 326.265741][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.278359][ T5955] usb 5-1: config 0 descriptor?? [ 326.316740][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 326.325734][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 326.348883][ T44] usb 4-1: config 0 has an invalid interface number: 193 but max is 1 [ 326.381724][ T44] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 326.404608][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.423632][ T44] usb 4-1: config 0 has no interface number 0 [ 326.435135][ T44] usb 4-1: config 0 has no interface number 1 [ 326.446514][ T44] usb 4-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.486112][ T44] usb 4-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 326.512377][ T44] usb 4-1: config 0 interface 193 has no altsetting 0 [ 326.524664][ T5989] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 326.532644][ T5989] ath9k_htc: Failed to initialize the device [ 326.538730][ T44] usb 4-1: config 0 interface 4 has no altsetting 0 [ 326.547581][ T5988] usb 3-1: ath9k_htc: USB layer deinitialized [ 326.567621][ T44] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 326.581429][ T30] audit: type=1326 audit(1757927109.633:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.2.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b58eba9 code=0x0 [ 326.614927][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.624652][ T44] usb 4-1: Product: syz [ 326.629044][ T44] usb 4-1: Manufacturer: syz [ 326.641844][ T44] usb 4-1: SerialNumber: syz [ 326.658272][ T44] usb 4-1: config 0 descriptor?? [ 326.683355][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.690206][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.732333][ T5955] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.4-1/input0 [ 326.901340][ T44] usb 4-1: unknown interface protocol 0x4f, assuming v1 [ 326.910813][ T5955] usb 5-1: USB disconnect, device number 3 [ 326.919230][ T44] usb 4-1: 193:2 : does not exist [ 326.930512][ T44] usb 4-1: unknown interface protocol 0x5, assuming v1 [ 326.937430][ T44] usb 4-1: 4:0 : does not exist [ 326.999264][ T44] usb 4-1: USB disconnect, device number 2 [ 327.184274][ T7480] udevd[7480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.239491][ T5871] Bluetooth: hci2: command tx timeout [ 327.285782][ T1005] hsr_slave_0: left promiscuous mode [ 327.308162][ T1005] hsr_slave_1: left promiscuous mode [ 327.322211][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.339197][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.357446][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.377010][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.457781][ T1005] veth1_macvtap: left promiscuous mode [ 327.513167][ T1005] veth0_macvtap: left promiscuous mode [ 327.518841][ T1005] veth1_vlan: left promiscuous mode [ 327.569790][ T1005] veth0_vlan: left promiscuous mode [ 327.765692][ T5955] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 327.963632][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 328.007236][ T5955] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 328.029246][ T5955] usb 6-1: config 0 has no interface number 0 [ 328.044994][ T5955] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 328.074811][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.093345][ T5955] usb 6-1: Product: syz [ 328.097522][ T5955] usb 6-1: Manufacturer: syz [ 328.130005][ T5955] usb 6-1: SerialNumber: syz [ 328.231899][ T5955] usb 6-1: config 0 descriptor?? [ 328.491591][ T5955] radio-si470x 6-1:0.35: this is not a si470x device. [ 328.560444][ T5955] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 328.611543][ T5955] usb 6-1: USB disconnect, device number 2 [ 328.697222][ T7549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 328.948751][ T7554] loop4: detected capacity change from 0 to 16 [ 328.973303][ T7554] erofs (device loop4): mounted with root inode @ nid 36. [ 329.320783][ T5871] Bluetooth: hci2: command tx timeout [ 329.339875][ T7559] loop4: detected capacity change from 0 to 1024 [ 329.417527][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.430170][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.437841][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.448320][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.458897][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.519638][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 329.560543][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 329.602218][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 329.701805][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.720606][ T44] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 329.754285][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 329.768098][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.781097][ T44] usb 6-1: Product: syz [ 329.785264][ T44] usb 6-1: Manufacturer: syz [ 329.797332][ T44] usb 6-1: SerialNumber: syz [ 329.922577][ T7566] loop4: detected capacity change from 0 to 2048 [ 329.938690][ T7566] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 329.985035][ T7566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.358291][ T7031] veth0_vlan: entered promiscuous mode [ 330.399360][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.406503][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.421496][ T7438] bridge_slave_0: entered allmulticast mode [ 330.443168][ T7438] bridge_slave_0: entered promiscuous mode [ 330.471241][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.478382][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.493603][ T7438] bridge_slave_1: entered allmulticast mode [ 330.504662][ T7438] bridge_slave_1: entered promiscuous mode [ 330.527959][ T5988] hid-generic 0005:0B57:05DF.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 330.740449][ T44] usb 6-1: USB disconnect, device number 3 [ 330.793723][ T7576] warning: `syz.4.325' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 330.969601][ T44] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 331.046782][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.122466][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.181891][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 331.225771][ T44] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 331.245500][ T44] usb 6-1: can't read configurations, error -71 [ 331.399605][ T51] Bluetooth: hci2: command tx timeout [ 331.496248][ T51] Bluetooth: hci6: command tx timeout [ 331.532205][ T7438] team0: Port device team_slave_0 added [ 331.597233][ T7438] team0: Port device team_slave_1 added [ 332.104347][ T7609] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 332.260169][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.267151][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.371171][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.391597][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.398559][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.494206][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.578783][ T7618] pim6reg: entered allmulticast mode [ 332.589362][ T44] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 332.755104][ T44] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 332.800388][ T44] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 332.839188][ T44] usb 6-1: config 1 interface 0 has no altsetting 0 [ 332.902490][ T44] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 332.924788][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.956096][ T44] usb 6-1: Product: syz [ 332.966436][ T7438] hsr_slave_0: entered promiscuous mode [ 332.968599][ T44] usb 6-1: Manufacturer: syz [ 332.984872][ T44] usb 6-1: SerialNumber: syz [ 332.990445][ T7438] hsr_slave_1: entered promiscuous mode [ 332.996827][ T7615] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.008800][ T7438] debugfs: 'hsr0' already exists in 'hsr' [ 333.015060][ T7615] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.029552][ T7438] Cannot create hsr debugfs directory [ 333.178717][ T5933] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 333.351653][ T5933] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 333.363485][ T5933] usb 5-1: config 0 has no interface number 0 [ 333.370399][ T7635] loop3: detected capacity change from 0 to 256 [ 333.376786][ T5933] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 333.402916][ T5933] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 333.429049][ T5933] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 333.442454][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.465154][ T5933] usb 5-1: Product: syz [ 333.469750][ T5933] usb 5-1: Manufacturer: syz [ 