last executing test programs: 1m31.097076236s ago: executing program 4 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200)=0x9, 0x4) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x32}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m30.729020159s ago: executing program 4 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m30.070110864s ago: executing program 4 (id=12): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1m29.316948526s ago: executing program 4 (id=16): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000000040)={[0x9]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1m13.610708177s ago: executing program 2 (id=66): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m11.911157799s ago: executing program 2 (id=71): syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x129000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 1m10.85547437s ago: executing program 2 (id=74): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) splice(r4, 0x0, r1, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0xfffffe3e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m9.493801716s ago: executing program 2 (id=79): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 1m4.914895485s ago: executing program 2 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x2840) 1m3.081084021s ago: executing program 2 (id=94): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 1m1.848002488s ago: executing program 32 (id=94): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 41.828701823s ago: executing program 4 (id=16): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000000040)={[0x9]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 19.829282914s ago: executing program 6 (id=199): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000280)={[{@unhide}, {@utf8}, {@map_acorn}, {@map_normal}, {@showassoc}, {@hide}, {@session={'session', 0x3d, 0xe}}, {@nocompress}, {@utf8}, {@mode={'mode', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}, {}, {@mode={'mode', 0x3d, 0x100086}}], [{@uid_eq}], 0x2c}, 0x1, 0x9dd, &(0x7f00000023c0)="$eJzs3c1vHdXdB/Dv+CXxY6IQIA9PHgTkJjRgIHWunRIasWliXyemfqlspyKqKkJJUkWxSgWtBKiLIFVdFbWLqot2UZVlV0hsYFNl1/4FXVSq+BdQV1EXdTVzr2M79vV1XL8RPh9rfOflN+f8jmc8Rx7fOyd8mS0sLFTTJpcv/Wknk2XvOT/6+Ucff1hOH9zKvnTnpeLTpC9JLelJciTpHRmdmZ7sUNDN5EqS20mRZH+arxtyJcWvcmBp+XaK35f1Vi5tsmFsyAJfabt9/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF5UjIzW60NFJsanLr1Wa68aArzdxq6l8j6rRv0uPutYb1KUU/r6Fof6PnJ4afPj5bfjebK59GQ1IHn68v5Djx965bGersX910n4fvy7NRjyfe/4znvv33xjfv7a21uUyJfNhcbU+Oz0+OS5C43a+Ox07eyZM/VTF8dma2PjE43Zy7NzjcnayEzj3Nz0TG1g5Pna0Nmzp2uNwcvTl6YujA5ONBZXvvz14Xr9TO3Vwe80zs3MTk+denVwduTi+MTE+NSFKma4Xv8gSf3l8kT89vhcba5xbrJWu35j/trpFRmtcUqUQUOdWlIGDXcKGq4PDw8NDQ8PnXnp7Esv1+s9Syu6U62o3yOrdrl70uZAtur8Zff9rmujkVt8BYfN62r1/5nIeKZyKa+ltubXSEYzk+lMttnestj/nzjVWLfe5f3/Yi9/ZGnzE6n6/6ebS0+36//b5LJzX+/kvbyfm3kj85nPtby9Yuv+TZS4sLD7rdr414U0MpXxzGY645nMuWpNrbWmlrM5kzOp5/VczFhmU8tYxjORRmZzObOZS6M6o0Yyk0bOZa6nPNC1DGQkz6eWoZzN2ZxOLY0M5nKmcylTuZDRnKtKuZ4b1c/99Do53g0a2kjQ8DpB6/T/rRX30f/zFbUNV3HYnIVW/7+vc+jAyE4kBAAAAGy5//9rDh5+9C//SHrzVHWPHQAAAHjQVG/Xe7J86S3nnkoxNj7RqO92WgAAAMAWKqrP2BVJ+nO0Obf4SSg3AQAAAOABUf3//+nypb+cO5rC3/8AAADwoOn8jP2OEcXJ1HKr3FS72oy82opoPee3f2x8ojE4Mj3xylCerZ4yUH3SYFVp3TmUVB8/eCHHmlHH+puv/StL7CujhgZfGUpfjrcaMvBM+fLMwBqRw2XkC3muGfncYmRfVkWeLiMB4EF3fJ3+eKP9/ws52Yw4+UT1+PaeJ9bog+t6VgDYKzqPsdMxovjG4vA/bf7+7871o823FAzmzbyV+VzNyerTBtU7Dlql5naRpVL7l70N4WSHuwH9y0Z4Obl4P+DogTXvB/QvG+jl5Ko7Aitj/7BseJm1FFt+NABgZxxf1Q+v0/8vLDTnVt3/X//v/35vKQSAPeXuCPbbOHNvnb2701QAoKV9L72O7m1MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4A2/n8/64k2zuywH8xcyvJHkjDzPbO9O3ICBfvfX/fHj7VNzez21cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdkKRdK+1vivZn/TUk5za+ay2z63dTmCXFXdyJ+/m4G7nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADwoGk9/78rzdeHmqvS05WcSHIlyfd2O8c1/XFzu93Z6jy+ZJY9/7885lko0tM87Cl6R0ZnpifLw5/95fbPP/r4w3LaTD1lAWUNKwaXaNXQfq9Hqr36R6+9c/Mnb/24Nnq+SvL83NjE6OSFmW8tBT5efJLU0pwWLeb7s6J1Fq9s+SdlSzvXW9YyVtU7urre/1tr77v1nvjzr9u3bclSGjfmrw2XNc01Xpv76Y9uvLss6NEcS54ZSAZW1vTDcmpT07H0rldv8UXxi+Jgfpsr1fEv0ygWivIQPVy1/3+u35i/NvjmW/NX2+R0KEeTXE36Np7T0dVHYlF11nX1lrXWq6Dy2+EO5a3roe6DCwvNEofatOGR6pTpv6821Nq3odLh595q4+k2GT2WZ+/7SD/bocaWfy00NZeKL4q/Fxfzt/x82fgfXeXxP5GN/HaWMVXksjOlfZtPLLV8ePmG1++NbPtbyTb4ZX6Qb949/l3Lrv+tY7Uz16Oyxu/ur66A2/Z7UTR7oZZq/vA9PVLr6tMuy9ZP5nAzqk2e/5sXV+/XIc8XO1xRtuj3f6Xii30pBvLP3DL+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPcVSfda67uSE0kOJXm4XK4lC1tRX1d/sRXFbNC+VWtu7WDte0fX3bniTu7k3Rzc1XQAAAAAAAAA2DLnRz//6OMPy6n6f3x3vlZ8mvQ1/9Pfk+RQ8ZvekdGZ6ckOBfUmV5LcLuf77i+Hcr8cWFq+XS4duf+2AAAb858AAAD//wsJdJc=") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x82, 0x0, 0x27f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x200058e0, &(0x7f0000000040)={0x0, 0x3b33, 0x84ff, 0x800001, 0x20f6}, 0x0, 0xfffffffffffffffc) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(0x0, 0xecf86c37d53049cc) 15.982654706s ago: executing program 1 (id=206): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 15.863016173s ago: executing program 6 (id=208): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@lastblock={'lastblock', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 14.13108223s ago: executing program 6 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102376, 0x18fe8) mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.945546782s ago: executing program 4 (id=16): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000000040)={[0x9]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 10.778048653s ago: executing program 6 (id=215): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.774088751s ago: executing program 5 (id=217): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000740000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x20, &(0x7f0000000200)=0x0) clock_adjtime(0x0, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0xffc99a3b00000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x1, 0x0, 0x404042bbe) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 10.752953989s ago: executing program 1 (id=218): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000000)='./control\x00') 9.479836005s ago: executing program 3 (id=220): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x9) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 9.357066402s ago: executing program 1 (id=221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0x1}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 9.17343252s ago: executing program 5 (id=222): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() syz_pidfd_open(0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffeff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 9.155264052s ago: executing program 3 (id=223): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) unshare(0x22020600) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8.078692912s ago: executing program 5 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 6.808647552s ago: executing program 0 (id=226): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x168, 0x10, 0x110, 0xb, 0x2e0, 0x250, 0x250, 0x2e0, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0xa8, 0x110, 0x0, {0x0, 0x28e}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 6.808423129s ago: executing program 1 (id=227): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185042, 0x120) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="e20604000000"], 0x0, 0x0, 0x0, 0x0}) 5.638706949s ago: executing program 6 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000300)="$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") 5.635661785s ago: executing program 5 (id=240): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$random(0xffffff9c, 0x0, 0x123500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x64}}, 0x0) 5.587854494s ago: executing program 0 (id=229): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x80000) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 4.218210097s ago: executing program 3 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x0, {0x0, 0xf0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0x1}], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 4.16370894s ago: executing program 0 (id=231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.706194127s ago: executing program 3 (id=232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x1f9, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x48, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) 2.704417059s ago: executing program 0 (id=245): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@lastblock={'lastblock', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.703608482s ago: executing program 6 (id=233): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0xb5}}}}}]}}]}}, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) 2.540780755s ago: executing program 5 (id=234): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.534573375s ago: executing program 0 (id=235): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 1.429614369s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) 1.363550354s ago: executing program 3 (id=237): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r5, 0x0, 0x0, 0x4) read(0xffffffffffffffff, 0x0, 0x0) 1.283887246s ago: executing program 5 (id=238): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r1, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) dup(0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) 198.894691ms ago: executing program 0 (id=239): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 72.122985ms ago: executing program 1 (id=241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=242): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 101.120792][ T5822] cgroup: Unknown subsys name 'net' [ 101.290165][ T5822] cgroup: Unknown subsys name 'cpuset' [ 101.300272][ T5822] cgroup: Unknown subsys name 'rlimit' [ 101.525767][ T969] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 102.989294][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.056388][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.078603][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.085201][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.094385][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.094938][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.109219][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.109964][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.125796][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.126041][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.133341][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.141316][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.146959][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.161525][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.169189][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.177228][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.184578][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.192841][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.199997][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.200000][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.202214][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.209259][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.214932][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.221672][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.230478][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.235984][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.243338][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.263332][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.272620][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.311318][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.325054][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.063810][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 