last executing test programs: 3m44.515271397s ago: executing program 3 (id=12): socket(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6071, 0x0, 0x8001}}}}}}, 0x0) 3m43.846181398s ago: executing program 3 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c00"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e28, 0x0, @mcast2, 0x6}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d58", 0x7}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff0000000000", 0x19, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) write$tun(r5, &(0x7f0000000500)={@val={0x0, 0x8864}, @val={0x1, 0x80, 0xc, 0x200, 0x8, 0x401}, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x3a, 0x79, 0x68, 0x0, 0x2, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xc5, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @noop, @timestamp={0x44, 0x24, 0xeb, 0x0, 0x5, [0x8000, 0x5, 0x7, 0x101, 0x8, 0x26, 0x800, 0x2]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xf}, {@multicast1, 0xb60c}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x7b, 0x0, 0x1, 0x8, 0x5, 0x0, 0x8, 0x4f1, 0x4, 0x4e21, 0x4e20}}, [0x0]}}}}}}, 0x95) r6 = io_uring_setup(0x7f30, &(0x7f0000000000)={0x0, 0x400067c1, 0x4, 0x2, 0x20c}) close_range(r6, 0xffffffffffffffff, 0x0) 3m38.878322005s ago: executing program 3 (id=20): r0 = socket(0x1d, 0x2, 0x6) r1 = creat(0x0, 0x64) pwrite64(r1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x8000, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0, 0x2a0, &(0x7f0000000700)="$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") ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 3m38.101714117s ago: executing program 3 (id=24): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@noload}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m35.92102741s ago: executing program 3 (id=30): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x2000000, &(0x7f000000aec0)={[{@noautodefrag}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x142942, 0x1a6) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r0, 0x0, 0xfffffbffa003e45c, 0x700000000000000) lseek(r0, 0x6, 0x4) 3m32.14863149s ago: executing program 3 (id=32): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3m23.217231399s ago: executing program 32 (id=32): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2m55.085392293s ago: executing program 2 (id=76): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r3, 0x0, 0x0) 2m54.797085888s ago: executing program 0 (id=77): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240), 0x0, 0x8, 0x0, 0x1, 0x0}) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd=r0, 0x5, 0x0, 0xb, 0x7}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 2m53.838758164s ago: executing program 2 (id=80): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1DW9rClJbC9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SU4vrFm4g3Px9q44CBqlar1S2dD5+rAhtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT9ZWApKI2BkRu3qs49izP+zpdOzm8XfRh3Wm6vcRz9Sv/7loib+QdF+fnP1fVJb2zRZ3xY1++/3CO53qv634+yC7/v9ve/+vxT+ZNK7Xrqy/jgt/fdlxTtPr/T+evFdLj+f7PplfXT01FzGeHK43unH//uvnFvmifBb/9N72/X97rL0SY7sjIruJH42IxyLi8bztT0TEkxGxt0v8v77+1Ie9xz9YWfyL67r+1xPj0bqnfaJ0/JcfmyqdvCH+a92v/8Faajrfcyvvf7fSrt7uZgAAALj3pBGxNZJ0Zi2dpjMz9e/L74hIK8srq88dWf745GL9NwKTEWnxpGui4XnoXD6tr+fPR0T9qwXF8QP5c+NvS5tr+ZmF5crisIOHEbelQ//P/F0aduuAgfN7LRhd+j+MLv0fRpf+D6OrTf/fPIx2AHdeu8//z4bQDuDOa+n/lv1ghJj/w+jq2P89BYANz+c/jKSVzXHzH8l3TRR/qcfTN2wiyndFMwaWiPSuaMZdmyjf4/1ieO9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fRfAAAA//8vPt14") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x103c9, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) getsockname(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x24010, &(0x7f0000000240)={[{@uuid_auto}, {@index_on}, {@uuid_on}, {@uuid_off}], [{@context={'context', 0x3d, 'root'}}, {@measure}]}) capset(&(0x7f0000000000)={0x19980330}, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m53.716705225s ago: executing program 0 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x408103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f0000000600)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4125, 0x101d}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 2m51.618927785s ago: executing program 0 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m48.901465777s ago: executing program 0 (id=84): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x2, 0x4, 0xffff261a, 0x200, 0xff, 0x3}, &(0x7f0000000140)=0x20) 2m46.477306617s ago: executing program 2 (id=86): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@uid}, {}]}, 0x1, 0x30b, &(0x7f0000000c00)="$eJzs3ctu00wUB/D/cZze1c9fW4TEhqpQCTYVBRYVmyCULXtWCGhSKcIqoi0SsKFFLBEPwJ5XYMMbsAHxArBCQuIBuhs0x+PESexJU+XSy/8nNTjjGftMZxzPiUQNIjq37lV/frr12/4IUEIJwB0gADAFhAAu4OLUi+29xl5cr/kOVNIW9keQtJSuOpvb9bymth1CmP/c+8i+CzGnR8kh3UemYzLG3P3VR/2CIaFTTq/+HAEw6QZd90+NOK5h2QcujzuGUcsOsBziEC8xP8ZwiIjoBHD3/8DdJua0SBAEwKq77Z+p+//huAMYrNtxV5HxNsjc/3V1Z8SOr2Zg0sr3NNGy+4M0S+wViJ0f5Y6yCSQzq22BKb2ySo0lmN5qhFjbPEAtwFtUnEy1JX2tJVM31SPalZzc1KP4aGXcn0l6oyvKTmlIW424Pmk3MvGnESz2d8acX2/qi78Xf9y/8lW+y0OJ8BG15vovNGKHSUcq6hipoGzjv1F85FltZWvBdaxSqQRtVf7Xk1xyZzhKL+1Uys1IssdMs9H9ZgS+OPXcCx05bNK79R6tFvNaRc13Ba2W2lqV3ExY23wWe79KGY60i/JBHsgK/uIzqpn1f2DjW0XmyvR91IvWdDMj6c9Efs1Qa0Zdd47W5bLcjMCZ7LtvdOSvZtLf8ns8wQbmd1+9flqK4/qO3Xics/F8bkdcSfkdkFtnwBthvNG5qwRPK+y3Soz1xpijnssMszvXB3pA+/mxs46kxF4+eZXtVdYsCYY6TOd4o/oNvgl5sjYOslOiY8MYoGDXUD+r6ITYlXTQ9W2I6XFHRCNmVwSS5H+6knerOk1Q7EvkWaf7k0y0HXG9mcG1LwUX9HWmrwxutjiDc2eURly/WZAzas515RpwNVMo8J4xcnGeEVLFDzzi9/9ERERERERERERERERERERERERERKfNKP4Twrj7SERERERERERERERERERERERERERERER02h3r+b95fyNen/8b9fn83+RRRvrnwJdbpb2e/0tEg/EvAAD//2UHeNU=") mkdir(0x0, 0xc4) 2m46.186839014s ago: executing program 0 (id=88): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/56, 0x38, 0x36) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 2m42.534736573s ago: executing program 0 (id=91): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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") socket(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e"], 0x28, 0x363, &(0x7f0000000100)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x120) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001700)=ANY=[], 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2m41.615655705s ago: executing program 2 (id=92): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 2m38.650242554s ago: executing program 2 (id=94): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") 2m35.749511121s ago: executing program 2 (id=97): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0xfffffffe, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000003c0)=[0x6000, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 2m26.391073569s ago: executing program 33 (id=91): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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") socket(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e"], 0x28, 0x363, &(0x7f0000000100)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x120) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001700)=ANY=[], 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2m26.276060491s ago: executing program 5 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 2m19.275554929s ago: executing program 34 (id=97): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0xfffffffe, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000003c0)=[0x6000, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 2m10.587539768s ago: executing program 35 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 58.612149728s ago: executing program 1 (id=186): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x9}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 57.288119046s ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="28000000030601080000000000000000020000030500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 55.360104453s ago: executing program 1 (id=188): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x20, 0x28}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, 0x0, 0x0}, &(0x7f00000009c0)={0x44, &(0x7f0000000680)={0x20, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.439192085s ago: executing program 1 (id=192): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$eJzs3U9rE0EYx/HfbNImtbGmf0TwWC3oRbRexEtE8hYE8SDaNkIxVNQK6sVUPIno3btvwRfhRfEN6MmD+ALa08rM/kk22c2msUka/H5A3Wzm2Xkmm919JiAjAP+tm/Ufn67+sn+MVFBBentd8iSVpaKk0zpTfrazu73bbGz1O1DBRejAl1EQaXrabO403L97yd02zkWEqvZVUZXOfRgN3/dv/Oza99ubUDKYGHf1p/CkUnh1uvfLY8+sv70h41pHnMe0Mfva13MtTDoPAMCkBI99+/zfCwp/u6MS1u+eJ62Fj/1j+fwf1v6kExg5v++7Hc9/N8vyjT2/p9xb7fmem8LZ971oljhIzzNdr2cVFJKJAtPkzSpdLt7cg+1m49Lmo+aWp9eqhTqarcQ9hOw3NCfb1ZS5aR8DjN2kVpRBWt6MHcN6Rv7LQ/bYR8/0LXFCzBfzzdw1VX3UVlz/FX1js3UJV7vOVJD/5ez+5l2UbaXwtlGr1Tx3oMii6+Rs8kzljLKcPiNR9MEuKvkDQTUvTxe11BUVjO5KakApjlpOjVqPXmX0tZKIsqOJv83ZWY6aeW9um1X90WfVO+p/z+a35hp4WVdm+6oxa8GF5j7xYDyz6d0V3TGrPU+Olu5UknviT7GUlfpB/3saBhCdw3fa0DUtPH3x8mGh2Ww8sRv3UzYeV+I9M2+k1Db/vmGK0tDharX3lOQ7PY2je+AIks/cuHikB7T3j9zG9iobywBH9U1wG/LGeZoOv1H/Oqovkl86DgM8OcEbFMapfdKHCu8u9TF9bN1lgvmfq+TDet8VCvavW6XsOj0qyNJKNle9h0f0bY0dz4DKifglt3UiWUbnzA3mwzomZR7X0mBzrnMXpPOD91gN85wO/qucBqau77rH7/8AAAAAAAAAAAAAAAAAAADT5vD/Q2Du0FGTHiMAAAAAAAAAAAAAAAAAAAAAANMuXv9X0fq/Gmz93+6lWML1f8vKWf93ozeHnvV/P+zItCTW/wVG628AAAD//+RRfuQ=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 50.53234729s ago: executing program 1 (id=193): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xf7, 0x34, 0x51}}]}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x9, 0x0, 0x20, 0x3, 0xe, "3eccd8fd0000000000000010000000040100"}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 49.684949977s ago: executing program 1 (id=196): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) creat(&(0x7f0000000480)='./file1\x00', 0xa0) 47.414283487s ago: executing program 36 (id=196): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) creat(&(0x7f0000000480)='./file1\x00', 0xa0) 6.394289459s ago: executing program 9 (id=271): socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 5.933234548s ago: executing program 8 (id=273): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b02"], 0x18) sendto$inet6(r0, 0x0, 0x41, 0x200440c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @mcast2, 0x86}, 0x1c) 4.904951441s ago: executing program 8 (id=275): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/21, 0x15}, 0x1}], 0x1, 0x40000002, 0x0) 4.773275644s ago: executing program 4 (id=276): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) 4.709990442s ago: executing program 9 (id=277): mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) 4.631923469s ago: executing program 7 (id=278): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xf7, 0x34, 0x51}}]}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x9, 0x0, 0x20, 0x3, 0xe, "3eccd8fd0000000000000010000000040100"}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.177606214s ago: executing program 6 (id=279): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x20}, 0xe114) 4.12446804s ago: executing program 9 (id=280): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 3.964952406s ago: executing program 4 (id=281): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="0000ffffffffe8fffffffffffffd5f", @ANYRES8], 0x48) 3.585271835s ago: executing program 6 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) 3.525944809s ago: executing program 9 (id=283): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 3.416447494s ago: executing program 8 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.292816636s ago: executing program 7 (id=285): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x200440c0, 0x0, 0x0) 3.181966283s ago: executing program 4 (id=286): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="9ebd78ed218f472dd41c346c9a37c6c4487fb03c63176044abf6882c216f59a775bb4c2e68b27c76cb", 0x29}], 0x1, 0x80000001, 0x5) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 2.768779138s ago: executing program 6 (id=287): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x2, 0x1}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) 2.677849434s ago: executing program 8 (id=288): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.677668502s ago: executing program 7 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) 2.42461531s ago: executing program 4 (id=290): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) 2.025629373s ago: executing program 7 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 2.017250786s ago: executing program 6 (id=292): socket$kcm(0xa, 0x3, 0x11) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x800) r1 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r1, 0x0, 0x0) 1.969577183s ago: executing program 9 (id=293): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) mkdir(0x0, 0x180) socket$kcm(0x11, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.686332372s ago: executing program 4 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.209952505s ago: executing program 6 (id=295): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$kcm(0x2a, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 905.772118ms ago: executing program 9 (id=296): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x140, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 838.486648ms ago: executing program 7 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) 797.67109ms ago: executing program 8 (id=298): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x4}], 0x10}, 0x0) 314.344119ms ago: executing program 6 (id=299): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 259.805291ms ago: executing program 4 (id=300): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="9ebd78ed218f472dd41c346c9a37c6c4487fb03c63176044abf6882c216f59a775bb4c2e68b27c76cb", 0x29}], 0x1, 0x80000001, 0x5) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 97.555898ms ago: executing program 8 (id=301): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) 0s ago: executing program 7 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xb, '\x00', 0x0, r2, 0x0, 0x3, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): : hci4: command tx timeout [ 209.782405][ T5814] Bluetooth: hci1: command tx timeout [ 209.856387][ T5814] Bluetooth: hci3: command tx timeout [ 209.862012][ T5814] Bluetooth: hci2: command tx timeout [ 209.949591][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.056600][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.122448][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.212792][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.377286][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.419424][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.493356][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.576655][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.664351][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.758149][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.825298][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.948980][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.037162][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.150554][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.200994][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.257893][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.322182][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.583642][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.613143][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.697740][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.705289][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.889680][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.897420][ T4200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.969946][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.093339][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.101008][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.148984][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.156650][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.193333][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.508738][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.621894][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.671962][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.679630][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.845594][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.853253][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.933930][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.039628][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.047290][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.107238][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.202326][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.210113][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.345847][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.475945][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.483608][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.577544][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.585141][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.912995][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.027950][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.513681][ T5815] veth0_vlan: entered promiscuous mode [ 215.701198][ T5815] veth1_vlan: entered promiscuous mode [ 215.737508][ T5811] veth0_vlan: entered promiscuous mode [ 215.863201][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.877924][ T5811] veth1_vlan: entered promiscuous mode [ 216.147298][ T5815] veth0_macvtap: entered promiscuous mode [ 216.189212][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.234856][ T5815] veth1_macvtap: entered promiscuous mode [ 216.345231][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.463064][ T5807] veth0_vlan: entered promiscuous mode [ 216.512051][ T5811] veth0_macvtap: entered promiscuous mode [ 216.587996][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.652573][ T5807] veth1_vlan: entered promiscuous mode [ 216.677791][ T5811] veth1_macvtap: entered promiscuous mode [ 216.746366][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.862570][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.886345][ T4828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.899070][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.939878][ T5817] veth0_vlan: entered promiscuous mode [ 216.953066][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.010968][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.069627][ T5817] veth1_vlan: entered promiscuous mode [ 217.092741][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.144107][ T5807] veth0_macvtap: entered promiscuous mode [ 217.203458][ T4828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.236752][ T5807] veth1_macvtap: entered promiscuous mode [ 217.318573][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.384408][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.462487][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.523241][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.620099][ T5817] veth0_macvtap: entered promiscuous mode [ 217.644431][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.688521][ T5817] veth1_macvtap: entered promiscuous mode [ 217.766306][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.775754][ T1328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.864139][ T1328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.928552][ T4140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.012084][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.129671][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.233100][ T3820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.283643][ T3820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.350110][ T3820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.406819][ T3820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.657592][ T5812] veth0_vlan: entered promiscuous mode [ 219.770412][ T5812] veth1_vlan: entered promiscuous mode [ 220.088314][ T5812] veth0_macvtap: entered promiscuous mode [ 220.202338][ T5812] veth1_macvtap: entered promiscuous mode [ 220.381012][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.487474][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.613314][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.697676][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.730211][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.773485][ T4035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.618480][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.627536][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.043236][ T4200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.051628][ T4200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.137724][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.145774][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.452980][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.462322][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.509461][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.517750][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.621537][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.687736][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.695807][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.897036][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.905098][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.009248][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.017565][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.791141][ T5998] loop1: detected capacity change from 0 to 256 [ 226.835653][ T5998] ======================================================= [ 226.835653][ T5998] WARNING: The mand mount option has been deprecated and [ 226.835653][ T5998] and is ignored by this kernel. Remove the mand [ 226.835653][ T5998] option from the mount to silence this warning. [ 226.835653][ T5998] ======================================================= [ 227.056548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.067745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 227.468560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.800249][ T6003] loop2: detected capacity change from 0 to 32768 [ 227.909636][ T6003] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 227.918169][ T6003] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 228.120736][ T6000] veth1_macvtap: left promiscuous mode [ 228.127134][ T6000] macsec0: entered promiscuous mode [ 228.132479][ T6000] macsec0: entered allmulticast mode [ 228.268970][ T6004] veth1_macvtap: entered promiscuous mode [ 228.274996][ T6004] veth1_macvtap: entered allmulticast mode [ 228.282514][ T6004] macsec0: left promiscuous mode [ 228.295626][ T6004] macsec0: left allmulticast mode [ 228.301154][ T6004] veth1_macvtap: left allmulticast mode [ 228.399818][ T6003] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms [ 228.401497][ T5998] FAT-fs (loop1): Directory bread(block 64) failed [ 228.414540][ T5998] FAT-fs (loop1): Directory bread(block 65) failed [ 228.423782][ T5998] FAT-fs (loop1): Directory bread(block 66) failed [ 228.425450][ T5868] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 228.430912][ T5998] FAT-fs (loop1): Directory bread(block 67) failed [ 228.438029][ T5868] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 228.444854][ T5998] FAT-fs (loop1): Directory bread(block 68) failed [ 228.458913][ T5998] FAT-fs (loop1): Directory bread(block 69) failed [ 228.465834][ T5998] FAT-fs (loop1): Directory bread(block 70) failed [ 228.472743][ T5998] FAT-fs (loop1): Directory bread(block 71) failed [ 228.480022][ T5998] FAT-fs (loop1): Directory bread(block 72) failed [ 228.487019][ T5998] FAT-fs (loop1): Directory bread(block 73) failed [ 228.915702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 229.457838][ T3820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.465914][ T3820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.756333][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.764797][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.487013][ T6012] loop3: detected capacity change from 0 to 32768 [ 230.549388][ T6012] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 230.558836][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(none) [ 230.558991][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.559091][ T6012] Call Trace: [ 230.559157][ T6012] [ 230.559212][ T6012] __dump_stack+0x26/0x30 [ 230.559422][ T6012] dump_stack_lvl+0x1df/0x270 [ 230.559632][ T6012] dump_stack+0x1e/0x25 [ 230.559815][ T6012] sysfs_create_dir_ns+0x46c/0x540 [ 230.560082][ T6012] kobject_add_internal+0xeed/0x1840 [ 230.560283][ T6012] kobject_init_and_add+0x371/0x4e0 [ 230.560550][ T6012] ? kmsan_get_metadata+0xfb/0x160 [ 230.560731][ T6012] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.560969][ T6012] gfs2_sys_fs_add+0x23d/0x620 [ 230.561180][ T6012] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.561384][ T6012] gfs2_fill_super+0x287b/0x3f50 [ 230.561538][ T6012] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 230.561784][ T6012] get_tree_bdev_flags+0x6e3/0x920 [ 230.561986][ T6012] ? __pfx_gfs2_fill_super+0x10/0x10 [ 230.562141][ T6012] ? __pfx_gfs2_fill_super+0x10/0x10 [ 230.562285][ T6012] ? __pfx_gfs2_get_tree+0x10/0x10 [ 230.562496][ T6012] get_tree_bdev+0x38/0x50 [ 230.562678][ T6012] gfs2_get_tree+0x57/0x350 [ 230.562920][ T6012] ? __pfx_gfs2_get_tree+0x10/0x10 [ 230.563154][ T6012] vfs_get_tree+0xb0/0x5c0 [ 230.563338][ T6012] ? mount_capable+0x99/0x100 [ 230.563511][ T6012] do_new_mount+0x733/0x1420 [ 230.563675][ T6012] ? apparmor_capable+0x32d/0x410 [ 230.563891][ T6012] ? kmsan_get_metadata+0xfb/0x160 [ 230.564110][ T6012] path_mount+0x6db/0x1e90 [ 230.564300][ T6012] ? user_path_at+0x32d/0x3d0 [ 230.564467][ T6012] __se_sys_mount+0x6eb/0x7d0 [ 230.564659][ T6012] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 230.564929][ T6012] __x64_sys_mount+0xe4/0x150 [ 230.565141][ T6012] x64_sys_call+0x3604/0x3e20 [ 230.565351][ T6012] do_syscall_64+0xd9/0x210 [ 230.565549][ T6012] ? irqentry_exit+0x16/0x60 [ 230.565725][ T6012] ? clear_bhb_loop+0x40/0x90 [ 230.565902][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.566069][ T6012] RIP: 0033:0x7f54ba59038a [ 230.566209][ T6012] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.566331][ T6012] RSP: 002b:00007f54bb49ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.566486][ T6012] RAX: ffffffffffffffda RBX: 00007f54bb49aef0 RCX: 00007f54ba59038a [ 230.566590][ T6012] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f54bb49aeb0 [ 230.566694][ T6012] RBP: 0000200000000400 R08: 00007f54bb49aef0 R09: 0000000000200001 [ 230.566792][ T6012] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 230.566892][ T6012] R13: 00007f54bb49aeb0 R14: 00000000000125d5 R15: 0000200000000240 [ 230.567025][ T6012] [ 230.846188][ T6012] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 230.866681][ T6012] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 230.890230][ T5868] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2452ms [ 230.899178][ T5868] gfs2: fsid=syz:syz.0: jid=0: Done [ 230.904699][ T6003] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 230.929195][ T6003] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 232.128861][ T6030] nbd0: detected capacity change from 0 to 1024 [ 232.169563][ T6032] block nbd0: NBD_DISCONNECT [ 232.174517][ T6032] block nbd0: Send disconnect failed -89 [ 232.223272][ T6033] block nbd0: Send control failed (result -89) [ 232.230374][ T6033] block nbd0: Request send failed, requeueing [ 232.237158][ T6033] block nbd0: Disconnected due to user request. [ 232.246703][ T123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.257800][ T123] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.360850][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.372118][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.381578][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.397819][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.415285][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.424976][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.433400][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.442931][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.451410][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.460876][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.469273][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.478700][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.493751][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.505010][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.513305][ T6033] ldm_validate_partition_table(): Disk read failed. [ 232.520558][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.530163][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.538542][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.548000][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.556756][ T6033] Dev nbd0: unable to read RDB block 0 [ 232.563495][ T6033] nbd0: unable to read partition table [ 232.595391][ T6023] loop4: detected capacity change from 0 to 4096 [ 232.731654][ T6032] Zero length message leads to an empty skb [ 232.964270][ T6023] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 233.618880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 233.623315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 233.726313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.740891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 233.826288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.532705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 235.692524][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.699652][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.553154][ T6049] loop0: detected capacity change from 0 to 1024 [ 237.570748][ T6051] loop3: detected capacity change from 0 to 512 [ 238.145499][ T4200] hfsplus: b-tree write err: -5, ino 4 [ 238.597367][ T6063] loop3: detected capacity change from 0 to 512 [ 238.632466][ T6063] EXT4-fs: Ignoring removed bh option [ 238.665019][ T6063] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 238.854640][ T6063] EXT4-fs (loop3): 1 truncate cleaned up [ 238.908554][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.074738][ T6063] overlayfs: upper fs needs to support d_type. [ 239.189761][ T6068] loop0: detected capacity change from 0 to 4096 [ 239.666955][ T6075] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.274942][ T6080] loop2: detected capacity change from 0 to 64 [ 240.735562][ T5811] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 240.915337][ T5811] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 241.355500][ T6079] loop4: detected capacity change from 0 to 2048 [ 241.553373][ T6079] EXT4-fs: Ignoring removed oldalloc option [ 241.981620][ T6079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.797799][ T30] audit: type=1800 audit(1756341765.263:2): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 242.858210][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.337125][ T5868] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.350391][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.416344][ T6071] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 243.525777][ T5868] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.535372][ T5868] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.549846][ T5868] usb 2-1: Manufacturer: syz [ 243.611098][ T4035] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.681392][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.891941][ T5868] usb 2-1: config 0 descriptor?? [ 244.011547][ T4035] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.476600][ T4035] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.865358][ T4035] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.238077][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.293575][ T5868] rc_core: IR keymap rc-hauppauge not found [ 245.303228][ T5868] Registered IR keymap rc-empty [ 245.318260][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 245.334885][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 245.677594][ T6094] rc rc0: two consecutive events of type space [ 246.373199][ T11] usb 2-1: USB disconnect, device number 2 [ 246.727617][ T4035] bridge_slave_1: left allmulticast mode [ 246.733507][ T4035] bridge_slave_1: left promiscuous mode [ 246.740846][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.905809][ T4035] bridge_slave_0: left allmulticast mode [ 246.911978][ T4035] bridge_slave_0: left promiscuous mode [ 246.918983][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.538320][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.615100][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.735100][ T4035] bond0 (unregistering): Released all slaves [ 250.251071][ T4035] hsr_slave_0: left promiscuous mode [ 250.320414][ T4035] hsr_slave_1: left promiscuous mode [ 250.330529][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.339312][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.534074][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.542266][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.688476][ T4035] veth1_macvtap: left promiscuous mode [ 250.694318][ T4035] veth0_macvtap: left promiscuous mode [ 250.700496][ T4035] veth1_vlan: left promiscuous mode [ 250.706619][ T4035] veth0_vlan: left promiscuous mode [ 252.548575][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 252.668378][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 254.334228][ T6113] loop2: detected capacity change from 0 to 2048 [ 254.392634][ T6112] loop1: detected capacity change from 0 to 32768 [ 254.411774][ T6112] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.37 (6112) [ 254.433896][ T6112] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.444556][ T6112] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 254.498529][ T6121] overlayfs: missing 'lowerdir' [ 254.725506][ T6113] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 254.734458][ T6113] UDF-fs: Scanning with blocksize 512 failed [ 254.760440][ T6123] loop0: detected capacity change from 0 to 128 [ 254.806441][ T6112] BTRFS info (device loop1): enabling ssd optimizations [ 254.818587][ T6112] BTRFS info (device loop1): enabling free space tree [ 255.107584][ T6113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.187849][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.240280][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.286584][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.313986][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.331429][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.586361][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 256.687443][ T6152] loop0: detected capacity change from 0 to 512 [ 256.777579][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 256.788354][ T5817] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.860753][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.871985][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.006408][ T6152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.43: corrupted in-inode xattr: invalid ea_ino [ 257.126695][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.136741][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.144981][ T11] usb 5-1: Product: syz [ 257.149755][ T11] usb 5-1: Manufacturer: syz [ 257.154608][ T11] usb 5-1: SerialNumber: syz [ 257.184529][ T6152] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.43: couldn't read orphan inode 15 (err -117) [ 257.240296][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.377632][ T49] Bluetooth: hci1: command tx timeout [ 257.665418][ T6138] chnl_net:caif_netlink_parms(): no params data found [ 257.685499][ T11] usb 5-1: 0:2 : does not exist [ 257.795829][ T11] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 258.316304][ T6162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.335484][ T6162] fuse: Bad value for 'fd' [ 258.345655][ T6162] input: syz0 as /devices/virtual/input/input6 [ 259.020352][ T11] usb 5-1: USB disconnect, device number 2 [ 259.246755][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.467844][ T49] Bluetooth: hci1: command tx timeout [ 259.786202][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.008250][ T6172] loop0: detected capacity change from 0 to 128 [ 261.066618][ T6172] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 261.102081][ T6172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.536371][ T49] Bluetooth: hci1: command tx timeout [ 263.660093][ T49] Bluetooth: hci1: command tx timeout [ 263.668181][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 263.899098][ T42] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 263.907962][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.110881][ T42] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 264.120641][ T42] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 264.133782][ T42] usb 2-1: Manufacturer: syz [ 264.182835][ T42] usb 2-1: config 0 descriptor?? [ 264.292286][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.300073][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.308758][ T6138] bridge_slave_0: entered allmulticast mode [ 264.319728][ T6138] bridge_slave_0: entered promiscuous mode [ 264.790963][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.800072][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.808876][ T6138] bridge_slave_1: entered allmulticast mode [ 264.820300][ T6138] bridge_slave_1: entered promiscuous mode [ 264.918905][ T42] rc_core: IR keymap rc-hauppauge not found [ 264.925031][ T42] Registered IR keymap rc-empty [ 264.933854][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 264.954987][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 265.372353][ T11] usb 2-1: USB disconnect, device number 3 [ 265.953073][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.179688][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.930012][ T6138] team0: Port device team_slave_0 added [ 267.049659][ T6138] team0: Port device team_slave_1 added [ 267.312676][ T6193] overlayfs: missing 'lowerdir' [ 267.732153][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.740859][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.767721][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.205064][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.212541][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.244410][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.373605][ T6200] loop2: detected capacity change from 0 to 32768 [ 269.433333][ T6200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.53 (6200) [ 269.468199][ T6200] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.478649][ T6200] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 269.770501][ T6200] BTRFS info (device loop2): enabling ssd optimizations [ 269.778143][ T6200] BTRFS info (device loop2): enabling free space tree [ 269.990253][ T6138] hsr_slave_0: entered promiscuous mode [ 270.000865][ T6138] hsr_slave_1: entered promiscuous mode [ 270.534810][ T6218] [U] ÿž½xí!G-Ô4lš7ÆÄH° 1 [ 312.758110][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.834834][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.897116][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.914996][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.922995][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 313.167942][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 313.765160][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.775226][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.034077][ T6511] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.109'. [ 314.329784][ T6503] XFS (loop4): Corruption warning: Metadata has LSN (1024:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 314.346727][ T6503] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_inobt block 0xc [ 314.358832][ T6503] XFS (loop4): Unmount and run xfs_repair [ 314.364704][ T6503] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 314.372403][ T6503] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 314.381561][ T6503] 00000010: 00 00 00 00 00 00 00 0c 00 00 04 00 00 00 00 10 ................ [ 314.390932][ T6503] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 314.400210][ T6503] 00000030: 00 00 00 00 4a d4 d4 6c 00 00 18 00 00 00 40 37 ....J..l......@7 [ 314.413060][ T6503] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 314.422928][ T6503] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.432042][ T6503] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.441141][ T6503] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.450206][ T6503] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0xc len 4 error 74 [ 314.461891][ T6503] XFS (loop4): Failed to read root inode 0x1800, error 117 [ 314.469473][ T6503] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 314.486553][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.513362][ T11] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 314.521376][ T11] usb 2-1: can't read configurations, error -71 [ 314.979546][ T5814] Bluetooth: hci5: command tx timeout [ 315.404580][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 317.090139][ T5814] Bluetooth: hci5: command tx timeout [ 317.744917][ T6531] loop1: detected capacity change from 0 to 64 [ 319.139713][ T5814] Bluetooth: hci5: command tx timeout [ 319.178369][ T6538] loop4: detected capacity change from 0 to 256 [ 319.570258][ T6538] FAT-fs (loop4): Directory bread(block 64) failed [ 319.577572][ T6538] FAT-fs (loop4): Directory bread(block 65) failed [ 319.584478][ T6538] FAT-fs (loop4): Directory bread(block 66) failed [ 319.593332][ T6538] FAT-fs (loop4): Directory bread(block 67) failed [ 319.600766][ T6538] FAT-fs (loop4): Directory bread(block 68) failed [ 319.610025][ T6538] FAT-fs (loop4): Directory bread(block 69) failed [ 319.617338][ T6538] FAT-fs (loop4): Directory bread(block 70) failed [ 319.623998][ T6538] FAT-fs (loop4): Directory bread(block 71) failed [ 319.634145][ T6538] FAT-fs (loop4): Directory bread(block 72) failed [ 319.642299][ T6538] FAT-fs (loop4): Directory bread(block 73) failed [ 320.217918][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.225350][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.233274][ T6508] bridge_slave_0: entered allmulticast mode [ 320.248675][ T6508] bridge_slave_0: entered promiscuous mode [ 320.332232][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.378024][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.389559][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.403931][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.419403][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.719385][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.727091][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.734678][ T6508] bridge_slave_1: entered allmulticast mode [ 320.744331][ T6508] bridge_slave_1: entered promiscuous mode [ 321.218459][ T5814] Bluetooth: hci5: command tx timeout [ 321.358658][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.441908][ T6548] binder: 6546:6548 ioctl c0306201 200000000480 returned -22 [ 321.600611][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.755245][ T6553] loop4: detected capacity change from 0 to 512 [ 321.960040][ T6553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.088767][ T6508] team0: Port device team_slave_0 added [ 322.100969][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 322.111947][ T6508] team0: Port device team_slave_1 added [ 322.457134][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 322.502969][ T5822] Bluetooth: hci6: command tx timeout [ 322.583906][ T42] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 322.592678][ T42] usb 2-1: config 0 has no interface number 0 [ 322.605044][ T42] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.617415][ T42] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.072966][ T6555] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 321: padding at end of block bitmap is not set [ 323.154203][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.161432][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.187985][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.343311][ T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 323.352934][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.361383][ T42] usb 2-1: Product: syz [ 323.365780][ T42] usb 2-1: Manufacturer: syz [ 323.370794][ T42] usb 2-1: SerialNumber: syz [ 323.453108][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.690954][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.698437][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.727966][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.127022][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 324.137472][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 324.143760][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 324.151776][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 324.195765][ T6508] hsr_slave_0: entered promiscuous mode [ 324.205021][ T6508] hsr_slave_1: entered promiscuous mode [ 324.214281][ T6508] debugfs: 'hsr0' already exists in 'hsr' [ 324.220667][ T6508] Cannot create hsr debugfs directory [ 324.314304][ T42] usb 2-1: config 0 descriptor?? [ 324.555864][ T42] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 324.607005][ T5818] Bluetooth: hci6: command tx timeout [ 324.773949][ T42] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 324.782374][ T42] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 324.973405][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 325.241836][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 325.309553][ T42] usb 2-1: USB disconnect, device number 8 [ 325.466559][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 325.492866][ T11] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 325.599494][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.608062][ T11] usb 5-1: config 0 has no interface number 0 [ 325.761170][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.770021][ T11] usb 5-1: config 0 has no interface number 0 [ 325.841616][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.850869][ T11] usb 5-1: config 0 has no interface number 0 [ 325.958470][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.966924][ T11] usb 5-1: config 0 has no interface number 0 [ 326.031510][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.040469][ T11] usb 5-1: config 0 has no interface number 0 [ 326.129423][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.137868][ T11] usb 5-1: config 0 has no interface number 0 [ 326.205387][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.213685][ T11] usb 5-1: config 0 has no interface number 0 [ 326.357596][ T11] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.366164][ T11] usb 5-1: config 0 has no interface number 0 [ 326.606944][ T11] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 326.616399][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.624534][ T11] usb 5-1: Product: syz [ 326.629065][ T11] usb 5-1: Manufacturer: syz [ 326.633882][ T11] usb 5-1: SerialNumber: syz [ 326.675190][ T5818] Bluetooth: hci6: command tx timeout [ 326.739408][ T11] usb 5-1: config 0 descriptor?? [ 326.849237][ T11] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 327.234381][ T11] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 327.703467][ T6508] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.903304][ T6508] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.008203][ T6508] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.179784][ T6508] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.190303][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.200587][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.366353][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 328.629818][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 328.629873][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.631497][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.697621][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.705276][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.713444][ T6542] bridge_slave_0: entered allmulticast mode [ 328.723400][ T6542] bridge_slave_0: entered promiscuous mode [ 328.737868][ T5814] Bluetooth: hci6: command tx timeout [ 328.754457][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.763275][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.771268][ T6542] bridge_slave_1: entered allmulticast mode [ 328.781422][ T6542] bridge_slave_1: entered promiscuous mode [ 328.851141][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.861439][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.914642][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.925080][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.010206][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.039691][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.039981][ T6574] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.120'. [ 329.084971][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.205311][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.247894][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.320918][ T4140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.647421][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.743896][ T11] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 329.753097][ T11] usb 2-1: can't read configurations, error -71 [ 329.834119][ T4140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.057106][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.124085][ T4140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.327301][ T5936] usb 5-1: USB disconnect, device number 6 [ 330.335030][ T5936] etas_es58x 5-1:0.2: Disconnecting syz syz [ 330.591015][ T4140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.826971][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.373314][ T5814] Bluetooth: hci3: command tx timeout [ 331.880620][ T6585] loop4: detected capacity change from 0 to 32768 [ 331.895357][ T6585] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.121 (6585) [ 331.931590][ T6585] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 331.942200][ T6585] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 331.975211][ T4140] bridge_slave_1: left allmulticast mode [ 331.981286][ T4140] bridge_slave_1: left promiscuous mode [ 331.987768][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.012448][ T4140] bridge_slave_0: left allmulticast mode [ 332.023160][ T4140] bridge_slave_0: left promiscuous mode [ 332.029677][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.207882][ T6595] loop1: detected capacity change from 0 to 256 [ 332.728415][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.788245][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.803767][ T4140] bond0 (unregistering): Released all slaves [ 332.995086][ T6542] team0: Port device team_slave_0 added [ 333.079627][ T6595] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 333.102280][ T6585] BTRFS info (device loop4): enabling ssd optimizations [ 333.110766][ T6585] BTRFS info (device loop4): enabling free space tree [ 333.165550][ T6542] team0: Port device team_slave_1 added [ 333.500934][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.513636][ T5814] Bluetooth: hci3: command tx timeout [ 333.746995][ T6595] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 333.759611][ T6595] exFAT-fs (loop1): error, failed to bmap (inode : ffff88804af58730 iblock : 8, err : -5) [ 333.786906][ T30] audit: type=1800 audit(1756341856.203:3): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 334.047709][ T6595] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 334.663830][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.671527][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.699920][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.742373][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.804027][ T4140] hsr_slave_0: left promiscuous mode [ 334.811688][ T4140] hsr_slave_1: left promiscuous mode [ 334.822431][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.830833][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.849405][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.859002][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.040191][ T4140] veth1_macvtap: left promiscuous mode [ 335.049070][ T4140] veth0_macvtap: left promiscuous mode [ 335.054871][ T4140] veth1_vlan: left promiscuous mode [ 335.061193][ T4140] veth0_vlan: left promiscuous mode [ 335.541022][ T5812] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 335.562413][ T5814] Bluetooth: hci3: command tx timeout [ 336.220890][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 336.497995][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 336.653061][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 336.980271][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.987591][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.013825][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.195203][ T4828] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.202900][ T4828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.626834][ T5814] Bluetooth: hci3: command tx timeout [ 337.673105][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.680771][ T4828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.070286][ T6542] hsr_slave_0: entered promiscuous mode [ 338.079464][ T6542] hsr_slave_1: entered promiscuous mode [ 338.087752][ T6542] debugfs: 'hsr0' already exists in 'hsr' [ 338.093604][ T6542] Cannot create hsr debugfs directory [ 338.113307][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 338.740094][ T6508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.751306][ T6508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.922445][ T6426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.932383][ T42] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 339.228519][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 339.283071][ T42] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 339.370948][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.379338][ T42] usb 2-1: config 0 has no interface number 0 [ 339.477595][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.485918][ T42] usb 2-1: config 0 has no interface number 0 [ 339.660302][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.668774][ T42] usb 2-1: config 0 has no interface number 0 [ 339.805118][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.813684][ T42] usb 2-1: config 0 has no interface number 0 [ 339.956745][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 339.959654][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.972809][ T42] usb 2-1: config 0 has no interface number 0 [ 340.157553][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.167165][ T42] usb 2-1: config 0 has no interface number 0 [ 340.188158][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 340.277753][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.286357][ T42] usb 2-1: config 0 has no interface number 0 [ 340.393038][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.401984][ T42] usb 2-1: config 0 has no interface number 0 [ 340.460095][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.470282][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.612444][ T42] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 340.627708][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.638004][ T42] usb 2-1: Product: syz [ 340.642434][ T42] usb 2-1: Manufacturer: syz [ 340.647614][ T42] usb 2-1: SerialNumber: syz [ 340.869488][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.998786][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 341.007182][ T9] usb 5-1: can't read configurations, error -71 [ 341.017321][ T42] usb 2-1: config 0 descriptor?? [ 341.247601][ T42] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 341.364996][ T42] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 341.831746][ T6542] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 341.940554][ T6542] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.164201][ T6542] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.332537][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.343001][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.523201][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.533560][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.572521][ T6542] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.717219][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.732534][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.888468][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 342.908314][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.916463][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.924182][ T6577] bridge_slave_0: entered allmulticast mode [ 342.933123][ T6577] bridge_slave_0: entered promiscuous mode [ 343.145313][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.157468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.167578][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.182646][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.192456][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.231960][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.239832][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.247653][ T6577] bridge_slave_1: entered allmulticast mode [ 343.256846][ T6577] bridge_slave_1: entered promiscuous mode [ 343.298323][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.624865][ T11] usb 2-1: USB disconnect, device number 11 [ 343.633209][ T11] etas_es58x 2-1:0.2: Disconnecting syz syz [ 343.683059][ T9] usb 5-1: config 0 descriptor?? [ 344.168964][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.218864][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 344.382880][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.628805][ T6651] loop1: detected capacity change from 0 to 512 [ 344.735618][ T5936] usb 5-1: USB disconnect, device number 9 [ 345.062265][ T6651] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.131: casefold flag without casefold feature [ 345.175338][ T6651] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.131: couldn't read orphan inode 15 (err -117) [ 345.221649][ T6577] team0: Port device team_slave_0 added [ 345.289558][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.362511][ T6577] team0: Port device team_slave_1 added [ 346.333111][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.342000][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.370965][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.538238][ T3539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.544180][ T6667] syz.4.132 uses obsolete (PF_INET,SOCK_PACKET) [ 346.616893][ T6657] fido_id[6657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 346.722073][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.729948][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.756448][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.841853][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.853947][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.943425][ T3539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.432652][ T3539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.054369][ T3539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.362438][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.421426][ T6577] hsr_slave_0: entered promiscuous mode [ 348.437118][ T6577] hsr_slave_1: entered promiscuous mode [ 348.446716][ T6577] debugfs: 'hsr0' already exists in 'hsr' [ 348.452845][ T6577] Cannot create hsr debugfs directory [ 348.498030][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.505617][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.707448][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.715159][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.005314][ T3539] bridge_slave_1: left allmulticast mode [ 349.011582][ T3539] bridge_slave_1: left promiscuous mode [ 349.026395][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.101380][ T3539] bridge_slave_0: left allmulticast mode [ 349.107748][ T3539] bridge_slave_0: left promiscuous mode [ 349.114542][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.922672][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.941417][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 349.993412][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.013650][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.060235][ T3539] bond0 (unregistering): Released all slaves [ 350.167899][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 350.204841][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 350.381118][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.392208][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.437756][ T5869] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.447325][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.461154][ T5869] usb 2-1: Product: syz [ 350.465563][ T5869] usb 2-1: Manufacturer: syz [ 350.472421][ T5869] usb 2-1: SerialNumber: syz [ 350.529565][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 350.546108][ T6508] veth0_vlan: entered promiscuous mode [ 350.587699][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 350.595593][ T24] usb 5-1: can't read configurations, error -71 [ 350.633128][ T5869] usb 2-1: config 0 descriptor?? [ 350.902363][ T5869] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.257837][ T6508] veth1_vlan: entered promiscuous mode [ 351.405769][ T3539] hsr_slave_0: left promiscuous mode [ 351.471608][ T3539] hsr_slave_1: left promiscuous mode [ 351.485196][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.493029][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.578821][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.586560][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.657355][ T5869] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 351.694459][ T5869] usb 2-1: USB disconnect, device number 12 [ 351.792248][ T3539] veth1_macvtap: left promiscuous mode [ 351.798301][ T3539] veth0_macvtap: left promiscuous mode [ 351.804168][ T3539] veth1_vlan: left promiscuous mode [ 351.809712][ T3539] veth0_vlan: left promiscuous mode [ 352.203838][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 352.502696][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 352.521892][ T24] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 352.552485][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.560893][ T24] usb 5-1: config 0 has no interface number 0 [ 352.629564][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.638313][ T24] usb 5-1: config 0 has no interface number 0 [ 352.674742][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.683490][ T24] usb 5-1: config 0 has no interface number 0 [ 352.721583][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 352.751590][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 352.940628][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.949429][ T24] usb 5-1: config 0 has no interface number 0 [ 353.029383][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.038023][ T24] usb 5-1: config 0 has no interface number 0 [ 353.075602][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.084068][ T24] usb 5-1: config 0 has no interface number 0 [ 353.173808][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.182365][ T24] usb 5-1: config 0 has no interface number 0 [ 353.369238][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.377693][ T24] usb 5-1: config 0 has no interface number 0 [ 353.492055][ T24] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 353.502670][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.511129][ T24] usb 5-1: Product: syz [ 353.515502][ T24] usb 5-1: Manufacturer: syz [ 353.524774][ T24] usb 5-1: SerialNumber: syz [ 353.682203][ T24] usb 5-1: config 0 descriptor?? [ 353.710220][ T24] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 353.921788][ T24] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 354.030847][ T6700] netlink: 464 bytes leftover after parsing attributes in process `syz.1.140'. [ 354.173635][ T6508] veth0_macvtap: entered promiscuous mode [ 354.359957][ T6508] veth1_macvtap: entered promiscuous mode [ 354.876634][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.891266][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.901832][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.004838][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.015246][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.036513][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.114403][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.125353][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.321503][ T3820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.428639][ T3820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.499278][ T3820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.635455][ T3820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.915139][ T6577] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.942817][ T6577] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.099400][ T6577] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.270879][ T6577] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 356.722887][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.767856][ T5869] usb 5-1: USB disconnect, device number 12 [ 356.777852][ T5869] etas_es58x 5-1:0.2: Disconnecting syz syz [ 357.881357][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.888269][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.325898][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.757105][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.864855][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.872598][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.916338][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 359.012557][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.020213][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.177721][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 359.523077][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.534525][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.543722][ T5936] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 359.660787][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.701857][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 359.808940][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 359.818457][ T9] usb 5-1: can't read configurations, error -71 [ 359.865753][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 359.918586][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.928945][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.938762][ T5936] usb 2-1: Product: syz [ 359.943154][ T5936] usb 2-1: Manufacturer: syz [ 359.948273][ T5936] usb 2-1: SerialNumber: syz [ 360.130914][ T5936] usb 2-1: config 0 descriptor?? [ 360.473652][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 360.717562][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 361.673283][ T6542] veth0_vlan: entered promiscuous mode [ 361.987279][ T6542] veth1_vlan: entered promiscuous mode [ 362.427033][ T5869] usb 2-1: USB disconnect, device number 13 [ 362.619912][ T6542] veth0_macvtap: entered promiscuous mode [ 362.780086][ T6542] veth1_macvtap: entered promiscuous mode [ 363.519934][ T6765] loop1: detected capacity change from 0 to 32768 [ 363.701268][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.768363][ T6765] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 364.030100][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.158986][ T1149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.350262][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.434520][ T1149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.512108][ T6765] XFS (loop1): Ending clean mount [ 364.527892][ T6765] XFS (loop1): Quotacheck needed: Please wait. [ 364.563284][ T4140] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.702198][ T1149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.759846][ T6765] XFS (loop1): Quotacheck: Done. [ 364.791498][ T6765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 364.840584][ T4140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.866107][ T4140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.899008][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.955492][ T1149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.595889][ T1149] bridge_slave_1: left allmulticast mode [ 365.608079][ T1149] bridge_slave_1: left promiscuous mode [ 365.614804][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.767154][ T1149] bridge_slave_0: left allmulticast mode [ 365.773100][ T1149] bridge_slave_0: left promiscuous mode [ 365.780288][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.268829][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 366.637090][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 366.648038][ T5869] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 366.706397][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.714680][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.831400][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.845275][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.873317][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.890333][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.899590][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.932009][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.939223][ T6794] overlayfs: statfs failed on './file0' [ 366.946304][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.964769][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.983081][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 366.992078][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.993405][ T1149] bond0 (unregistering): Released all slaves [ 367.046911][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.055314][ T5869] usb 2-1: config 0 has no interface number 0 [ 367.131517][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.144453][ T5869] usb 2-1: config 0 has no interface number 0 [ 367.239568][ T5869] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.252385][ T5869] usb 2-1: config 0 has no interface number 0 [ 367.390890][ T5869] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 367.400660][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.409171][ T5869] usb 2-1: Product: syz [ 367.413542][ T5869] usb 2-1: Manufacturer: syz [ 367.418656][ T5869] usb 2-1: SerialNumber: syz [ 367.530335][ T5869] usb 2-1: config 0 descriptor?? [ 367.582050][ T5869] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 367.860146][ T5869] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 368.305115][ T1149] hsr_slave_0: left promiscuous mode [ 368.337117][ T1149] hsr_slave_1: left promiscuous mode [ 