333.474565][ T5933] usb 5-1: SerialNumber: syz [ 333.495981][ T7635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 333.511722][ T5933] usb 5-1: config 0 descriptor?? [ 333.518587][ T7626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.529426][ T7626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.552853][ T5933] smsc95xx v2.0.0 [ 333.572174][ T51] Bluetooth: hci6: command tx timeout [ 333.759470][ T7626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.766981][ T7626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.976984][ T5933] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 333.995224][ T5933] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.037807][ T44] rtl8150 6-1:1.0: couldn't reset the device [ 334.058209][ T44] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 334.123990][ T44] usb 6-1: USB disconnect, device number 6 [ 334.167640][ T7637] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 334.183081][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 334.626929][ T5933] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 334.685654][ T5933] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 334.745166][ T5933] usb 5-1: USB disconnect, device number 4 [ 334.826299][ T7654] loop5: detected capacity change from 0 to 256 [ 334.851803][ T7654] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 335.278975][ T7560] chnl_net:caif_netlink_parms(): no params data found [ 335.494591][ T7668] loop4: detected capacity change from 0 to 128 [ 335.599365][ T5933] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 335.642874][ T51] Bluetooth: hci6: command tx timeout [ 335.799881][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 335.843323][ T5933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.871930][ T5933] usb 6-1: config 0 has no interface number 0 [ 335.903195][ T5933] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 335.946644][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.981675][ T7679] binder: BINDER_SET_CONTEXT_MGR already set [ 335.987905][ T7679] binder: 7678:7679 ioctl 4018620d 200000000040 returned -16 [ 336.003828][ T7674] gretap0: entered promiscuous mode [ 336.017483][ T5933] usb 6-1: Product: syz [ 336.024601][ T5933] usb 6-1: Manufacturer: syz [ 336.042741][ T5933] usb 6-1: SerialNumber: syz [ 336.101034][ T5933] usb 6-1: config 0 descriptor?? [ 336.209768][ T5933] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 336.322104][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 336.345273][ T7677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 336.440325][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.446923][ T7677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 336.532735][ T7677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 336.582245][ T7677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 336.602774][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.614436][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.644942][ T7560] bridge_slave_0: entered allmulticast mode [ 336.686063][ T7560] bridge_slave_0: entered promiscuous mode [ 336.717228][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.739593][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.754766][ T7560] bridge_slave_1: entered allmulticast mode [ 336.765408][ T7560] bridge_slave_1: entered promiscuous mode [ 336.784899][ T7677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 336.848469][ T7677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 336.872812][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 336.915670][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 336.953840][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 337.070690][ T1005] bridge_slave_1: left allmulticast mode [ 337.076386][ T1005] bridge_slave_1: left promiscuous mode [ 337.088744][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.100166][ T1005] bridge_slave_0: left allmulticast mode [ 337.105853][ T1005] bridge_slave_0: left promiscuous mode [ 337.111900][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.285750][ T7677] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 337.306926][ T7677] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 337.565957][ T7677] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 337.809530][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 337.822294][ T7706] loop2: detected capacity change from 0 to 1024 [ 337.830266][ T5933] gspca_spca1528: reg_r err -71 [ 337.838977][ T5933] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 337.856568][ T5933] usb 6-1: USB disconnect, device number 7 [ 337.928004][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.952023][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.967346][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.983501][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.998667][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.009268][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.016872][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.019038][ T1005] bond0 (unregistering): Released all slaves [ 338.027245][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.043336][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 338.052679][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.066226][ T7707] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.076708][ T7707] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.077144][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.086554][ T24] usb 5-1: config 0 descriptor?? [ 338.109986][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.133064][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.150922][ T7706] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.253104][ T1005] hsr_slave_0: left promiscuous mode [ 338.265046][ T1005] hsr_slave_1: left promiscuous mode [ 338.290279][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.338279][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.359267][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 338.374707][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 338.389861][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 338.408915][ T24] usb 5-1: USB disconnect, device number 5 [ 338.439082][ T1005] veth0_vlan: left promiscuous mode [ 338.526855][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 338.572971][ T7711] loop2: detected capacity change from 0 to 128 [ 338.599306][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 338.727026][ T7711] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.793518][ T7711] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.825574][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.840072][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 338.919261][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.039797][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 339.072299][ T5874] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.212461][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.278342][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.290993][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.307080][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.333128][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 339.353782][ T24] usb 4-1: SerialNumber: syz [ 339.611333][ T24] usb 4-1: 0:2 : does not exist [ 339.660191][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 339.665072][ T24] usb 4-1: USB disconnect, device number 3 [ 339.750529][ T7726] loop2: detected capacity change from 0 to 4096 [ 339.819730][ T7726] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 339.843866][ T7480] udevd[7480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.859944][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 339.889442][ T5933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.907349][ T5933] usb 5-1: config 0 has no interface number 0 [ 339.918690][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 339.936508][ T5933] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 339.960097][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.970058][ T5933] usb 5-1: Product: syz [ 339.974602][ T5933] usb 5-1: Manufacturer: syz [ 339.991488][ T7734] netlink: 68 bytes leftover after parsing attributes in process `syz.5.370'. [ 340.011634][ T5933] usb 5-1: SerialNumber: syz [ 340.026664][ T7726] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 340.040867][ T5933] usb 5-1: config 0 descriptor?? [ 340.058294][ T5933] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 340.095269][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 340.439796][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 