107.150926][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 107.397213][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 107.562228][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.575303][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.582914][ T5841] bridge_slave_0: entered allmulticast mode [ 107.595909][ T5841] bridge_slave_0: entered promiscuous mode [ 107.629882][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 107.652418][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.659787][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.669660][ T5841] bridge_slave_1: entered allmulticast mode [ 107.678041][ T5841] bridge_slave_1: entered promiscuous mode [ 107.797945][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 107.810545][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.817776][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.826363][ T5850] bridge_slave_0: entered allmulticast mode [ 107.834379][ T5850] bridge_slave_0: entered promiscuous mode [ 107.842092][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 107.915137][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.924993][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.932144][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.940023][ T5850] bridge_slave_1: entered allmulticast mode [ 107.948179][ T5850] bridge_slave_1: entered promiscuous mode [ 108.035576][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.164625][ T5846] Bluetooth: hci0: command tx timeout [ 108.228846][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.236473][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.244591][ T5835] bridge_slave_0: entered allmulticast mode [ 108.252489][ T5835] bridge_slave_0: entered promiscuous mode [ 108.267590][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.274836][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.282140][ T5834] bridge_slave_0: entered allmulticast mode [ 108.291884][ T5834] bridge_slave_0: entered promiscuous mode [ 108.320277][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.334576][ T5846] Bluetooth: hci5: command tx timeout [ 108.339426][ T5852] Bluetooth: hci1: command tx timeout [ 108.345597][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.355168][ T5839] Bluetooth: hci4: command tx timeout [ 108.368777][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.376458][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.383998][ T5835] bridge_slave_1: entered allmulticast mode [ 108.391970][ T5835] bridge_slave_1: entered promiscuous mode [ 108.403641][ T5839] Bluetooth: hci3: command tx timeout [ 108.403700][ T5852] Bluetooth: hci2: command tx timeout [ 108.429461][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.436698][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.444309][ T5834] bridge_slave_1: entered allmulticast mode [ 108.451925][ T5834] bridge_slave_1: entered promiscuous mode [ 108.465297][ T5841] team0: Port device team_slave_0 added [ 108.574182][ T5841] team0: Port device team_slave_1 added [ 108.596789][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.604607][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.611809][ T5838] bridge_slave_0: entered allmulticast mode [ 108.620405][ T5838] bridge_slave_0: entered promiscuous mode [ 108.632916][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.646684][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.726918][ T5850] team0: Port device team_slave_0 added [ 108.733348][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.740696][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.748143][ T5838] bridge_slave_1: entered allmulticast mode [ 108.757455][ T5838] bridge_slave_1: entered promiscuous mode [ 108.799582][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.807171][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.814688][ T5836] bridge_slave_0: entered allmulticast mode [ 108.822501][ T5836] bridge_slave_0: entered promiscuous mode [ 108.834720][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.844680][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.851640][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.877764][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.894436][ T5850] team0: Port device team_slave_1 added [ 108.933316][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.941781][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.949411][ T5836] bridge_slave_1: entered allmulticast mode [ 108.957621][ T5836] bridge_slave_1: entered promiscuous mode [ 108.967727][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.978079][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.985102][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.011147][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.044316][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.058836][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.071386][ T5835] team0: Port device team_slave_0 added [ 109.081242][ T5835] team0: Port device team_slave_1 added [ 109.231241][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.264133][ T5834] team0: Port device team_slave_0 added [ 109.274084][ T5834] team0: Port device team_slave_1 added [ 109.280992][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.288520][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.314653][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.327676][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.334960][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.361332][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.377055][ T5838] team0: Port device team_slave_0 added [ 109.403324][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.477041][ T5838] team0: Port device team_slave_1 added [ 109.491983][ T5841] hsr_slave_0: entered promiscuous mode [ 109.499449][ T5841] hsr_slave_1: entered promiscuous mode [ 109.508090][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.515141][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.541308][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.588840][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.596151][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.622290][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.671042][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.678795][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.704776][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.753155][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.760624][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.787163][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.815744][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.822715][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.849254][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.863704][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.870675][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.897110][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.921003][ T5836] team0: Port device team_slave_0 added [ 109.976081][ T5836] team0: Port device team_slave_1 added [ 109.990026][ T5850] hsr_slave_0: entered promiscuous mode [ 109.996756][ T5850] hsr_slave_1: entered promiscuous mode [ 110.003063][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.011295][ T5850] Cannot create hsr debugfs directory [ 110.079722][ T5834] hsr_slave_0: entered promiscuous mode [ 110.086706][ T5834] hsr_slave_1: entered promiscuous mode [ 110.092954][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.100712][ T5834] Cannot create hsr debugfs directory [ 110.142878][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.149909][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.176447][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.243748][ T5852] Bluetooth: hci0: command tx timeout [ 110.280129][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.287268][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.313460][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.358440][ T5838] hsr_slave_0: entered promiscuous mode [ 110.365687][ T5838] hsr_slave_1: entered promiscuous mode [ 110.371889][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.379625][ T5838] Cannot create hsr debugfs directory [ 110.404259][ T5852] Bluetooth: hci1: command tx timeout [ 110.409693][ T5852] Bluetooth: hci4: command tx timeout [ 110.410608][ T5839] Bluetooth: hci5: command tx timeout [ 110.420818][ T5835] hsr_slave_0: entered promiscuous mode [ 110.427837][ T5835] hsr_slave_1: entered promiscuous mode [ 110.435263][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.442828][ T5835] Cannot create hsr debugfs directory [ 110.483625][ T5839] Bluetooth: hci3: command tx timeout [ 110.489099][ T5846] Bluetooth: hci2: command tx timeout [ 110.642925][ T5836] hsr_slave_0: entered promiscuous mode [ 110.650194][ T5836] hsr_slave_1: entered promiscuous mode [ 110.657193][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.665138][ T5836] Cannot create hsr debugfs directory [ 111.296962][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.327945][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.347046][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.371408][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.440906][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.456641][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.472722][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.490594][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.610728][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.626064][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.639181][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.682333][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.762558][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.802019][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.836313][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.877176][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.975476][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.987970][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.015313][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.027587][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.117391][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.187702][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.229891][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.238999][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.254333][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.266340][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.316272][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.324517][ T5839] Bluetooth: hci0: command tx timeout [ 112.376562][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.392705][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.400089][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.433404][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.440661][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.472250][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.479465][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.490477][ T5839] Bluetooth: hci5: command