368.345300][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.354539][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.454561][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.462459][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.638196][ T1149] veth1_macvtap: left promiscuous mode [ 368.644007][ T1149] veth0_macvtap: left promiscuous mode [ 368.652906][ T1149] veth1_vlan: left promiscuous mode [ 368.659683][ T1149] veth0_vlan: left promiscuous mode [ 368.782745][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.792882][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.930717][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.941909][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.154560][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.164823][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.515270][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 369.634205][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 370.569875][ T6577] veth0_vlan: entered promiscuous mode [ 370.732664][ T6577] veth1_vlan: entered promiscuous mode [ 370.797603][ T5936] usb 2-1: USB disconnect, device number 14 [ 370.806472][ T5936] etas_es58x 2-1:0.2: Disconnecting syz syz [ 371.588362][ T6577] veth0_macvtap: entered promiscuous mode [ 371.639628][ T5936] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 371.709103][ T6577] veth1_macvtap: entered promiscuous mode [ 371.865207][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 371.937013][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 371.947513][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.957406][ T5936] usb 2-1: Product: syz [ 371.961901][ T5936] usb 2-1: Manufacturer: syz [ 371.967267][ T5936] usb 2-1: SerialNumber: syz [ 372.003916][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.119291][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.128846][ T5936] usb 2-1: config 0 descriptor?? [ 372.280260][ T6831] loop4: detected capacity change from 0 to 2048 [ 372.300617][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.372044][ T4260] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.393026][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 372.483041][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.522625][ T6831] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 372.570024][ T1149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.595102][ T6831] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 372.603371][ T6831] UDF-fs: Scanning with blocksize 512 failed [ 372.613719][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 372.717700][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.748416][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.770798][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.799006][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.811382][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.947024][ T6831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.408085][ T24] usb 2-1: USB disconnect, device number 15 [ 374.896798][ T5818] Bluetooth: hci0: command tx timeout [ 375.122167][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 375.148344][ T6858] overlayfs: statfs failed on './file0' [ 375.941896][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.176507][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.422839][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.613740][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.828744][ T5818] Bluetooth: hci4: unexpected event for opcode 0x204e [ 376.978640][ T5818] Bluetooth: hci0: command tx timeout [ 377.971215][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.980406][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.126440][ T35] bridge_slave_1: left allmulticast mode [ 378.132335][ T35] bridge_slave_1: left promiscuous mode [ 378.140151][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.299603][ T35] bridge_slave_0: left allmulticast mode [ 378.308591][ T35] bridge_slave_0: left promiscuous mode [ 378.316785][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.082367][ T5814] Bluetooth: hci0: command tx timeout [ 379.436292][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.487582][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.546246][ T35] bond0 (unregistering): Released all slaves [ 379.801720][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.809958][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.818549][ T6836] bridge_slave_0: entered allmulticast mode [ 379.829051][ T6836] bridge_slave_0: entered promiscuous mode [ 380.077283][ T35] hsr_slave_0: left promiscuous mode [ 380.786783][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.860664][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.881347][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.906601][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.986453][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.047029][ T35] hsr_slave_1: left promiscuous mode [ 381.055378][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.063172][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.141949][ T5818] Bluetooth: hci0: command tx timeout [ 381.239187][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.246929][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.441879][ T35] veth1_macvtap: left promiscuous mode [ 381.447883][ T35] veth0_macvtap: left promiscuous mode [ 381.453804][ T35] veth1_vlan: left promiscuous mode [ 381.460582][ T35] veth0_vlan: left promiscuous mode [ 383.084823][ T5818] Bluetooth: hci1: command tx timeout [ 384.562495][ T35] team0 (unregistering): Port device team_slave_1 removed [ 385.218791][ T35] team0 (unregistering): Port device team_slave_0 removed [ 385.310778][ T5818] Bluetooth: hci1: command tx timeout [ 385.347372][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 385.561511][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.569563][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.579534][ T6836] bridge_slave_1: entered allmulticast mode [ 385.589528][ T6836] bridge_slave_1: entered promiscuous mode [ 385.785096][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 385.808917][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.818836][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.827609][ T24] usb 5-1: Product: syz [ 385.831975][ T24] usb 5-1: Manufacturer: syz [ 385.837248][ T24] usb 5-1: SerialNumber: syz [ 385.862842][ T24] usb 5-1: config 0 descriptor?? [ 386.029252][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.236870][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.633341][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 386.727864][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 386.819339][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.869970][ T6905] 9pnet_fd: Insufficient options for proto=fd [ 387.121072][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.231399][ T6836] team0: Port device team_slave_0 added [ 387.302188][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.387619][ T5818] Bluetooth: hci1: command tx timeout [ 387.400202][ T6836] team0: Port device team_slave_1 added [ 387.533529][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.851771][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.899698][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.960401][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.001657][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.057966][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.085128][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.092563][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.119024][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.139725][ T9] usb 5-1: USB disconnect, device number 15 [ 388.230161][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.241270][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.269307][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.320405][ T35] bridge_slave_1: left allmulticast mode [ 389.328551][ T35] bridge_slave_1: left promiscuous mode [ 389.335238][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.459495][ T5814] Bluetooth: hci1: command tx timeout [ 389.477022][ T35] bridge_slave_0: left allmulticast mode [ 389.482898][ T35] bridge_slave_0: left promiscuous mode [ 389.491289][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.216378][ T5814] Bluetooth: hci5: command tx timeout [ 390.408660][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.483651][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.570716][ T35] bond0 (unregistering): Released all slaves [ 391.078691][ T6836] hsr_slave_0: entered promiscuous mode [ 391.089574][ T6836] hsr_slave_1: entered promiscuous mode [ 391.150075][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 391.185531][ T6940] 9pnet_fd: Insufficient options for proto=fd [ 392.070676][ T35] hsr_slave_0: left promiscuous mode [ 392.091529][ T35] hsr_slave_1: left promiscuous mode [ 392.099750][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.109092][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.138475][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.146409][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.176389][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 392.188189][ T35] veth1_macvtap: left promiscuous mode [ 392.194093][ T35] veth0_macvtap: left promiscuous mode [ 392.200705][ T35] veth1_vlan: left promiscuous mode [ 392.206395][ T35] veth0_vlan: left promiscuous mode [ 392.256485][ T5814] Bluetooth: hci5: command tx timeout [ 392.374693][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 392.434863][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.444517][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.452986][ T9] usb 5-1: Product: syz [ 392.457514][ T9] usb 5-1: Manufacturer: syz [ 392.462316][ T9] usb 5-1: SerialNumber: syz [ 392.546486][ T9] usb 5-1: config 0 descriptor?? [ 392.876381][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.312806][ T35] team0 (unregistering): Port device team_slave_1 removed [ 393.365771][ T35] team0 (unregistering): Port device team_slave_0 removed [ 393.755756][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 393.809501][ T9] usb 5-1: USB disconnect, device number 16 [ 394.084782][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 394.339995][ T5814] Bluetooth: hci5: command tx timeout [ 394.662693][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.670835][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.678925][ T6888] bridge_slave_0: entered allmulticast mode [ 394.693221][ T6888] bridge_slave_0: entered promiscuous mode [ 394.865634][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.873785][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.881761][ T6888] bridge_slave_1: entered allmulticast mode [ 394.895829][ T6888] bridge_slave_1: entered promiscuous mode [ 395.122422][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.442838][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.782521][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.826423][ T5869] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 395.868589][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.878599][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 396.011903][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.056894][ T6972] 9pnet_fd: Insufficient options for proto=fd [ 396.057160][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 396.113363][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.145657][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.157353][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.416608][ T5814] Bluetooth: hci5: command tx timeout [ 396.682637][ T6888] team0: Port device team_slave_0 added [ 396.744795][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 396.847094][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 396.854983][ T5869] usb 2-1: can't read configurations, error -71 [ 397.035305][ T6888] team0: Port device team_slave_1 added [ 397.053555][ T6836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.096926][ T6978] loop4: detected capacity change from 0 to 64 [ 397.342877][ T6836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.904980][ T6836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.024456][ T35] bridge_slave_1: left allmulticast mode [ 398.030706][ T35] bridge_slave_1: left promiscuous mode [ 398.037856][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.161307][ T35] bridge_slave_0: left allmulticast mode [ 398.171450][ T35] bridge_slave_0: left promiscuous mode [ 398.178530][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.995420][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.108148][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.160397][ T35] bond0 (unregistering): Released all slaves [ 399.251801][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.260030][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.286948][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.407033][ T6836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.497577][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 399.564176][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.571855][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.598820][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.686999][ T35] hsr_slave_0: left promiscuous mode [ 399.741297][ T35] hsr_slave_1: left promiscuous mode [ 399.750125][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.757974][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.874450][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.883740][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.175195][ T35] veth1_macvtap: left promiscuous mode [ 400.181269][ T35] veth0_macvtap: left promiscuous mode [ 400.187813][ T35] veth1_vlan: left promiscuous mode [ 400.193551][ T35] veth0_vlan: left promiscuous mode [ 401.456532][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 401.873035][ T35] team0 (unregistering): Port device team_slave_1 removed [ 401.906476][ T35] team0 (unregistering): Port device team_slave_0 removed [ 402.297097][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 402.341577][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 402.351078][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.359566][ T24] usb 2-1: Product: syz [ 402.363923][ T24] usb 