340.599533][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.679516][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 340.763379][ T7747] syz.2.375 uses obsolete (PF_INET,SOCK_PACKET) [ 340.868451][ T5933] gspca_spca1528: reg_w err -71 [ 340.899534][ T5933] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 340.927922][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 340.966783][ T5933] usb 5-1: USB disconnect, device number 6 [ 340.999432][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.401777][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 341.489809][ T7757] loop3: detected capacity change from 0 to 4096 [ 341.539327][ T7757] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 341.674688][ T7757] ntfs3(loop3): ino=1d, mi_enum_attr [ 341.708872][ T51] Bluetooth: hci5: Malformed Event: 0x02 [ 341.709475][ T7757] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 341.716715][ T7764] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 341.799373][ T7757] ntfs3(loop3): ino=1d, mi_enum_attr [ 341.840294][ T7757] ntfs3(loop3): ino=1d, "file1" mi_enum_attr [ 341.873535][ T7764] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 341.917037][ T7560] team0: Port device team_slave_0 added [ 341.971593][ T7560] team0: Port device team_slave_1 added [ 342.094617][ T7438] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.218485][ T7769] vlan0: entered promiscuous mode [ 342.263808][ T7438] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.320627][ T7438] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.351907][ T5935] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 342.435753][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.461360][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.487269][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.523867][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 342.545098][ T5935] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 342.551400][ T7776] binder: 7774:7776 ioctl c0306201 200000000240 returned -14 [ 342.580879][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.600233][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.619855][ T5935] usb 4-1: Product: syz [ 342.634248][ T5935] usb 4-1: Manufacturer: syz [ 342.651684][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.655458][ T5935] usb 4-1: SerialNumber: syz [ 342.667677][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.697903][ T5935] usb 4-1: config 0 descriptor?? [ 342.737362][ T5935] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 342.775274][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.777018][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 342.814745][ T7438] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.876369][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.913318][ T5935] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 342.941222][ T7771] dvb-usb: bulk message failed: -22 (3/0) [ 342.956770][ T5935] usb 4-1: media controller created [ 343.079408][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 343.104295][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.297410][ T5935] cxusb: set interface failed [ 343.308406][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 343.325554][ T7560] hsr_slave_0: entered promiscuous mode [ 343.346875][ T7560] hsr_slave_1: entered promiscuous mode [ 343.373836][ T7560] debugfs: 'hsr0' already exists in 'hsr' [ 343.404618][ T7560] Cannot create hsr debugfs directory [ 343.479269][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 343.692861][ T5935] DVB: Unable to find symbol mt352_attach() [ 343.698793][ T5935] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 343.868465][ T7804] loop3: detected capacity change from 0 to 256 [ 343.931253][ T7804] FAT-fs (loop3): bogus number of FAT sectors [ 343.937484][ T7804] FAT-fs (loop3): Can't find a valid FAT filesystem [ 344.019371][ T5935] rc_core: IR keymap rc-dvico-portable not found [ 344.056735][ T5935] Registered IR keymap rc-empty [ 344.096358][ T5935] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 344.173741][ T5935] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 344.316335][ T5935] dvb-usb: schedule remote query interval to 100 msecs. [ 344.341073][ T5935] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 344.418287][ T5935] usb 4-1: USB disconnect, device number 4 [ 344.745820][ T7826] random: crng reseeded on system resumption [ 344.811532][ T7824] loop3: detected capacity change from 0 to 256 [ 344.839751][ T7826] Unrecognized hibernate image header format! [ 344.845995][ T7826] PM: hibernation: Image mismatch: architecture specific data [ 344.872913][ T7824] vfat: Unknown parameter 'lIRp1u85'I# YC7+.}{oLUzD4G&C1ؾTP蕾*GVbϐv{J0C[v [ 344.872913][ T7824] 8Yi [ 344.872913][ T7824] uW+9f3 aL8cF@};3ת<;8aC(-G>' [ 344.971419][ T5935] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 345.009629][ T7830] loop4: detected capacity change from 0 to 64 [ 345.431493][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.653790][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.803520][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.810754][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.921836][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.929051][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.955992][ T7838] loop4: detected capacity change from 0 to 4096 [ 345.972454][ T7838] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 346.010157][ T24] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 346.139297][ T5988] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 346.169588][ T7838] ntfs3(loop4): ino=1a, mi_enum_attr [ 346.174973][ T7838] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 346.193222][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 346.230168][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.271625][ T7838] ntfs3(loop4): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 346.272530][ T24] usb 4-1: config 0 descriptor?? [ 346.321464][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 346.333846][ T5988] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 346.364562][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.418014][ T5988] usb 3-1: config 0 descriptor?? [ 346.473864][ T7560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.483124][ T5988] gspca_main: sunplus-2.14.0 probing 041e:400b [ 346.523712][ T7560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.621846][ T7560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.668423][ T7560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.036701][ T7868] loop5: detected capacity change from 0 to 512 [ 347.222174][ T7868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.305520][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.322284][ T7868] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.407116][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.448004][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.507480][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.514690][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.582593][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.589819][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.695419][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.706450][ T5988] gspca_sunplus: reg_w_riv err -71 [ 347.711927][ T5988] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 347.742866][ T5988] usb 3-1: USB disconnect, device number 3 [ 347.860447][ T7560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.936671][ T7881] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 347.956279][ T7881] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 348.036079][ T7881] evm: overlay not supported [ 348.591644][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 348.617844][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 348.667138][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 348.701253][ T7903] binder: 7901:7903 ioctl c0306201 200000000180 returned -14 [ 348.767943][ T24] usb 4-1: USB disconnect, device number 5 [ 348.915839][ T7560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.227668][ T7438] veth0_vlan: entered promiscuous mode [ 349.340127][ T7438] veth1_vlan: entered promiscuous mode [ 349.544419][ T7438] veth0_macvtap: entered promiscuous mode [ 349.576736][ T7438] veth1_macvtap: entered promiscuous mode [ 349.674686][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.720984][ T7924] syz_tun: entered allmulticast mode [ 349.803416][ T7926] dvmrp8: entered allmulticast mode [ 350.003034][ T7921] syz_tun: left allmulticast mode [ 350.027906][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.109235][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.156127][ T1142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.176388][ T1142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.383099][ T6043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.634799][ T7937] loop4: detected capacity change from 0 to 1024 [ 350.905742][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.909721][ T7560] veth0_vlan: entered promiscuous mode [ 350.953660][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.035791][ T7943] block nbd2: Attempted send on invalid socket [ 351.043490][ T7943] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.071701][ T7943] block nbd2: Attempted send on invalid socket [ 351.100386][ T7560] veth1_vlan: entered promiscuous mode [ 351.114029][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.116991][ T7943] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.129192][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.189785][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 351.240418][ T7943] block nbd2: Send control failed (result -107) [ 351.247120][ T7943] block nbd2: Request send failed, requeueing [ 351.275906][ T11] block nbd2: Dead connection, failed to find a fallback [ 351.283866][ T11] block nbd2: shutting down sockets [ 351.289725][ T11] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.318823][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 351.331986][ T7943] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.342466][ T7943] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.354013][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 351.364087][ T7943] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.374219][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 351.385695][ T7943] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.386137][ T7560] veth0_macvtap: entered promiscuous mode [ 351.395355][ T7943] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.447553][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 351.493548][ T7560] veth1_macvtap: entered promiscuous mode [ 351.509827][ T7943] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.534674][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 351.569268][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 351.617178][ T7943] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.667419][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 351.699803][ T7943] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 351.729428][ T7943] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 352.711995][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.739347][ T7961] loop5: detected capacity change from 0 to 512 [ 352.788928][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.851500][ T7961] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.436: bad orphan inode 15 [ 352.924592][ T7961] ext4_test_bit(bit=14, block=5) = 0 [ 352.956771][ T30] audit: type=1800 audit(1757927136.003:3): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.437" name="/" dev="9p" ino=1708457985 res=0 errno=0 [ 353.013591][ T7961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.091580][ T6043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.144614][ T6043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.244047][ T6043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.312964][ T6043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.364265][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.566818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.601296][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.675073][ T7982] loop5: detected capacity change from 0 to 1024 [ 353.882829][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.929368][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.087033][ T7986] loop4: detected capacity change from 0 to 4096 [ 354.210965][ T7971] comedi comedi0: reset error (fatal) [ 354.652476][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 355.974729][ T8014] loop6: detected capacity change from 0 to 512 [ 356.038252][ T8014] EXT4-fs (loop6): orphan cleanup on readonly fs [ 356.071166][ T8014] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 356.122956][ T8014] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 356.149766][ T5988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.183453][ T8014] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.454: attempt to clear invalid blocks 2 len 1 [ 356.210717][ T8018] netlink: 'syz.7.453': attribute type 4 has an invalid length. [ 356.251275][ T8014] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.454: invalid indirect mapped block 1819239214 (level 0) [ 356.307767][ T8014] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.454: invalid indirect mapped block 1819239214 (level 1) [ 356.338907][ T8014] EXT4-fs (loop6): 1 truncate cleaned up [ 356.351636][ T5988] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 356.355962][ T8014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.380722][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.431399][ T5988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 356.480367][ T5988] usb 3-1: config 0 has no interface number 0 [ 356.501931][ T5988] usb 3-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.565384][ T5988] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 356.595807][ T7560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.616230][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.649495][ T5988] usb 3-1: Product: syz [ 356.653809][ T5988] usb 3-1: Manufacturer: syz [ 356.680285][ T5988] usb 3-1: SerialNumber: syz [ 356.712852][ T5988] usb 3-1: config 0 descriptor?? [ 357.005668][ T8009] loop2: detected capacity change from 0 to 16 [ 357.047594][ T51] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 357.161039][ T5988] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 357.206781][ T5988] cyphidcom ttyUSB0: required endpoint is missing [ 357.267131][ T5988] usb 3-1: USB disconnect, device number 4 [ 357.366466][ T5988] cypress_m8 3-1:0.74: device disconnected [ 357.378402][ T8049] sctp: [Deprecated]: syz.5.462 (pid 8049) Use of int in max_burst socket option deprecated. [ 357.378402][ T8049] Use struct sctp_assoc_value instead [ 358.179099][ T8069] netlink: 64 bytes leftover after parsing attributes in process `syz.6.468'. [ 358.244650][ T8071] netlink: 202232 bytes leftover after parsing attributes in process `syz.4.470'. [ 358.260461][ T8071] netlink: zone id is out of range [ 358.307895][ T8075] loop2: detected capacity change from 0 to 1024 [ 358.317063][ T8075] ext4: Unknown parameter 'noacl' [ 358.829256][ T5989] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 358.885824][ T8082] loop5: detected capacity change from 0 to 1024 [ 359.029312][ T8082] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 359.085397][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 359.093797][ T8082] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 359.175899][ T8082] JBD2: no valid journal superblock found [ 359.191588][ T5989] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 359.209312][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.219527][ T8082] EXT4-fs (loop5): Could not load journal inode [ 359.226907][ T5989] usb 4-1: config 0 descriptor?? [ 359.253951][ T8078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.944133][ T5989] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 360.009606][ T5989] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 360.017224][ T5989] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 360.061843][ T8095] loop2: detected capacity change from 0 to 128 [ 360.082014][ T5989] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 360.107344][ T8095] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 360.119943][ T5989] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 360.138320][ T8095] hpfs: filesystem error: improperly stopped [ 360.211880][ T8095] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 360.236918][ T5989] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 360.244802][ T8095] hpfs: You really don't want any checks? You are crazy... [ 360.269672][ T8095] hpfs: hpfs_map_sector(): read error [ 360.295754][ T8095] hpfs: code page support is disabled [ 360.326028][ T8095] hpfs: hpfs_map_4sectors(): unaligned read [ 360.365447][ T8095] hpfs: hpfs_map_4sectors(): unaligned read [ 360.397438][ T8103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.404985][ T8103] IPv6: NLM_F_CREATE should be set when creating new route [ 360.421733][ T8095] hpfs: filesystem error: unable to find root dir [ 360.862297][ T24] usb 4-1: USB disconnect, device number 6 [ 361.052308][ T51] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 