tx timeout [ 112.496795][ T5846] Bluetooth: hci4: command tx timeout [ 112.496822][ T5852] Bluetooth: hci1: command tx timeout [ 112.565243][ T5852] Bluetooth: hci3: command tx timeout [ 112.565547][ T5839] Bluetooth: hci2: command tx timeout [ 112.578409][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.590679][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.597897][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.699011][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.759750][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.771856][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.794147][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.821004][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.828205][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.839513][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.846852][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.870963][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.906579][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.913848][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.924962][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.932492][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.982707][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.057164][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.064454][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.111401][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.118674][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.297178][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.324742][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.377643][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.450733][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.626298][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.719853][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.752769][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.760021][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.810660][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.817968][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.889930][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.022317][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.241946][ T5850] veth0_vlan: entered promiscuous mode [ 114.282341][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.309647][ T5850] veth1_vlan: entered promiscuous mode [ 114.330774][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.408555][ T5839] Bluetooth: hci0: command tx timeout [ 114.521313][ T5835] veth0_vlan: entered promiscuous mode [ 114.564288][ T5839] Bluetooth: hci1: command tx timeout [ 114.565377][ T5852] Bluetooth: hci5: command tx timeout [ 114.569751][ T5839] Bluetooth: hci4: command tx timeout [ 114.644934][ T5839] Bluetooth: hci3: command tx timeout [ 114.650405][ T5839] Bluetooth: hci2: command tx timeout [ 114.681476][ T5841] veth0_vlan: entered promiscuous mode [ 114.750497][ T5850] veth0_macvtap: entered promiscuous mode [ 114.794568][ T5835] veth1_vlan: entered promiscuous mode [ 114.809552][ T5841] veth1_vlan: entered promiscuous mode [ 114.837209][ T5850] veth1_macvtap: entered promiscuous mode [ 114.902689][ T5836] veth0_vlan: entered promiscuous mode [ 114.967485][ T5836] veth1_vlan: entered promiscuous mode [ 114.981890][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.996366][ T5835] veth0_macvtap: entered promiscuous mode [ 115.031724][ T5835] veth1_macvtap: entered promiscuous mode [ 115.060236][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.072589][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.082099][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.091367][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.100337][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.125601][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.150603][ T5841] veth0_macvtap: entered promiscuous mode [ 115.178136][ T5841] veth1_macvtap: entered promiscuous mode [ 115.185662][ T5834] veth0_vlan: entered promiscuous mode [ 115.241561][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.252500][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.269831][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.297478][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.309206][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.319698][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.333242][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.345695][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.365383][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.380337][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.392175][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.402067][ T5834] veth1_vlan: entered promiscuous mode [ 115.414904][ T5836] veth0_macvtap: entered promiscuous mode [ 115.445247][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.457445][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.468758][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.483183][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.495665][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.510886][ T5836] veth1_macvtap: entered promiscuous mode [ 115.521193][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.530509][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.541485][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.550471][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.619027][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.632397][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.641533][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.650332][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.668498][ T5838] veth0_vlan: entered promiscuous mode [ 115.742748][ T5838] veth1_vlan: entered promiscuous mode [ 115.784068][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.795087][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.822302][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.842241][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.854798][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.865643][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.875567][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.886131][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.898021][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.936036][ T5834] veth0_macvtap: entered promiscuous mode [ 115.951301][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.961967][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.975080][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.986716][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.998883][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.009784][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.022596][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.059105][ T5834] veth1_macvtap: entered promiscuous mode [ 116.070816][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.080764][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.091078][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.100251][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.125145][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.133795][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.239751][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.252341][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.262443][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.274446][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.284357][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.294902][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.304848][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.315365][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.328142][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.347841][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.363355][ T5838] veth0_macvtap: entered promiscuous mode [ 116.392686][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.394630][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.401148][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.419254][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429193][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.439839][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.449758][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.460302][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.470338][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.481249][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.495228][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.522776][ T5838] veth1_macvtap: entered promiscuous mode [ 116.585697][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.615379][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.629655][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.650784][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.716072][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.729228][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.755697][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.766973][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.777533][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.790441][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.794878][ T30] audit: type=1326 audit(1744838448.438:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fed8e169 code=0x0 [ 116.800490][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.833561][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.843463][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.854527][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.865965][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.876721][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.890893][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.924938][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.932804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.943573][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.956327][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.984215][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.995737][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.010375][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.021081][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.030980][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.041521][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.054507][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.065070][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.076481][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.182837][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.193232][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.208010][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.216852][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.237253][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.258027][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.330538][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.355392][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.444310][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.474046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.493943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.503284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.551725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.569734][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.424707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.746532][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.754670][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.826977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.837194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 