2-1: Manufacturer: syz [ 402.371418][ T24] usb 2-1: SerialNumber: syz [ 402.395398][ T24] usb 2-1: config 0 descriptor?? [ 402.735401][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.804621][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.813049][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.821254][ T6910] bridge_slave_0: entered allmulticast mode [ 402.839141][ T6910] bridge_slave_0: entered promiscuous mode [ 403.573604][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.584482][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.593380][ T6910] bridge_slave_1: entered allmulticast mode [ 403.608776][ T6910] bridge_slave_1: entered promiscuous mode [ 403.956673][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 403.982465][ T24] usb 2-1: USB disconnect, device number 18 [ 404.093949][ T6888] hsr_slave_0: entered promiscuous mode [ 404.125194][ T6888] hsr_slave_1: entered promiscuous mode [ 404.134374][ T6888] debugfs: 'hsr0' already exists in 'hsr' [ 404.140514][ T6888] Cannot create hsr debugfs directory [ 404.177987][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.280786][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.825371][ T6910] team0: Port device team_slave_0 added [ 404.895343][ T6910] team0: Port device team_slave_1 added [ 405.023883][ T7001] loop1: detected capacity change from 0 to 64 [ 405.184157][ T7003] can0: slcan on ptm0. [ 405.304742][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.312048][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.339951][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.429192][ T7002] can0 (unregistered): slcan off ptm0. [ 405.587886][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.595149][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.621514][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.658814][ T5817] hfs: walked past end of dir [ 406.084825][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.139118][ T6910] hsr_slave_0: entered promiscuous mode [ 406.149851][ T6910] hsr_slave_1: entered promiscuous mode [ 406.160452][ T6910] debugfs: 'hsr0' already exists in 'hsr' [ 406.166492][ T6910] Cannot create hsr debugfs directory [ 406.414062][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 406.580290][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.912175][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.955235][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.090720][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.297078][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.304650][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.339860][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.479672][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.487345][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.777507][ T6888] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 407.842322][ T6888] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.055223][ T6888] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.219542][ T6888] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.310340][ T35] bridge_slave_1: left allmulticast mode [ 408.316863][ T35] bridge_slave_1: left promiscuous mode [ 408.323558][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.402431][ T35] bridge_slave_0: left allmulticast mode [ 408.411058][ T35] bridge_slave_0: left promiscuous mode [ 408.417952][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.967007][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.052916][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.070559][ T35] bond0 (unregistering): Released all slaves [ 409.318621][ T2231] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 409.512628][ T2231] usb 5-1: Using ep0 maxpacket: 8 [ 409.681494][ T2231] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.691705][ T2231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.701668][ T2231] usb 5-1: Product: syz [ 409.706304][ T2231] usb 5-1: Manufacturer: syz [ 409.711113][ T2231] usb 5-1: SerialNumber: syz [ 409.769342][ T2231] usb 5-1: config 0 descriptor?? [ 410.130325][ T2231] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.182459][ T35] hsr_slave_0: left promiscuous mode [ 410.222450][ T35] hsr_slave_1: left promiscuous mode [ 410.233078][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.241048][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.258189][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.266478][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.344364][ T35] veth1_macvtap: left promiscuous mode [ 410.350670][ T35] veth0_macvtap: left promiscuous mode [ 410.359597][ T35] veth1_vlan: left promiscuous mode [ 410.365360][ T35] veth0_vlan: left promiscuous mode [ 410.374986][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.447186][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.457996][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.472816][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.484967][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.153625][ T2231] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 411.186699][ T2231] usb 5-1: USB disconnect, device number 17 [ 411.353706][ T35] team0 (unregistering): Port device team_slave_1 removed [ 411.393579][ T35] team0 (unregistering): Port device team_slave_0 removed [ 412.578063][ T5818] Bluetooth: hci3: command tx timeout [ 412.646532][ T6910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 412.730624][ T6910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.073036][ T6910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.110389][ T6910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.562561][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.755778][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.990968][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.151651][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 414.194159][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.201795][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.395821][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.403483][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.685029][ T5818] Bluetooth: hci3: command tx timeout [ 414.750916][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.871791][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.991011][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.998706][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.154576][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.162275][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.857919][ T2231] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 416.077626][ T2231] usb 5-1: Using ep0 maxpacket: 16 [ 416.341056][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.352421][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.737209][ T5818] Bluetooth: hci3: command tx timeout [ 416.741470][ T2231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 416.764704][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.772541][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.781056][ T7026] bridge_slave_0: entered allmulticast mode [ 416.826412][ T2231] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 416.834303][ T2231] usb 5-1: can't read configurations, error -71 [ 416.889680][ T7026] bridge_slave_0: entered promiscuous mode [ 416.960458][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.969667][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.977984][ T7026] bridge_slave_1: entered allmulticast mode [ 416.988096][ T7026] bridge_slave_1: entered promiscuous mode [ 417.177227][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.211849][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.463319][ T7026] team0: Port device team_slave_0 added [ 417.577203][ T7026] team0: Port device team_slave_1 added [ 417.811936][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.819417][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.848020][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.914475][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.941202][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.948803][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.975364][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.077953][ T6836] veth0_vlan: entered promiscuous mode [ 418.225363][ T6836] veth1_vlan: entered promiscuous mode [ 418.313044][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.419216][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 418.657233][ T7026] hsr_slave_0: entered promiscuous mode [ 418.668414][ T7026] hsr_slave_1: entered promiscuous mode [ 418.677755][ T7026] debugfs: 'hsr0' already exists in 'hsr' [ 418.683718][ T7026] Cannot create hsr debugfs directory [ 418.801501][ T6836] veth0_macvtap: entered promiscuous mode [ 418.817049][ T5818] Bluetooth: hci3: command tx timeout [ 419.090537][ T6836] veth1_macvtap: entered promiscuous mode [ 419.248775][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.255612][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.278738][ T1675] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 419.390608][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.457001][ T1675] usb 5-1: Using ep0 maxpacket: 8 [ 419.509492][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.583596][ T1675] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.593869][ T1675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.602408][ T1675] usb 5-1: Product: syz [ 419.606874][ T1675] usb 5-1: Manufacturer: syz [ 419.611694][ T1675] usb 5-1: SerialNumber: syz [ 419.645785][ T4035] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.692118][ T4035] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.710802][ T4035] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.769674][ T1675] usb 5-1: config 0 descriptor?? [ 419.801400][ T1328] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.092730][ T1675] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.823523][ T7026] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 420.931019][ T1675] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 420.953450][ T7026] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 421.005885][ T1675] usb 5-1: USB disconnect, device number 20 [ 421.068008][ T6073] udevd[6073]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory [ 421.074997][ T7026] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 421.112111][ T6073] udevd[6073]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory [ 421.190105][ T7026] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 421.505511][ T6888] veth0_vlan: entered promiscuous mode [ 421.669892][ T6910] veth0_vlan: entered promiscuous mode [ 421.695680][ T6888] veth1_vlan: entered promiscuous mode [ 421.824020][ T6910] veth1_vlan: entered promiscuous mode [ 422.299402][ T6888] veth0_macvtap: entered promiscuous mode [ 422.367625][ T6910] veth0_macvtap: entered promiscuous mode [ 422.396453][ T6888] veth1_macvtap: entered promiscuous mode [ 422.475049][ T6910] veth1_macvtap: entered promiscuous mode [ 422.610543][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.760200][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.892299][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.931241][ T4200] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.994649][ T4200] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.039698][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.081334][ T4200] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.200566][ T4200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.250746][ T4200] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.314393][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.356153][ T4200] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.392439][ T4200] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.462391][ T4200] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.610413][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.769357][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.777003][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.945721][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.953398][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.121639][ T7103] loop4: detected capacity change from 0 to 512 [ 424.430051][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.443440][ T7103] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.085803][ T7103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.504195][ T1675] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 426.697805][ T1675] usb 5-1: Using ep0 maxpacket: 16 [ 426.715179][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.858842][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.869173][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.036392][ T1675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.090494][ T1675] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 427.099706][ T1675] usb 5-1: can't read configurations, error -71 [ 428.963183][ T7163] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.212'. [ 429.506114][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.514166][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.842038][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.850375][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.233740][ T7026] veth0_vlan: entered promiscuous mode [ 430.380699][ T7026] veth1_vlan: entered promiscuous mode [ 430.864230][ T7026] veth0_macvtap: entered promiscuous mode [ 430.962374][ T7026] veth1_macvtap: entered promiscuous mode [ 431.399543][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.583626][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.671828][ T3978] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.745589][ T3978] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.823542][ T3978] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.890784][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.411926][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.421078][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.598575][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 432.707719][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.715766][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.732140][ T4828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.740550][ T4828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.917274][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 433.021841][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.031966][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.207038][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 433.245373][ T42] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 433.254541][ T42] usb 7-1: can't read configurations, error -71 [ 433.277217][ T4200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.285276][ T4200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.634841][ T7206] loop8: detected capacity change from 0 to 64 [ 434.207581][ T5869] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 434.397789][ T7217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.219'. [ 434.417873][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.219'. [ 434.500373][ T7217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.219'. [ 434.565738][ T5869] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 434.575675][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.591024][ T5869] usb 8-1: Product: syz [ 434.595441][ T5869] usb 8-1: Manufacturer: syz [ 434.603368][ T5869] usb 8-1: SerialNumber: syz [ 434.789216][ T5869] usb 8-1: config 0 descriptor?? [ 435.092001][ T5869] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.823251][ T7227] loop4: detected capacity change from 0 to 2048 [ 435.907393][ T7228] loop6: detected capacity change from 0 to 2048 [ 436.076480][ T7228] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 436.084686][ T7228] UDF-fs: Scanning with blocksize 512 failed [ 436.160190][ T7233] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.387255][ T7228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.478524][ T7227] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 436.594654][ T7227] Remounting filesystem read-only [ 436.695609][ T5869] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 436.764132][ T7227] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 436.818934][ T5869] usb 8-1: USB disconnect, device number 2 [ 437.209975][ T7238] process 'syz.8.225' launched './file2' with NULL argv: empty string added [ 438.646259][ T5869] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 438.862267][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 438.985648][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.996736][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.079382][ T7255] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.229'. [ 439.142505][ T5869] usb 9-1: unable to get BOS descriptor or descriptor too short [ 439.197308][ T5869] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 439.205184][ T5869] usb 9-1: can't read configurations, error -71 [ 440.998448][ T7277] loop7: detected capacity change from 0 to 2048 [ 441.219729][ T7277] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 441.228105][ T7277] UDF-fs: Scanning with blocksize 512 failed [ 441.401058][ T7277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.850372][ T4828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.858853][ T4828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.015620][ T4828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.033619][ T4828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.521715][ T7302] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.243'. [ 444.769870][ T7317] loop9: detected capacity change from 0 to 2048 [ 444.938882][ T7321] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.112431][ T7317] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 445.183192][ T7317] Remounting filesystem read-only [ 445.290270][ T7317] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 445.916191][ T7333] netlink: 'syz.8.254': attribute type 10 has an invalid length. [ 447.360959][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 447.463423][ T7354] netlink: 'syz.9.263': attribute type 21 has an invalid length. [ 447.471770][ T7354] netlink: 128 bytes leftover after parsing attributes in process `syz.9.263'. [ 447.481459][ T7354] netlink: 3 bytes leftover after parsing attributes in process `syz.9.263'. [ 447.697517][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 447.908529][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.926284][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.010454][ T7350] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.260'. [ 448.129605][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 448.176422][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 448.184309][ T9] usb 8-1: can't read configurations, error -71 [ 448.760209][ T7364] netlink: 'syz.6.265': attribute type 13 has an invalid length. [ 448.768568][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.6.265'. [ 448.778170][ T7364] bond0: entered promiscuous mode [ 448.783428][ T7364] bond_slave_0: entered promiscuous mode [ 448.790500][ T7364] bond_slave_1: entered promiscuous mode [ 448.797583][ T7364] bond0: entered allmulticast mode [ 448.802931][ T7364] bond_slave_0: entered allmulticast mode [ 448.809012][ T7364] bond_slave_1: entered allmulticast mode [ 448.972608][ T7366] loop8: detected capacity change from 0 to 2048 [ 449.256725][ T7366] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 449.272641][ T7366] UDF-fs: Scanning with blocksize 512 failed [ 449.463751][ T7366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.906869][ T7366] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 53248 lbcount: 57344 extent 65+26624 [ 449.947481][ T7372] loop7: detected capacity change from 0 to 2048 [ 450.763020][ T7377] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.897987][ T7372] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12 [ 450.987893][ T7372] Remounting filesystem read-only [ 454.260082][ T7424] loop8: detected capacity change from 0 to 2048 [ 454.469171][ T7433] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.606527][ T7424] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12 [ 454.720982][ T7424] Remounting filesystem read-only [ 456.680041][ T7463] ===================================================== [ 456.687502][ T7463] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 456.694863][ T7463] batadv_get_vid+0x2d0/0x3b0 [ 456.699981][ T7463] batadv_interface_tx+0x2e9/0x1e60 [ 456.705426][ T7463] dev_hard_start_xmit+0x22f/0xa30 [ 456.710901][ T7463] __dev_queue_xmit+0x3c51/0x5e60 [ 456.716293][ T7463] __bpf_redirect+0x162d/0x1760 [ 456.721376][ T7463] bpf_clone_redirect+0x366/0x530 [ 456.726842][ T7463] ___bpf_prog_run+0x1297/0xeba0 [ 456.732138][ T7463] __bpf_prog_run512+0xc5/0x100 [ 456.737435][ T7463] bpf_test_run+0x353/0xab0 [ 456.742171][ T7463] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 456.747967][ T7463] bpf_prog_test_run+0x5bf/0xa40 [ 456.753094][ T7463] __sys_bpf+0x89a/0xed0 [ 456.757661][ T7463] __x64_sys_bpf+0xa4/0xf0 [ 456.762316][ T7463] x64_sys_call+0x3550/0x3e20 [ 456.767362][ T7463] do_syscall_64+0xd9/0x210 [ 456.772097][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.778349][ T7463] [ 456.780772][ T7463] Uninit was created at: [ 456.785313][ T7463] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 456.791590][ T7463] kmalloc_reserve+0x13c/0x4b0 [ 456.796683][ T7463] pskb_expand_head+0x1fc/0x1610 [ 456.801862][ T7463] skb_ensure_writable+0x44e/0x510 [ 456.807409][ T7463] bpf_clone_redirect+0x1c1/0x530 [ 456.812668][ T7463] ___bpf_prog_run+0x1297/0xeba0 [ 456.817918][ T7463] __bpf_prog_run512+0xc5/0x100 [ 456.823009][ T7463] bpf_test_run+0x353/0xab0 [ 456.827845][ T7463] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 456.833522][ T7463] bpf_prog_test_run+0x5bf/0xa40 [ 456.838800][ T7463] __sys_bpf+0x89a/0xed0 [ 456.843318][ T7463] __x64_sys_bpf+0xa4/0xf0 [ 456.848075][ T7463] x64_sys_call+0x3550/0x3e20 [ 456.853026][ T7463] do_syscall_64+0xd9/0x210 [ 456.857907][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.864010][ T7463] [ 456.866603][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.7.302 Not tainted syzkaller #0 PREEMPT(none) [ 456.876145][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.886489][ T7463] ===================================================== [ 456.893536][ T7463] Disabling lock debugging due to kernel taint [ 456.900036][ T7463] Kernel panic - not syncing: kmsan.panic set ... [ 456.906635][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.7.302 Tainted: G B syzkaller #0 PREEMPT(none) [ 456.917630][ T7463] Tainted: [B]=BAD_PAGE [ 456.921906][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.932133][ T7463] Call Trace: [ 456.935559][ T7463] [ 456.938612][ T7463] __dump_stack+0x26/0x30 [ 456.943177][ T7463] dump_stack_lvl+0x53/0x270 [ 456.948051][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 456.954230][ T7463] dump_stack+0x1e/0x25 [ 456.958658][ T7463] vpanic+0x361/0xc50 [ 456.962928][ T7463] panic+0x15d/0x160 [ 456.967137][ T7463] kmsan_report+0x31c/0x320 [ 456.971875][ T7463] ? __msan_warning+0x1b/0x30 [ 456.976753][ T7463] ? batadv_get_vid+0x2d0/0x3b0 [ 456.981822][ T7463] ? batadv_interface_tx+0x2e9/0x1e60 [ 456.987435][ T7463] ? dev_hard_start_xmit+0x22f/0xa30 [ 456.992946][ T7463] ? __dev_queue_xmit+0x3c51/0x5e60 [ 456.998380][ T7463] ? __bpf_redirect+0x162d/0x1760 [ 457.003634][ T7463] ? bpf_clone_redirect+0x366/0x530 [ 457.009062][ T7463] ? ___bpf_prog_run+0x1297/0xeba0 [ 457.014374][ T7463] ? __bpf_prog_run512+0xc5/0x100 [ 457.019596][ T7463] ? bpf_test_run+0x353/0xab0 [ 457.024450][ T7463] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 457.030264][ T7463] ? bpf_prog_test_run+0x5bf/0xa40 [ 457.035540][ T7463] ? __sys_bpf+0x89a/0xed0 [ 457.040095][ T7463] ? __x64_sys_bpf+0xa4/0xf0 [ 457.045411][ T7463] ? x64_sys_call+0x3550/0x3e20 [ 457.050473][ T7463] ? do_syscall_64+0xd9/0x210 [ 457.055375][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.061637][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.066952][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.072959][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.078261][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.084270][ T7463] ? batadv_interface_tx+0xa1/0x1e60 [ 457.089756][ T7463] ? filter_irq_stacks+0x49/0x190 [ 457.095033][ T7463] ? stack_depot_save_flags+0x35/0x7b0 [ 457.100742][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.106070][ T7463] __msan_warning+0x1b/0x30 [ 457.110748][ T7463] batadv_get_vid+0x2d0/0x3b0 [ 457.115617][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.121664][ T7463] batadv_interface_tx+0x2e9/0x1e60 [ 457.127070][ T7463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 457.133580][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.138872][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.144880][ T7463] ? __pfx_batadv_interface_tx+0x10/0x10 [ 457.150715][ T7463] dev_hard_start_xmit+0x22f/0xa30 [ 457.156082][ T7463] __dev_queue_xmit+0x3c51/0x5e60 [ 457.161337][ T7463] ? skb_release_data+0xa12/0xac0 [ 457.166562][ T7463] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 457.173006][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.178320][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.184322][ T7463] ? __dev_queue_xmit+0x30c/0x5e60 [ 457.189660][ T7463] __bpf_redirect+0x162d/0x1760 [ 457.194712][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.200027][ T7463] bpf_clone_redirect+0x366/0x530 [ 457.205281][ T7463] ___bpf_prog_run+0x1297/0xeba0 [ 457.210427][ T7463] __bpf_prog_run512+0xc5/0x100 [ 457.215471][ T7463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 457.222076][ T7463] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 457.228573][ T7463] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 457.234741][ T7463] ? kmsan_slab_alloc+0xde/0x160 [ 457.239875][ T7463] ? kmem_cache_alloc_noprof+0x81b/0xec0 [ 457.245842][ T7463] ? slab_build_skb+0x5c/0x590 [ 457.250806][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.256112][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.262166][ T7463] ? bpf_test_run+0x71/0xab0 [ 457.266946][ T7463] ? filter_irq_stacks+0x49/0x190 [ 457.272229][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.278249][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.283544][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.288839][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.294134][ T7463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 457.300645][ T7463] ? kmsan_get_metadata+0x150/0x160 [ 457.306115][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.312119][ T7463] ? __pfx___bpf_prog_run512+0x10/0x10 [ 457.317762][ T7463] ? __pfx___bpf_prog_run512+0x10/0x10 [ 457.323389][ T7463] bpf_test_run+0x353/0xab0 [ 457.328073][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.333399][ T7463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 457.339948][ T7463] ? kmsan_get_metadata+0xfb/0x160 [ 457.345269][ T7463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 457.351278][ T7463] ? bpf_test_run+0x1b0/0xab0 [ 457.356181][ T7463] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 457.361907][ T7463] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 457.367925][ T7463] bpf_prog_test_run+0x5bf/0xa40 [ 457.373095][ T7463] __sys_bpf+0x89a/0xed0 [ 457.377543][ T7463] __x64_sys_bpf+0xa4/0xf0 [ 457.382179][ T7463] x64_sys_call+0x3550/0x3e20 [ 457.387081][ T7463] do_syscall_64+0xd9/0x210 [ 457.391784][ T7463] ? irqentry_exit+0x16/0x60 [ 457.396569][ T7463] ? clear_bhb_loop+0x40/0x90 [ 457.401432][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.407522][ T7463] RIP: 0033:0x7ff44578ebe9 [ 457.412070][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.432477][ T7463] RSP: 002b:00007ff4466a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.441099][ T7463] RAX: ffffffffffffffda RBX: 00007ff4459b5fa0 RCX: 00007ff44578ebe9 [ 457.449232][ T7463] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 457.457486][ T7463] RBP: 00007ff445811e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.465724][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.473847][ T7463] R13: 00007ff4459b6038 R14: 00007ff4459b5fa0 R15: 00007fffc24fdc68 [ 457.482008][ T7463] [ 457.485434][ T7463] Kernel Offset: disabled [ 457.489853][ T7463] Rebooting in 86400 seconds..