361.206121][ T8124] loop5: detected capacity change from 0 to 64 [ 361.279974][ T8124] MINIX-fs: bad superblock [ 361.464442][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 361.542751][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 361.677176][ T8141] vlan2: entered allmulticast mode [ 361.699891][ T8145] QAT: Invalid ioctl 21531 [ 361.731934][ T8141] team0: entered allmulticast mode [ 361.754398][ T8141] team_slave_0: entered allmulticast mode [ 361.817805][ T8141] team_slave_1: entered allmulticast mode [ 362.035836][ T8150] loop4: detected capacity change from 0 to 8 [ 362.083692][ T8150] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 362.482262][ T7480] udevd[7480]: incorrect cramfs checksum on /dev/loop4 [ 362.576360][ T8164] loop6: detected capacity change from 0 to 512 [ 363.443460][ T8169] loop2: detected capacity change from 0 to 2048 [ 363.453635][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.504'. [ 363.461187][ T8164] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 363.514029][ T8164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 363.655465][ T8164] EXT4-fs (loop6): orphan cleanup on readonly fs [ 363.714348][ T8169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.775124][ T8164] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.503: bad orphan inode 267 [ 363.899613][ T8164] EXT4-fs (loop6): Remounting filesystem read-only [ 363.958384][ T8164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 364.044230][ T8164] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.503: dx entry: limit 0 != root limit 125 [ 364.061688][ T8169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.505: bg 0: block 234: padding at end of block bitmap is not set [ 364.076313][ T8164] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.503: Corrupt directory, running e2fsck is recommended [ 364.087269][ T8164] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.503: dx entry: limit 0 != root limit 125 [ 364.107293][ T8164] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.503: Corrupt directory, running e2fsck is recommended [ 364.148207][ T8169] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 80 with error 28 [ 364.239885][ T5989] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.278001][ T8169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 364.278001][ T8169] [ 364.389928][ T8169] EXT4-fs (loop2): Total free blocks count 0 [ 364.411564][ T7560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 364.422855][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 364.438007][ T8169] EXT4-fs (loop2): Free/Dirty block details [ 364.439492][ T5989] usb 5-1: config 0 has no interfaces? [ 364.469001][ T5989] usb 5-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=e5.59 [ 364.500170][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.508198][ T5989] usb 5-1: Product: syz [ 364.509238][ T8169] EXT4-fs (loop2): free_blocks=0 [ 364.512535][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 364.519267][ T8169] EXT4-fs (loop2): dirty_blocks=96 [ 364.575201][ T5989] usb 5-1: Manufacturer: syz [ 364.589781][ T8169] EXT4-fs (loop2): Block reservation details [ 364.595794][ T8169] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 364.601936][ T5989] usb 5-1: SerialNumber: syz [ 364.633342][ T5989] usb 5-1: config 0 descriptor?? [ 364.669346][ T44] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 364.714300][ T8203] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.513'. [ 364.731580][ T24] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 364.746464][ T24] usb 8-1: config 0 has no interface number 0 [ 364.760018][ T24] usb 8-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 364.799558][ T24] usb 8-1: config 0 interface 128 has no altsetting 0 [ 364.826974][ T24] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 364.846400][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.847357][ T5989] usb 5-1: USB disconnect, device number 7 [ 364.882057][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.894011][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.924056][ T24] usb 8-1: Product: syz [ 364.928437][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 364.960420][ T24] usb 8-1: Manufacturer: syz [ 364.978779][ T24] usb 8-1: SerialNumber: syz [ 364.996007][ T44] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 365.010319][ T24] usb 8-1: config 0 descriptor?? [ 365.040387][ T44] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 365.054195][ T24] radio-si470x 8-1:0.128: could not find interrupt in endpoint [ 365.081153][ T44] usb 4-1: config 5 has no interface number 0 [ 365.087429][ T24] radio-si470x 8-1:0.128: probe with driver radio-si470x failed with error -5 [ 365.128278][ T44] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.142169][ T24] usbhid 8-1:0.128: couldn't find an input interrupt endpoint [ 365.155213][ T44] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.209238][ T44] usb 4-1: config 5 interface 246 has no altsetting 0 [ 365.256273][ T24] usb 8-1: USB disconnect, device number 2 [ 365.269763][ T44] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 365.309315][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.347955][ T44] usb 4-1: Product: syz [ 365.358076][ T44] usb 4-1: Manufacturer: syz [ 365.387753][ T44] usb 4-1: SerialNumber: syz [ 365.481258][ T8221] loop2: detected capacity change from 0 to 512 [ 365.529531][ T8221] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 365.578184][ T8221] UDF-fs: Scanning with blocksize 512 failed [ 365.610197][ T8221] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 365.630061][ T8221] UDF-fs: Scanning with blocksize 1024 failed [ 365.648239][ T8221] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 365.685353][ T8221] UDF-fs: Scanning with blocksize 2048 failed [ 365.719075][ T8221] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 365.745097][ T8227] overlayfs: statfs failed on './file0' [ 365.849612][ T44] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 366.002862][ T8221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.014225][ T13] usb 4-1: Failed to submit usb control message: -71 [ 366.609033][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 366.642358][ T44] usb 4-1: USB disconnect, device number 7 [ 366.651816][ T13] usb 4-1: unable to get target info from device [ 366.658175][ T13] usb 4-1: could not get target info (-71) [ 366.834365][ T13] usb 4-1: could not probe fw (-71) [ 367.319397][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 367.539349][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 367.555083][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.343146][ T8252] loop3: detected capacity change from 0 to 512 [ 368.372861][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 368.395727][ T8252] EXT4-fs: inline encryption not supported [ 368.406291][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.444683][ T9] usb 7-1: config 0 descriptor?? [ 368.450166][ T8252] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.604801][ T8252] EXT4-fs (loop3): Test dummy encryption mode enabled [ 368.665483][ T8252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 368.711597][ T8252] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.528: inode #13: comm syz.3.528: iget: illegal inode # [ 368.789085][ T8252] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.528: couldn't read orphan inode 13 (err -117) [ 368.831947][ T8252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 368.908385][ T8252] EXT4-fs (loop3): shut down requested (2) [ 368.950079][ T9] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 369.040778][ T1206] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 369.047161][ T8271] loop7: detected capacity change from 0 to 256 [ 369.118474][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.231279][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 369.303913][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.339382][ T9] usb 7-1: USB disconnect, device number 2 [ 369.376671][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.439219][ T1206] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 369.448306][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.560142][ T1206] usb 5-1: config 0 descriptor?? [ 370.187894][ T8288] netlink: 'syz.7.534': attribute type 10 has an invalid length. [ 370.694051][ T1206] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 370.711338][ T1206] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 370.718436][ T1206] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 370.756952][ T1206] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 370.774794][ T1206] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 370.802878][ T1206] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 370.896071][ T8288] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.935878][ T1206] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: ce. [ 371.220664][ T30] audit: type=1800 audit(1757927154.273:4): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.536" name="/" dev="9p" ino=1708457985 res=0 errno=0 [ 371.276899][ T1206] usb 5-1: USB disconnect, device number 8 [ 371.426500][ T8293] fido_id[8293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 374.149085][ T8316] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 374.226672][ T8316] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 376.209238][ T5989] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 377.024658][ T5989] usb 4-1: Using ep0 maxpacket: 16 [ 377.584734][ T5989] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.598132][ T5989] usb 4-1: config 0 has no interface number 0 [ 377.614563][ T5989] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 377.623733][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.632167][ T5989] usb 4-1: Product: syz [ 377.777333][ T5989] usb 4-1: Manufacturer: syz [ 377.785786][ T5989] usb 4-1: SerialNumber: syz [ 377.803836][ T5989] usb 4-1: config 0 descriptor?? [ 377.816506][ T5989] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 378.077014][ T8354] loop4: detected capacity change from 0 to 128 [ 378.198919][ T8354] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 378.211184][ T8354] hpfs: filesystem error: improperly stopped [ 378.217213][ T8354] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 378.225111][ T8354] hpfs: You really don't want any checks? You are crazy... [ 378.234902][ T8354] hpfs: hpfs_map_sector(): read error [ 378.240373][ T8354] hpfs: code page support is disabled [ 378.269366][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 378.275451][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 378.992523][ T8354] hpfs: filesystem error: unable to find root dir [ 379.009693][ T5989] gspca_spca1528: reg_w err -110 [ 379.120935][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 379.128435][ T8354] hpfs: hpfs_map_sector(): read error [ 379.168021][ T5989] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 379.188566][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 379.194836][ T8354] hpfs: hpfs_map_sector(): read error [ 379.202105][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 379.222359][ T8354] hpfs: hpfs_map_sector(): read error [ 379.245295][ T8354] hpfs: hpfs_map_4sectors(): unaligned read [ 379.271529][ T8354] hpfs: hpfs_map_sector(): read error [ 379.280007][ T5955] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 379.472214][ T5955] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 379.499209][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.516383][ T5955] usb 7-1: config 0 descriptor?? [ 381.658741][ T5955] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.709267][ T5955] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 381.769554][ T5955] asix 7-1:0.0: probe with driver asix failed with error -71 [ 381.819946][ T5935] usb 4-1: USB disconnect, device number 8 [ 381.919764][ T5955] usb 7-1: USB disconnect, device number 3 [ 383.109255][ T5955] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 383.320133][ T5955] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 383.369634][ T5955] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 383.471453][ T5955] usb 7-1: config 1 interface 0 has no altsetting 0 [ 383.527633][ T5955] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 384.345801][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.369537][ T5955] usb 7-1: Product: syz [ 384.373720][ T5955] usb 7-1: Manufacturer: syz [ 384.378318][ T5955] usb 7-1: SerialNumber: syz [ 384.401456][ T8384] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 384.476684][ T8384] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 385.142757][ T5955] rtl8150 7-1:1.0: couldn't reset the device [ 385.210500][ T5955] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 385.254436][ T8407] loop3: detected capacity change from 0 to 256 [ 385.272306][ T5955] usb 7-1: USB disconnect, device number 4 [ 386.313347][ T8407] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 386.794854][ T8417] loop7: detected capacity change from 0 to 128 [ 386.811114][ T51] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 386.848292][ T8417] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 386.871221][ T8417] hpfs: filesystem error: improperly stopped [ 386.877226][ T8417] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 386.932176][ T8417] hpfs: You really don't want any checks? You are crazy... [ 386.999682][ T8417] hpfs: hpfs_map_sector(): read error [ 387.013035][ T5933] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 387.019178][ T8417] hpfs: code page support is disabled [ 387.075554][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 387.125577][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 387.146895][ T8417] hpfs: filesystem error: unable to find root dir [ 387.223837][ T5933] usb 6-1: config 0 has an invalid interface number: 74 but max is 1 [ 387.279226][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.406211][ T5933] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 387.714414][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 388.128690][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.135754][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.169363][ T5933] usb 6-1: config 0 has no interface number 0 [ 388.175483][ T5933] usb 6-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.202482][ T8417] hpfs: hpfs_map_sector(): read error [ 388.209018][ T5933] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 388.259956][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.299881][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 388.327598][ T5933] usb 6-1: Product: syz [ 388.349455][ T8417] hpfs: hpfs_map_sector(): read error [ 388.359287][ T5933] usb 6-1: Manufacturer: syz [ 388.384561][ T5933] usb 6-1: SerialNumber: syz [ 388.412059][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 388.417984][ T8417] hpfs: hpfs_map_sector(): read error [ 388.443836][ T5933] usb 6-1: config 0 descriptor?? [ 388.461047][ T8417] hpfs: hpfs_map_4sectors(): unaligned read [ 388.470337][ T8417] hpfs: hpfs_map_sector(): read error [ 388.725404][ T8415] loop5: detected capacity change from 0 to 16 [ 389.040196][ T5933] cypress_m8 6-1:0.74: HID->COM RS232 Adapter converter detected [ 389.122798][ T5933] cyphidcom ttyUSB0: required endpoint is missing [ 389.150950][ T5933] usb 6-1: USB disconnect, device number 8 [ 389.212248][ T5933] cypress_m8 6-1:0.74: device disconnected [ 392.936994][ T8462] loop2: detected capacity change from 0 to 256 [ 392.997053][ T8462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 393.416687][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 393.491556][ T8450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.519680][ T8450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.526763][ T8450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.609555][ T8450] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 393.640712][ T8450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.719239][ T8450] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 394.999352][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 395.019312][ T5933] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 395.240217][ T5933] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 395.279419][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.295184][ T5933] usb 4-1: config 0 descriptor?? [ 395.569528][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.575709][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 395.639239][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 395.719688][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 395.725909][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.847721][ T8485] netlink: 202232 bytes leftover after parsing attributes in process `syz.7.589'. [ 395.858979][ T8485] netlink: zone id is out of range [ 397.389650][ T1206] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 398.151281][ T1206] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 398.169470][ T1206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.199526][ T1206] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 398.209243][ T1206] usb 5-1: config 0 has no interface number 0 [ 398.215811][ T1206] usb 5-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.232079][ T1206] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 398.242617][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.250789][ T1206] usb 5-1: Product: syz [ 398.266039][ T1206] usb 5-1: Manufacturer: syz [ 398.270844][ T1206] usb 5-1: SerialNumber: syz [ 398.290920][ T1206] usb 5-1: config 0 descriptor?? [ 398.373926][ T5933] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 398.412051][ T5933] asix 4-1:0.0: probe with driver asix failed with error -71 [ 398.488441][ T5933] usb 4-1: USB disconnect, device number 9 [ 398.517399][ T8490] loop4: detected capacity change from 0 to 16 [ 398.589058][ T1206] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 398.637542][ T1206] cyphidcom ttyUSB0: required endpoint is missing [ 398.704247][ T1206] usb 5-1: USB disconnect, device number 9 [ 398.749792][ T1206] cypress_m8 5-1:0.74: device disconnected [ 400.049228][ T1206] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 400.256882][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 400.281779][ T1206] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 400.314423][ T1206] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 400.343003][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.353188][ T8522] netlink: 'syz.7.603': attribute type 4 has an invalid length. [ 400.361226][ T5933] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 400.377774][ T1206] usb 6-1: Product: syz [ 400.389479][ T1206] usb 6-1: Manufacturer: syz [ 400.394201][ T1206] usb 6-1: SerialNumber: syz [ 400.531863][ T5933] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 400.554578][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.601198][ T5933] usb 5-1: config 0 descriptor?? [ 400.822727][ T118] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 400.878063][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 400.991339][ T118] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 401.000785][ T118] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.023695][ T118] usb 8-1: config 0 descriptor?? [ 401.229331][ T5989] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 401.409278][ T1206] usb 6-1: USB disconnect, device number 9 [ 401.420092][ T5989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.462048][ T5989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.487395][ T8542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 401.509058][ T8542] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 401.539380][ T5989] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.548522][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.845842][ T5989] usb 4-1: Product: syz [ 401.851156][ T5989] usb 4-1: Manufacturer: syz [ 401.855777][ T5989] usb 4-1: SerialNumber: syz [ 402.145189][ T5989] usb 4-1: 0:2 : does not exist [ 402.165620][ T5989] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 402.203175][ T5989] usb 4-1: USB disconnect, device number 10 [ 403.138816][ T7480] udevd[7480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.340663][ T1206] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 403.516977][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 403.540880][ T1206] usb 6-1: not running at top speed; connect to a high speed hub [ 403.557216][ T1206] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 403.567795][ T1206] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 403.587074][ T1206] usb 6-1: config 5 has no interface number 0 [ 403.593351][ T1206] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 403.603288][ T1206] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.616799][ T1206] usb 6-1: config 5 interface 246 has no altsetting 0 [ 403.656922][ T1206] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 403.681192][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.689955][ T1206] usb 6-1: Product: syz [ 403.694143][ T1206] usb 6-1: Manufacturer: syz [ 403.698762][ T1206] usb 6-1: SerialNumber: syz [ 403.734393][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 403.769732][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 403.820029][ T5933] asix 5-1:0.0: probe with driver asix failed with error -71 [ 403.834936][ T118] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 403.858935][ T5933] usb 5-1: USB disconnect, device number 10 [ 403.866097][ T118] asix 8-1:0.0: probe with driver asix failed with error -71 [ 403.922381][ T118] usb 8-1: USB disconnect, device number 3 [ 404.022307][ T1206] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 404.038447][ T6044] usb 6-1: Failed to submit usb control message: -71 [ 404.070688][ T1206] usb 6-1: USB disconnect, device number 10 [ 404.079570][ T6044] usb 6-1: unable to send the bmi data to the device: -71 [ 404.086709][ T6044] usb 6-1: unable to get target info from device [ 404.129707][ T6044] usb 6-1: could not get target info (-71) [ 404.135548][ T6044] usb 6-1: could not probe fw (-71) [ 404.364443][ T8570] loop2: detected capacity change from 0 to 256 [ 404.495698][ T8570] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 404.767593][ T8580] loop6: detected capacity change from 0 to 256 [ 404.879637][ T5989] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 405.006397][ T8586] loop2: detected capacity change from 0 to 128 [ 405.037215][ T8586] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 405.072592][ T5989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.108757][ T5989] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 405.157958][ T5989] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 405.182544][ T8586] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 94: i_size: 0 lbcount: 512 extent 31+512 [ 405.189671][ T5933] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 405.214000][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.238509][ T5989] usb 5-1: Product: syz [ 405.254186][ T8586] ------------[ cut here ]------------ [ 405.259844][ T8586] WARNING: CPU: 1 PID: 8586 at fs/udf/inode.c:2083 __udf_add_aext+0x63b/0x820 [ 405.268780][ T8586] Modules linked in: [ 405.273054][ T8586] CPU: 1 UID: 0 PID: 8586 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 405.282424][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.292587][ T8586] RIP: 0010:__udf_add_aext+0x63b/0x820 [ 405.298095][ T8586] Code: f0 4c 8b 74 24 20 48 89 c6 48 89 44 24 10 4c 89 f7 e8 19 46 7c fe 48 8b 44 24 10 49 39 c6 0f 84 f0 fb ff ff e8 56 4b 7c fe 90 <0f> 0b 90 e9 e2 fb ff ff e8 48 4b 7c fe 4c 8b 74 24 10 49 81 c6 b0 [ 405.319197][ T8586] RSP: 0018:ffffc9000bac7250 EFLAGS: 00010287 [ 405.326523][ T8586] RAX: 00000000000006a9 RBX: ffffc9000bac7630 RCX: ffffc9000bb2a000 [ 405.335086][ T8586] RDX: 0000000000080000 RSI: ffffffff833f513a RDI: 0000000000000006 [ 405.343379][ T8586] RBP: ffff888056aa07b8 R08: 0000000000000006 R09: 0000000000000010 [ 405.351416][ T8586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 405.359472][ T8586] R13: 0000000000000010 R14: 0000000000000010 R15: ffffc9000bac7638 [ 405.367457][ T8586] FS: 00007f8c0c3666c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 405.376479][ T8586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.383184][ T8586] CR2: 00007fa7f23056c0 CR3: 000000007ea0a000 CR4: 0000000000350ef0 [ 405.391251][ T8586] Call Trace: [ 405.394535][ T8586] [ 405.397490][ T8586] udf_add_aext+0x23a/0x2e0 [ 405.403255][ T8586] ? __pfx_udf_add_aext+0x10/0x10 [ 405.408336][ T8586] udf_do_extend_file+0x228/0x8b0 [ 405.411625][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.413464][ T8586] ? __pfx_udf_do_extend_file+0x10/0x10 [ 405.431444][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.437111][ T8586] ? udf_next_aext+0x33b/0x4c0 [ 405.441990][ T8586] inode_getblk+0x114d/0x40e0 [ 405.446724][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.452463][ T8586] ? __pfx_inode_getblk+0x10/0x10 [ 405.457528][ T8586] ? __entry_text_end+0x1020b5/0x1020b9 [ 405.458921][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.463149][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.463200][ T8586] ? __entry_text_end+0x1020b5/0x1020b9 [ 405.484138][ T8586] ? __bfs+0x148/0x290 [ 405.488249][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.493981][ T8586] ? check_irq_usage+0xcb/0x920 [ 405.498899][ T8586] ? check_path.constprop.0+0x24/0x50 [ 405.504387][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.510118][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.515795][ T8586] udf_map_block+0x2dd/0x5b0 [ 405.517674][ T5933] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 405.520461][ T8586] ? __pfx_udf_map_block+0x10/0x10 [ 405.520532][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.541966][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.547636][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.553350][ T8586] ? do_raw_spin_lock+0x12c/0x2b0 [ 405.558407][ T8586] __udf_get_block+0x98/0x330 [ 405.563524][ T8586] ? __pfx___udf_get_block+0x10/0x10 [ 405.568859][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.574567][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.579235][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.580269][ T8586] ? _raw_spin_unlock+0x28/0x50 [ 405.593117][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.598784][ T8586] ? create_empty_buffers+0x3a5/0x480 [ 405.604258][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 405.609460][ T8586] __block_write_begin_int+0x4f4/0x16d0 [ 405.612899][ T5933] usb 6-1: config 0 descriptor?? [ 405.615066][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 405.626043][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.632510][ T8586] ? __pfx___block_write_begin_int+0x10/0x10 [ 405.638537][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.644317][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 405.649554][ T8586] block_write_begin+0x9a/0x1d0 [ 405.654455][ T8586] udf_write_begin+0x1e5/0x2a0 [ 405.659297][ T8586] generic_perform_write+0x3c5/0x900 [ 405.664645][ T8586] ? __pfx_generic_perform_write+0x10/0x10 [ 405.670574][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.676252][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.682057][ T8586] ? generic_update_time+0xcf/0xf0 [ 405.687193][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.692923][ T8586] ? mnt_put_write_access_file+0x45/0xf0 [ 405.698615][ T8586] __generic_file_write_iter+0x1f7/0x240 [ 405.704346][ T8586] udf_file_write_iter+0x233/0x7b0 [ 405.709566][ T8586] vfs_write+0x7d3/0x11d0 [ 405.713952][ T8586] ? __pfx_udf_file_write_iter+0x10/0x10 [ 405.719664][ T8586] ? __pfx_vfs_write+0x10/0x10 [ 405.724467][ T8586] ? find_held_lock+0x2b/0x80 [ 405.730141][ T8586] __x64_sys_pwrite64+0x1eb/0x250 [ 405.735214][ T8586] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 405.742048][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.747725][ T8586] do_syscall_64+0xcd/0x4e0 [ 405.752289][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.758207][ T8586] RIP: 0033:0x7f8c0b58eba9 [ 405.762708][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.782376][ T8586] RSP: 002b:00007f8c0c366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 405.790973][ T8586] RAX: ffffffffffffffda RBX: 00007f8c0b7d5fa0 RCX: 00007f8c0b58eba9 [ 405.798971][ T8586] RDX: 000000000000ff10 RSI: 0000200000000140 RDI: 0000000000000004 [ 405.807024][ T8586] RBP: 00007f8c0b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 405.815073][ T8586] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000000 [ 405.823120][ T8586] R13: 00007f8c0b7d6038 R14: 00007f8c0b7d5fa0 R15: 00007fff7beb91c8 [ 405.832090][ T8586] [ 405.835123][ T8586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.842407][ T8586] CPU: 1 UID: 0 PID: 8586 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 405.851614][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.861669][ T8586] Call Trace: [ 405.864945][ T8586] [ 405.867872][ T8586] dump_stack_lvl+0x3d/0x1f0 [ 405.872497][ T8586] vpanic+0x6e8/0x7a0 [ 405.876508][ T8586] ? __pfx_vpanic+0x10/0x10 [ 405.881040][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.886697][ T8586] ? __udf_add_aext+0x63b/0x820 [ 405.891571][ T8586] panic+0xca/0xd0 [ 405.895318][ T8586] ? __pfx_panic+0x10/0x10 [ 405.899783][ T8586] check_panic_on_warn+0xab/0xb0 [ 405.904729][ T8586] __warn+0xf6/0x3c0 [ 405.908629][ T8586] ? __udf_add_aext+0x63b/0x820 [ 405.913506][ T8586] report_bug+0x3c3/0x580 [ 405.917867][ T8586] ? __udf_add_aext+0x63b/0x820 [ 405.922742][ T8586] handle_bug+0x184/0x210 [ 405.927079][ T8586] exc_invalid_op+0x17/0x50 [ 405.931592][ T8586] asm_exc_invalid_op+0x1a/0x20 [ 405.936455][ T8586] RIP: 0010:__udf_add_aext+0x63b/0x820 [ 405.941942][ T8586] Code: f0 4c 8b 74 24 20 48 89 c6 48 89 44 24 10 4c 89 f7 e8 19 46 7c fe 48 8b 44 24 10 49 39 c6 0f 84 f0 fb ff ff e8 56 4b 7c fe 90 <0f> 0b 90 e9 e2 fb ff ff e8 48 4b 7c fe 4c 8b 74 24 10 49 81 c6 b0 [ 405.961560][ T8586] RSP: 0018:ffffc9000bac7250 EFLAGS: 00010287 [ 405.967636][ T8586] RAX: 00000000000006a9 RBX: ffffc9000bac7630 RCX: ffffc9000bb2a000 [ 405.975612][ T8586] RDX: 0000000000080000 RSI: ffffffff833f513a RDI: 0000000000000006 [ 405.983585][ T8586] RBP: ffff888056aa07b8 R08: 0000000000000006 R09: 0000000000000010 [ 405.991560][ T8586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 405.999530][ T8586] R13: 0000000000000010 R14: 0000000000000010 R15: ffffc9000bac7638 [ 406.007517][ T8586] ? __udf_add_aext+0x63a/0x820 [ 406.012412][ T8586] udf_add_aext+0x23a/0x2e0 [ 406.016941][ T8586] ? __pfx_udf_add_aext+0x10/0x10 [ 406.022001][ T8586] udf_do_extend_file+0x228/0x8b0 [ 406.027058][ T8586] ? __pfx_udf_do_extend_file+0x10/0x10 [ 406.032636][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.038285][ T8586] ? udf_next_aext+0x33b/0x4c0 [ 406.043085][ T8586] inode_getblk+0x114d/0x40e0 [ 406.047804][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.053456][ T8586] ? __pfx_inode_getblk+0x10/0x10 [ 406.058500][ T8586] ? __entry_text_end+0x1020b5/0x1020b9 [ 406.064058][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.069706][ T8586] ? __entry_text_end+0x1020b5/0x1020b9 [ 406.075264][ T8586] ? __bfs+0x148/0x290 [ 406.079373][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.085021][ T8586] ? check_irq_usage+0xcb/0x920 [ 406.089918][ T8586] ? check_path.constprop.0+0x24/0x50 [ 406.095328][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.101006][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.106669][ T8586] udf_map_block+0x2dd/0x5b0 [ 406.111292][ T8586] ? __pfx_udf_map_block+0x10/0x10 [ 406.116436][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.122088][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.127736][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.133380][ T8586] ? do_raw_spin_lock+0x12c/0x2b0 [ 406.138425][ T8586] __udf_get_block+0x98/0x330 [ 406.143136][ T8586] ? __pfx___udf_get_block+0x10/0x10 [ 406.148444][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.154094][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.159743][ T8586] ? _raw_spin_unlock+0x28/0x50 [ 406.164618][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.170262][ T8586] ? create_empty_buffers+0x3a5/0x480 [ 406.175664][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 406.180805][ T8586] __block_write_begin_int+0x4f4/0x16d0 [ 406.186387][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 406.191526][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.197177][ T8586] ? __pfx___block_write_begin_int+0x10/0x10 [ 406.203183][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.208840][ T8586] ? __pfx_udf_get_block+0x10/0x10 [ 406.213985][ T8586] block_write_begin+0x9a/0x1d0 [ 406.218865][ T8586] udf_write_begin+0x1e5/0x2a0 [ 406.223658][ T8586] generic_perform_write+0x3c5/0x900 [ 406.228979][ T8586] ? __pfx_generic_perform_write+0x10/0x10 [ 406.234803][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.240469][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.246124][ T8586] ? generic_update_time+0xcf/0xf0 [ 406.251245][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.256894][ T8586] ? mnt_put_write_access_file+0x45/0xf0 [ 406.262563][ T8586] __generic_file_write_iter+0x1f7/0x240 [ 406.268214][ T8586] udf_file_write_iter+0x233/0x7b0 [ 406.273349][ T8586] vfs_write+0x7d3/0x11d0 [ 406.277708][ T8586] ? __pfx_udf_file_write_iter+0x10/0x10 [ 406.283363][ T8586] ? __pfx_vfs_write+0x10/0x10 [ 406.288151][ T8586] ? find_held_lock+0x2b/0x80 [ 406.292878][ T8586] __x64_sys_pwrite64+0x1eb/0x250 [ 406.297939][ T8586] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 406.303604][ T8586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.309259][ T8586] do_syscall_64+0xcd/0x4e0 [ 406.313773][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.319680][ T8586] RIP: 0033:0x7f8c0b58eba9 [ 406.324099][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.343712][ T8586] RSP: 002b:00007f8c0c366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 406.352133][ T8586] RAX: ffffffffffffffda RBX: 00007f8c0b7d5fa0 RCX: 00007f8c0b58eba9 [ 406.360111][ T8586] RDX: 000000000000ff10 RSI: 0000200000000140 RDI: 0000000000000004 [ 406.368083][ T8586] RBP: 00007f8c0b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.376052][ T8586] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000000 [ 406.384027][ T8586] R13: 00007f8c0b7d6038 R14: 00007f8c0b7d5fa0 R15: 00007fff7beb91c8 [ 406.392023][ T8586] [ 406.395249][ T8586] Kernel Offset: disabled [ 406.399575][ T8586] Rebooting in 86400 seconds..