119.102323][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.163020][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.174579][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.208676][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.391093][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.422469][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.613820][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.804234][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 120.854011][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 120.903029][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.940957][ T24] usb 1-1: Product: syz [ 120.962962][ T24] usb 1-1: Manufacturer: syz [ 120.992970][ T24] usb 1-1: SerialNumber: syz [ 121.040521][ T24] usb 1-1: config 0 descriptor?? [ 121.079667][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.091539][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 121.209548][ T5991] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 121.300312][ T5991] syzkaller0: entered promiscuous mode [ 121.313843][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 121.342910][ T5991] syzkaller0: entered allmulticast mode [ 121.366481][ T24] usb 1-1: USB disconnect, device number 2 [ 122.748678][ T6010] loop2: detected capacity change from 0 to 1024 [ 122.784548][ T6010] ext4: Unknown parameter 'nouser_xattr' [ 123.054091][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.228069][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 123.249316][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.278380][ T24] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 123.335256][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.373184][ T24] usb 1-1: config 0 descriptor?? [ 123.379843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.443369][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.456502][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.464869][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.483348][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.493750][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.905584][ T24] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 123.919824][ T24] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 123.929624][ T24] belkin 0003:050D:3201.0001: item fetching failed at offset 2/5 [ 123.939672][ T24] belkin 0003:050D:3201.0001: parse failed [ 123.949604][ T24] belkin 0003:050D:3201.0001: probe with driver belkin failed with error -22 [ 124.139933][ T5899] usb 1-1: USB disconnect, device number 3 [ 124.483887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.128948][ T6024] loop0: detected capacity change from 0 to 2048 [ 125.174972][ T6024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.533817][ T5846] Bluetooth: hci4: command tx timeout [ 125.785410][ T6028] loop5: detected capacity change from 0 to 128 [ 125.792440][ T6028] ======================================================= [ 125.792440][ T6028] WARNING: The mand mount option has been deprecated and [ 125.792440][ T6028] and is ignored by this kernel. Remove the mand [ 125.792440][ T6028] option from the mount to silence this warning. [ 125.792440][ T6028] ======================================================= [ 125.874319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.087682][ T6028] process 'syz.5.27' launched './file0' with NULL argv: empty string added [ 126.967156][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.268489][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.613738][ T5846] Bluetooth: hci4: command tx timeout [ 128.658145][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.692224][ T5846] Bluetooth: hci4: command tx timeout [ 130.345932][ T3562] bridge_slave_1: left allmulticast mode [ 130.351830][ T3562] bridge_slave_1: left promiscuous mode [ 130.408255][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.505359][ T6082] dccp_close: ABORT with 20 bytes unread [ 130.583022][ T3562] bridge_slave_0: left allmulticast mode [ 130.623865][ T3562] bridge_slave_0: left promiscuous mode [ 130.630559][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.775324][ T5846] Bluetooth: hci4: command tx timeout [ 134.496790][ T6112] loop5: detected capacity change from 0 to 512 [ 134.552693][ T6112] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.652447][ T6112] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.946165][ T6112] EXT4-fs (loop5): 1 truncate cleaned up [ 134.954969][ T6112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.816264][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.242647][ T6144] loop2: detected capacity change from 0 to 1024 [ 136.271877][ T6144] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.308760][ T6143] block nbd3: shutting down sockets [ 136.331830][ T6144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.381127][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.400915][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.426798][ T3562] bond0 (unregistering): Released all slaves [ 136.449684][ T6144] syz.2.64 (6144) used greatest stack depth: 21256 bytes left [ 136.575646][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 136.615069][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.464263][ T6166] netlink: 'syz.2.66': attribute type 4 has an invalid length. [ 138.457939][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.504279][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.514741][ T6018] bridge_slave_0: entered allmulticast mode [ 138.524686][ T6018] bridge_slave_0: entered promiscuous mode [ 138.570073][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.584132][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.591805][ T6018] bridge_slave_1: entered allmulticast mode [ 138.625539][ T6018] bridge_slave_1: entered promiscuous mode [ 138.784407][ T3562] hsr_slave_0: left promiscuous mode [ 138.880479][ T3562] hsr_slave_1: left promiscuous mode [ 139.079884][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.110398][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.204628][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.254825][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.476503][ T3562] veth1_macvtap: left promiscuous mode [ 139.482386][ T3562] veth0_macvtap: left promiscuous mode [ 139.530872][ T3562] veth1_vlan: left promiscuous mode [ 139.572628][ T3562] veth0_vlan: left promiscuous mode [ 140.762852][ T6201] loop0: detected capacity change from 0 to 1024 [ 140.918529][ T30] audit: type=1800 audit(1744838472.538:3): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.78" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 141.070344][ T6204] loop2: detected capacity change from 0 to 512 [ 141.986599][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 142.028608][ T6204] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.424298][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 142.489697][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.499097][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.537468][ T30] audit: type=1800 audit(1744838474.178:4): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 142.743901][ T969] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.893713][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 142.973862][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.990575][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.053249][ T969] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 143.108630][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.317267][ T969] usb 3-1: config 0 descriptor?? [ 144.168552][ T969] usbhid 3-1:0.0: can't add hid device: -71 [ 144.174770][ T969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 144.208139][ T969] usb 3-1: USB disconnect, device number 2 [ 144.822820][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 144.912398][ T6204] syz.2.79 (6204) used greatest stack depth: 21176 bytes left [ 145.002236][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 145.260895][ T5850] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 145.283235][ T5850] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 145.295588][ T5895] kernel read not supported for file /file0 (pid: 5895 comm: kworker/1:4) [ 145.323728][ T5850] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz-executor: Failed to acquire dquot type 0 [ 145.800036][ T6247] loop0: detected capacity change from 0 to 1024 [ 145.876567][ T6247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.934420][ T6247] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.998845][ T6247] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.90: missing EA_INODE flag [ 146.021182][ T6247] EXT4-fs (loop0): Remounting filesystem read-only [ 146.060734][ T6247] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1220: inode #18: comm syz.0.90: ea_inode dec ref err=-30 [ 146.079445][ T6247] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -30) [ 146.272722][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.497504][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.552308][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.607621][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.161496][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 147.239362][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 147.457236][ T6018] team0: Port device team_slave_0 added [ 147.652036][ T6018] team0: Port device team_slave_1 added [ 147.704240][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.970214][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 147.979352][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.991313][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.048506][ T5898] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f [ 148.059227][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.083743][ T5898] usb 4-1: Product: syz [ 148.088000][ T5898] usb 4-1: Manufacturer: syz [ 148.092629][ T5898] usb 4-1: SerialNumber: syz [ 148.097827][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.146988][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.154230][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.226274][ T5898] usb 4-1: config 0 descriptor?? [ 148.332919][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.948145][ T5899] usb 4-1: USB disconnect, device number 2 [ 148.961463][ T6018] hsr_slave_0: entered promiscuous mode [ 149.057399][ T6018] hsr_slave_1: entered promiscuous mode [ 149.695210][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.730352][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.755031][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.768106][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.778137][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.898773][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 150.914111][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.953739][ T6293] loop0: detected capacity change from 0 to 128 [ 150.984232][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.994321][ T6293] EXT4-fs: Ignoring removed nobh option [ 151.273856][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 151.280707][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 151.289276][ T5894] usb 2-1: config 0 has no interfaces? [ 151.303845][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 151.311312][ T5895] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 151.313264][ T6293] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.324414][ T5894] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 151.338840][ T6293] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.360314][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.511844][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.540042][ T5895] usb 6-1: config 0 descriptor?? [ 151.639763][ T5894] usb 2-1: Product: syz [ 151.677753][ T5894] usb 2-1: Manufacturer: syz [ 151.729368][ T5894] usb 2-1: SerialNumber: syz [ 151.778496][ T5894] usb 2-1: config 0 descriptor?? [ 151.801840][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 151.844737][ T5846] Bluetooth: hci5: command tx timeout [ 152.003352][ T5836] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.060584][ T10] usb 2-1: USB disconnect, device number 2 [ 152.066610][ T5895] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0002/input/input5 [ 152.137019][ T5895] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0002/input/input6 [ 152.235537][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.258620][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.264221][ T5895] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 152.314775][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 152.375234][ T6018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.384827][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 152.456922][ T5971] usb 6-1: USB disconnect, device number 2 [ 152.573182][ T6018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.593159][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.606310][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.635030][ T6273] bridge_slave_0: entered allmulticast mode [ 152.643347][ T6273] bridge_slave_0: entered promiscuous mode [ 152.692896][ T6018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.732785][ T6018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.804930][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.824025][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.863787][ T6273] bridge_slave_1: entered allmulticast mode [ 152.883845][ T6273] bridge_slave_1: entered promiscuous mode [ 153.093125][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.166107][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.253258][ T6315] loop0: detected capacity change from 0 to 1024 [ 153.382891][ T6315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.411796][ T6320] TCP: TCP_TX_DELAY enabled [ 153.451609][ T6315] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.481908][ T6273] team0: Port device team_slave_0 added [ 153.591670][ T6273] team0: Port device team_slave_1 added [ 153.618885][ T6315] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 153.947929][ T5846] Bluetooth: hci5: command tx timeout [ 154.191339][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.239118][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.257516][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.324657][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.448019][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.476513][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.571403][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.989927][ T6335] input: syz0 as /devices/virtual/input/input7 [ 155.014873][ T6335] input: failed to attach handler leds to device input7, error: -6 [ 155.196587][ T6273] hsr_slave_0: entered promiscuous mode [ 155.222635][ T6273] hsr_slave_1: entered promiscuous mode [ 155.263376][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.296934][ T6273] Cannot create hsr debugfs directory [ 155.411229][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 155.563637][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.576413][ T6341] ipvlan2: entered promiscuous mode [ 155.733073][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.773570][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.826945][ T5896] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.864608][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.906889][ T5896] usb 4-1: config 0 descriptor?? [ 156.007627][ T5846] Bluetooth: hci5: command tx timeout [ 156.446836][ T6347] loop5: detected capacity change from 0 to 2048 [ 156.663851][ T6347] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.691841][ T6347] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 156.757752][ T5896] usb 4-1: language id specifier not provided by device, defaulting to English [ 156.778117][ T6347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.787522][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.814564][ T6350] tipc: Started in network mode [ 156.820777][ T6350] tipc: Node identity 7f000001, cluster identity 4711 [ 156.844792][ T6350] tipc: Enabled bearer , priority 10 [ 156.942137][ T6350] tipc: Enabled bearer , priority 0 [ 157.021902][ T6347] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1375) [ 157.062480][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.177172][ T5896] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 157.193941][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.201165][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.450228][ T10] usb 4-1: USB disconnect, device number 3 [ 157.490766][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 157.495513][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.504398][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.516971][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 157.603424][ T5899] libceph: connect (1)[b::]:6789 error -101 [ 157.634731][ T5899] libceph: mon0 (1)[b::]:6789 connect error [ 157.671595][ T6273] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.691099][ T6273] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.704944][ T6273] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.742791][ T6273] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.795572][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 157.815965][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 157.915979][ T10] libceph: connect (1)[b::]:6789 error -101 [ 157.922222][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 157.970337][ T5899] tipc: Node number set to 2130706433 [ 158.084149][ T5846] Bluetooth: hci5: command tx timeout [ 158.287168][ T6361] ceph: No mds server is up or the cluster is laggy [ 158.291936][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.346014][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 158.352212][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 158.353883][ T6364] ceph: No mds server is up or the cluster is laggy [ 158.431973][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.485860][ T10] libceph: connect (1)[b::]:6789 error -101 [ 158.505662][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 158.534635][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.541879][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.705432][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.712722][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.052782][ T6273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.092010][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.192144][ T6380] syzkaller0: create flow: hash 3502160308 index 0 [ 159.311494][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.826061][ T6378] syzkaller0 (unregistered): delete flow: hash 3502160308 index 0 [ 162.029403][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 162.089749][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 162.432426][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.591006][ T6421] syz.0.132 uses obsolete (PF_INET,SOCK_PACKET) [ 163.142821][ T5971] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.339818][ T5971] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.361845][ T5971] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.463686][ T5971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.506428][ T5971] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 163.543090][ T6018] veth0_vlan: entered promiscuous mode [ 163.563596][ T5971] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 163.608637][ T6018] veth1_vlan: entered promiscuous mode [ 163.622361][ T5971] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.653985][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.669670][ T6018] veth0_macvtap: entered promiscuous mode [ 163.676023][ T5971] usb 6-1: Product: syz [ 163.680264][ T5971] usb 6-1: Manufacturer: syz [ 163.729885][ T5971] cdc_wdm 6-1:1.0: skipping garbage [ 163.745722][ T6018] veth1_macvtap: entered promiscuous mode [ 163.761866][ T5971] cdc_wdm 6-1:1.0: skipping garbage [ 163.812953][ T5971] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 163.833740][ T5971] cdc_wdm 6-1:1.0: Unknown control protocol [ 163.838379][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.861151][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.873794][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.895932][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.912932][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.938677][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.966230][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.981953][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.995718][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.007666][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.020334][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.083410][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.127178][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.146614][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.166765][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.182496][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.190492][ T5971] usb 6-1: USB disconnect, device number 3 [ 164.200614][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.211563][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.222588][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.232864][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.263725][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.285632][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.328222][ T6018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.339109][ T6018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.347934][ T6018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.356780][ T6018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.515943][ T6273] veth0_vlan: entered promiscuous mode [ 164.655911][ T6273] veth1_vlan: entered promiscuous mode [ 164.809539][ T6273] veth0_macvtap: entered promiscuous mode [ 164.857855][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.887838][ T6273] veth1_macvtap: entered promiscuous mode [ 164.895646][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.824160][ T5899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.840185][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.875101][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.876615][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.899237][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.913109][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.933959][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.953079][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.003318][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.014025][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 166.030080][ T5899] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 166.051033][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.061783][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.080136][ T5899] usb 6-1: Product: syz [ 166.085989][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.103556][ T5899] usb 6-1: Manufacturer: syz [ 166.114018][ T5899] usb 6-1: SerialNumber: syz [ 166.118860][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.137350][ T5899] usb 6-1: config 0 descriptor?? [ 166.166753][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.183068][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 166.204006][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.228054][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.276226][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.365307][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.388088][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.399203][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.413332][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.443643][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.787067][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.820546][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.954926][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.101402][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.112227][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.122721][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.511172][ T5899] gspca_sonixj: reg_w1 err -110 [ 167.523625][ T5899] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 167.563639][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.585069][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.597567][ T6273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.623768][ T6273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.638072][ T6273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.699202][ T6273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.257703][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.269316][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.503887][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.523610][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.944623][ T10] usb 6-1: USB disconnect, device number 4 [ 169.441913][ T6470] loop1: detected capacity change from 0 to 128 [ 169.473068][ T6470] EXT4-fs: Ignoring removed nobh option [ 169.564475][ T6470] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.762340][ T6470] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.861396][ T6478] loop5: detected capacity change from 0 to 8 [ 171.328636][ T6485] loop0: detected capacity change from 0 to 512 [ 171.414877][ T6485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.497220][ T6485] EXT4-fs (loop0): 1 truncate cleaned up [ 171.520680][ T6485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.542099][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.555632][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.564307][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.575643][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.584130][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.894414][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 171.916418][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.014103][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.063995][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 172.087552][ T5898] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.109075][ T5898] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.136309][ T5898] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 172.152980][ T5898] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 172.163832][ T5898] usb 7-1: Product: syz [ 172.168340][ T5898] usb 7-1: Manufacturer: syz [ 172.201159][ T5898] hub 7-1:4.0: USB hub found [ 172.292786][ T6503] tipc: Started in network mode [ 172.303686][ T6503] tipc: Node identity 7f000001, cluster identity 4711 [ 172.325357][ T6503] tipc: Enabled bearer , priority 10 [ 172.380725][ T6509] tipc: Enabled bearer , priority 0 [ 172.423339][ T5898] hub 7-1:4.0: 2 ports detected [ 173.463581][ T5899] tipc: Node number set to 2130706433 [ 173.685003][ T5846] Bluetooth: hci4: command tx timeout [ 174.313640][ T5898] hub 7-1:4.0: activate --> -90 [ 174.344470][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 174.799853][ T5899] usb 7-1: USB disconnect, device number 2 [ 175.179180][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.201411][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.234810][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.267851][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.277233][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.287703][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.300558][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.318992][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.350547][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.362122][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 175.769378][ T5846] Bluetooth: hci4: command tx timeout [ 176.127920][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.173991][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.214492][ T6492] bridge_slave_0: entered allmulticast mode [ 176.295164][ T6492] bridge_slave_0: entered promiscuous mode [ 176.387694][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.444714][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.463886][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.574115][ T6492] bridge_slave_1: entered allmulticast mode [ 176.603762][ T6492] bridge_slave_1: entered promiscuous mode [ 176.616805][ T48] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.658899][ T48] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.713780][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.754936][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 177.134154][ T6553] loop1: detected capacity change from 0 to 8 [ 177.843888][ T5846] Bluetooth: hci4: command tx timeout [ 178.004331][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.055599][ T48] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.065668][ T48] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.095224][ T48] usb 4-1: Product: syz [ 178.133605][ T48] usb 4-1: Manufacturer: syz [ 178.191645][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 178.218775][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 178.277745][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.304137][ T48] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 178.352671][ T48] cdc_wdm 4-1:1.0: Unknown control protocol [ 178.373419][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.477149][ T6492] team0: Port device team_slave_0 added [ 179.491252][ T10] usb 4-1: USB disconnect, device number 4 [ 179.521547][ T6492] team0: Port device team_slave_1 added [ 179.989926][ T6565] loop5: detected capacity change from 0 to 128 [ 179.997451][ T6565] EXT4-fs: Ignoring removed nobh option [ 180.004582][ T5846] Bluetooth: hci4: command tx timeout [ 180.028792][ T6565] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.111817][ T6565] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.137604][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.153597][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.195866][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.240455][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.261038][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.304504][ T6570] loop1: detected capacity change from 0 to 512 [ 180.349971][ T6571] loop0: detected capacity change from 0 to 1024 [ 180.362422][ T6570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.370635][ T6571] EXT4-fs: Ignoring removed nobh option [ 180.402026][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.447656][ T6570] EXT4-fs (loop1): 1 truncate cleaned up [ 180.470370][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.531988][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.656012][ T6571] EXT4-fs warning (device loop0): ext4_rename_delete:3726: inode #12: comm syz.0.178: Deleting old file: nlink 2, error=-2 [ 180.730517][ T6492] hsr_slave_0: entered promiscuous mode [ 180.794106][ T6492] hsr_slave_1: entered promiscuous mode [ 180.814724][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.853582][ T6492] Cannot create hsr debugfs directory [ 180.922625][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.949721][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.016765][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.259124][ T30] audit: type=1326 audit(1744838512.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 181.308642][ T6588] loop0: detected capacity change from 0 to 2048 [ 181.761785][ T30] audit: type=1326 audit(1744838512.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 181.981131][ T6588] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.234440][ T6588] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 182.243247][ T30] audit: type=1326 audit(1744838512.938:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.248346][ T6588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.303813][ T30] audit: type=1326 audit(1744838512.938:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.333912][ T30] audit: type=1326 audit(1744838512.948:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.357610][ T30] audit: type=1326 audit(1744838512.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.396408][ T30] audit: type=1326 audit(1744838512.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.451442][ T30] audit: type=1326 audit(1744838512.948:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.503368][ T30] audit: type=1326 audit(1744838512.948:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.601402][ T30] audit: type=1326 audit(1744838512.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.5.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9d58e169 code=0x7ffc0000 [ 182.602138][ T6588] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1375) [ 183.386254][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.843372][ T5895] usb 6-1: config 0 has no interfaces? [ 183.851975][ T5895] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.893621][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.910345][ T5895] usb 6-1: Product: syz [ 183.925195][ T5895] usb 6-1: Manufacturer: syz [ 183.971262][ T5895] usb 6-1: config 0 descriptor?? [ 184.057213][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.208036][ T5896] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 184.501117][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.506613][ T5893] usb 6-1: USB disconnect, device number 5 [ 184.522227][ T5896] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.548124][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.559840][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 184.572007][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 184.669231][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.685003][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.697264][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.711753][ T5896] usb 7-1: Product: syz [ 184.717300][ T5896] usb 7-1: Manufacturer: syz [ 184.776053][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 184.786677][ T6492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.793783][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 184.811789][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.815732][ T5896] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 184.847814][ T5896] cdc_wdm 7-1:1.0: Unknown control protocol [ 184.919913][ T6492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.020776][ T6492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.158287][ T6492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.204336][ T5893] usb 7-1: USB disconnect, device number 3 [ 185.349295][ T6492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.361869][ T6492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.377432][ T6492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.397837][ T6492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.572225][ T6622] loop3: detected capacity change from 0 to 128 [ 185.594719][ T6622] EXT4-fs: Ignoring removed nobh option [ 186.228865][ T6628] No such timeout policy "syz1" [ 186.429142][ T6622] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.708650][ T6622] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.402620][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.992384][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.176785][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.184023][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.526450][ T6640] syz.1.188 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 188.536916][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 188.536939][ T30] audit: type=1326 audit(1744838520.168:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01678e169 code=0x7ffc0000 [ 188.545129][ T5838] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.673427][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.676403][ T30] audit: type=1326 audit(1744838520.168:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01678e169 code=0x7ffc0000 [ 188.680701][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.374522][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.173826][ T5971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 190.351233][ T5971] usb 1-1: Using ep0 maxpacket: 32 [ 190.374119][ T5971] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 190.382385][ T5971] usb 1-1: config 0 has no interface number 0 [ 190.436471][ T5971] usb 1-1: config 0 interface 184 has no altsetting 0 [ 190.535554][ T5971] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 190.559825][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.594341][ T5971] usb 1-1: Product: syz [ 190.603298][ T5971] usb 1-1: Manufacturer: syz [ 190.680348][ T5971] usb 1-1: SerialNumber: syz [ 190.680758][ T6687] loop6: detected capacity change from 0 to 1764 [ 190.715593][ T5971] usb 1-1: config 0 descriptor?? [ 190.788020][ T6492] veth0_vlan: entered promiscuous mode [ 190.801184][ T5971] smsc75xx v1.0.0 [ 190.871999][ T6492] veth1_vlan: entered promiscuous mode [ 191.053327][ T6492] veth0_macvtap: entered promiscuous mode [ 191.135607][ T6492] veth1_macvtap: entered promiscuous mode [ 191.232634][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.258138][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.288503][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.319635][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.364941][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.389859][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.410770][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.443728][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.484001][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 191.501967][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.543298][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.545744][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 191.566956][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.591489][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.637500][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.690142][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.747160][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.815201][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.872592][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.915732][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.937149][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.952452][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.004304][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.033385][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.086390][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.113739][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.155860][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.171621][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.182713][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.193305][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.230988][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.266836][ T6696] __nla_validate_parse: 45 callbacks suppressed [ 192.266863][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 192.267553][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.508238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e3e5800: rx timeout, send abort [ 192.684970][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 192.746591][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 192.901043][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 192.935635][ T6492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.945073][ T5971] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 192.972873][ T6492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.991663][ T6492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.994056][ T5971] usb 1-1: USB disconnect, device number 4 [ 193.027639][ T6492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.833174][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.864862][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.138933][ T6716] TCP: out of memory -- consider tuning tcp_mem [ 195.242125][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.423261][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.431974][ T6719] loop6: detected capacity change from 0 to 2048 [ 195.561236][ T6719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.351816][ T6729] loop5: detected capacity change from 0 to 22 [ 196.364405][ T6729] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 197.244466][ T6729] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 199.601603][ T6737] loop5: detected capacity change from 0 to 2048 [ 199.622411][ T6744] loop1: detected capacity change from 0 to 2048 [ 199.754074][ T6744] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.916295][ T6737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.128435][ T6744] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 200.188723][ T6744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.437635][ T6744] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1375) [ 200.496369][ T6737] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.217: bg 0: block 234: padding at end of block bitmap is not set [ 200.566310][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 200.913172][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.924569][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.939140][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.949379][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 200.972133][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.993850][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.023790][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 201.023790][ T12] [ 201.093611][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 201.099677][ T12] EXT4-fs (loop5): Free/Dirty block details [ 201.123984][ T12] EXT4-fs (loop5): free_blocks=0 [ 201.129065][ T12] EXT4-fs (loop5): dirty_blocks=64 [ 201.156379][ T12] EXT4-fs (loop5): Block reservation details [ 201.173574][ T12] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 201.199073][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.334034][ T5898] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 201.751186][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.858928][ T5898] usb 4-1: not running at top speed; connect to a high speed hub [ 202.039853][ T5898] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 202.075677][ T5898] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 202.116748][ T5898] usb 4-1: config 4 has no interface number 0 [ 202.209707][ T5898] usb 4-1: string descriptor 0 read error: -22 [ 202.233786][ T5898] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 202.239541][ T6756] chnl_net:caif_netlink_parms(): no params data found [ 202.281242][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.257513][ T5839] Bluetooth: hci4: command tx timeout [ 203.280969][ T5898] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 203.641758][ T5898] usb 4-1: No valid video chain found. [ 203.753667][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 203.756371][ T6784] No such timeout policy "syz1" [ 203.930484][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.937325][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.984610][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 204.075438][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.159724][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.343144][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.435859][ T5895] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 204.523817][ T5895] usb 2-1: Product: syz [ 204.542490][ T5895] usb 2-1: Manufacturer: syz [ 204.586226][ T5895] hub 2-1:4.0: USB hub found [ 204.648025][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.680484][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.240'. [ 204.967786][ T5895] hub 2-1:4.0: 2 ports detected [ 205.003779][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.017183][ T6756] bridge_slave_0: entered allmulticast mode [ 205.030661][ T5898] usb 4-1: USB disconnect, device number 5 [ 205.036660][ T6756] bridge_slave_0: entered promiscuous mode [ 205.143997][ T6797] loop6: detected capacity change from 0 to 8 [ 205.313814][ T5839] Bluetooth: hci4: command tx timeout [ 206.040634][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 206.289319][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025058000: rx timeout, send abort [ 206.366139][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.531752][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.725453][ T6756] bridge_slave_1: entered allmulticast mode [ 206.789459][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c317800: rx timeout, send abort [ 206.798920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025058000: abort rx timeout. Force session deactivation [ 207.040542][ T6756] bridge_slave_1: entered promiscuous mode [ 207.197715][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.227768][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.273939][ T5895] hub 2-1:4.0: activate --> -90 [ 207.297938][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88807c317800: abort rx timeout. Force session deactivation [ 207.342733][ T6756] team0: Port device team_slave_0 added [ 207.352912][ T6756] team0: Port device team_slave_1 added [ 207.364022][ T5839] Bluetooth: hci4: command tx timeout [ 207.526876][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.555141][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.574698][ T6808] loop6: detected capacity change from 0 to 2048 [ 207.606643][ T6808] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 207.639074][ T6806] loop0: detected capacity change from 0 to 2048 [ 207.668805][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.687890][ T5895] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 207.695299][ T6295] usb 2-1: USB disconnect, device number 3 [ 207.730865][ T6808] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 207.744525][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.746238][ T6808] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 207.751478][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.910126][ T6806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.936635][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.316644][ T6808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.655835][ T30] audit: type=1800 audit(1744838540.298:29): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.233" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 208.999946][ T6756] hsr_slave_0: entered promiscuous mode [ 209.143894][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 209.443803][ T5839] Bluetooth: hci4: command tx timeout [ 209.508888][ T6756] hsr_slave_1: entered promiscuous mode [ 209.538514][ T6756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.546506][ T6756] Cannot create hsr debugfs directory [ 210.711749][ T6840] syz.0.239 (6840) used greatest stack depth: 20344 bytes left [ 211.032235][ T6756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.152422][ T6820] [ 211.154823][ T6820] ============================================ [ 211.160963][ T6820] WARNING: possible recursive locking detected [ 211.167101][ T6820] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 211.174202][ T6820] -------------------------------------------- [ 211.180339][ T6820] syz.6.233/6820 is trying to acquire lock: [ 211.186223][ T6820] ffff888078b78d28 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x879/0x11c0 [ 211.195912][ T6820] [ 211.195912][ T6820] but task is already holding lock: [ 211.203268][ T6820] ffff888078b78d28 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x304/0xbc0 [ 211.213244][ T6820] [ 211.213244][ T6820] other info that might help us debug this: [ 211.221302][ T6820] Possible unsafe locking scenario: [ 211.221302][ T6820] [ 211.228750][ T6820] CPU0 [ 211.232021][ T6820] ---- [ 211.235312][ T6820] lock(&sbi->s_alloc_mutex); [ 211.240090][ T6820] lock(&sbi->s_alloc_mutex); [ 211.244855][ T6820] [ 211.244855][ T6820] *** DEADLOCK *** [ 211.244855][ T6820] [ 211.252989][ T6820] May be due to missing lock nesting notation [ 211.252989][ T6820] [ 211.261298][ T6820] 4 locks held by syz.6.233/6820: [ 211.266315][ T6820] #0: ffff88803161e420 (sb_writers#14){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 211.276595][ T6820] #1: ffff888077e8e240 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: udf_file_write_iter+0x6d/0x7b0 [ 211.287661][ T6820] #2: ffff888077e8e070 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x159/0x5b0 [ 211.297484][ T6820] #3: ffff888078b78d28 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x304/0xbc0 [ 211.307881][ T6820] [ 211.307881][ T6820] stack backtrace: [ 211.313794][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.6.233 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 211.313830][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.313848][ T6820] Call Trace: [ 211.313858][ T6820] [ 211.313870][ T6820] dump_stack_lvl+0x116/0x1f0 [ 211.313916][ T6820] print_deadlock_bug+0x1e9/0x240 [ 211.313965][ T6820] __lock_acquire+0xff7/0x1ba0 [ 211.314023][ T6820] lock_acquire+0x179/0x350 [ 211.314048][ T6820] ? udf_free_blocks+0x879/0x11c0 [ 211.314079][ T6820] ? __pfx___might_resched+0x10/0x10 [ 211.314123][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314164][ T6820] __mutex_lock+0x199/0xb90 [ 211.314209][ T6820] ? udf_free_blocks+0x879/0x11c0 [ 211.314235][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314274][ T6820] ? mark_held_locks+0x49/0x80 [ 211.314322][ T6820] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 211.314369][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314404][ T6820] ? udf_free_blocks+0x879/0x11c0 [ 211.314433][ T6820] ? __pfx___mutex_lock+0x10/0x10 [ 211.314477][ T6820] ? __sanitizer_cov_trace_const_cmp4+0x1/0x20 [ 211.314515][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314550][ T6820] ? __lock_acquire+0xaa4/0x1ba0 [ 211.314603][ T6820] ? udf_free_blocks+0x879/0x11c0 [ 211.314630][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314665][ T6820] udf_free_blocks+0x879/0x11c0 [ 211.314693][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314732][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314768][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314803][ T6820] ? find_held_lock+0x2b/0x80 [ 211.314839][ T6820] ? __pfx___might_resched+0x10/0x10 [ 211.314883][ T6820] ? __pfx_udf_free_blocks+0x10/0x10 [ 211.314910][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.314945][ T6820] ? udf_get_fileshortad+0x50/0x160 [ 211.314975][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315010][ T6820] ? udf_current_aext+0x3f3/0xa10 [ 211.315046][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315084][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315119][ T6820] ? udf_next_aext+0x33b/0x4c0 [ 211.315158][ T6820] udf_delete_aext+0x461/0xd80 [ 211.315194][ T6820] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.315226][ T6820] ? __pfx_udf_delete_aext+0x10/0x10 [ 211.315260][ T6820] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.315293][ T6820] ? udf_prealloc_blocks+0x303/0xbc0 [ 211.315320][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315356][ T6820] ? udf_get_fileshortad+0x111/0x160 [ 211.315398][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315433][ T6820] ? udf_next_aext+0x33b/0x4c0 [ 211.315471][ T6820] udf_prealloc_blocks+0xad5/0xbc0 [ 211.315503][ T6820] ? __pfx_udf_new_block+0x10/0x10 [ 211.315530][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315566][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315604][ T6820] ? __pfx_udf_prealloc_blocks+0x10/0x10 [ 211.315632][ T6820] ? udf_current_aext+0x3f3/0xa10 [ 211.315667][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315705][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315740][ T6820] ? udf_next_aext+0x33b/0x4c0 [ 211.315779][ T6820] inode_getblk+0x25cb/0x4100 [ 211.315822][ T6820] ? __pfx_inode_getblk+0x10/0x10 [ 211.315856][ T6820] ? irqentry_exit_to_user_mode+0x1e2/0x280 [ 211.315902][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.315937][ T6820] ? lockdep_hardirqs_on+0x2/0x110 [ 211.315979][ T6820] ? __entry_text_end+0x1020c7/0x1020c9 [ 211.316017][ T6820] ? __lock_acquire+0x5ca/0x1ba0 [ 211.316066][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316104][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316142][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316191][ T6820] ? xas_load+0x49/0x5b0 [ 211.316251][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316296][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316337][ T6820] udf_map_block+0x2dd/0x5b0 [ 211.316376][ T6820] ? __pfx_udf_map_block+0x10/0x10 [ 211.316426][ T6820] __udf_get_block+0x98/0x330 [ 211.316461][ T6820] ? __pfx___udf_get_block+0x10/0x10 [ 211.316497][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316533][ T6820] ? _raw_spin_unlock+0x28/0x50 [ 211.316569][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.316604][ T6820] ? create_empty_buffers+0x3a5/0x480 [ 211.316636][ T6820] ? __pfx_udf_get_block+0x10/0x10 [ 211.316671][ T6820] __block_write_begin_int+0x4f4/0x16d0 [ 211.316707][ T6820] ? __pfx_udf_get_block+0x10/0x10 [ 211.316744][ T6820] ? kasan_save_stack+0x42/0x60 [ 211.316790][ T6820] ? __pfx___block_write_begin_int+0x10/0x10 [ 211.316829][ T6820] ? __pfx_udf_get_block+0x10/0x10 [ 211.316864][ T6820] block_write_begin+0x9a/0x1d0 [ 211.316897][ T6820] udf_write_begin+0x1c7/0x270 [ 211.316931][ T6820] generic_perform_write+0x3d0/0x930 [ 211.316986][ T6820] ? __pfx_generic_perform_write+0x10/0x10 [ 211.317035][ T6820] ? inode_needs_update_time.part.0+0x191/0x270 [ 211.317071][ T6820] __generic_file_write_iter+0x1f7/0x240 [ 211.317109][ T6820] udf_file_write_iter+0x233/0x7b0 [ 211.317139][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317178][ T6820] iter_file_splice_write+0x91f/0x1150 [ 211.317233][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317270][ T6820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 211.317315][ T6820] ? __pfx_copy_splice_read+0x10/0x10 [ 211.317367][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317401][ T6820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 211.317444][ T6820] direct_splice_actor+0x192/0x6c0 [ 211.317486][ T6820] splice_direct_to_actor+0x345/0xa30 [ 211.317526][ T6820] ? __pfx_direct_splice_actor+0x10/0x10 [ 211.317570][ T6820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 211.317612][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317648][ T6820] do_splice_direct+0x174/0x240 [ 211.317687][ T6820] ? __pfx_do_splice_direct+0x10/0x10 [ 211.317726][ T6820] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 211.317767][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317800][ T6820] ? rw_verify_area+0xcf/0x680 [ 211.317837][ T6820] do_sendfile+0xafd/0xe50 [ 211.317876][ T6820] ? __pfx_do_sendfile+0x10/0x10 [ 211.317916][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317949][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.317982][ T6820] ? __x64_sys_futex+0x1e9/0x4c0 [ 211.318026][ T6820] __x64_sys_sendfile64+0x1d8/0x220 [ 211.318054][ T6820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 211.318080][ T6820] ? rcu_is_watching+0x12/0xc0 [ 211.318116][ T6820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.318155][ T6820] do_syscall_64+0xcd/0x260 [ 211.318198][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318226][ T6820] RIP: 0033:0x7f656ad8e169 [ 211.318248][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.318274][ T6820] RSP: 002b:00007f656bc96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 211.318299][ T6820] RAX: ffffffffffffffda RBX: 00007f656afb6080 RCX: 00007f656ad8e169 [ 211.318317][ T6820] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 211.318334][ T6820] RBP: 00007f656ae10a68 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.318350][ T6820] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 211.318372][ T6820] R13: 0000000000000000 R14: 00007f656afb6080 R15: 00007ffd5ab86a18 [ 211.318400][ T6820] [ 212.024642][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.978981][ T6756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.148935][ T6756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.255033][ T6756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.723990][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.734367][ T9] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 214.741980][ T9] usb 7-1: chopping to 0 config(s) [ 214.747271][ T9] usb 7-1: can't read configurations, error -32 [ 214.884984][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 215.013915][ T9] usb 7-1: device descriptor read/64, error -32 [ 215.125458][ T9] usb usb7-port1: attempt power cycle [ 215.473948][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 215.494180][ T9] usb 7-1: device descriptor read/8, error -32 [ 215.734789][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 215.755791][ T9] usb 7-1: device descriptor read/8, error -32 [ 215.868751][ T9] usb usb7-port1: unable to enumerate USB device