last executing test programs: 1m12.572460181s ago: executing program 1 (id=2361): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1m12.140027636s ago: executing program 1 (id=2363): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x38ac1a, &(0x7f00000002c0)={[], [{@uid_gt}, {@fsname={'fsname', 0x3d, 'smackfshat'}}]}, 0x1, 0x4b8, &(0x7f0000004700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() capset(&(0x7f0000000180)={0x0, r1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0) poll(0x0, 0x0, 0x8c) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x20000800}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 1m11.385163611s ago: executing program 1 (id=2365): r0 = syz_io_uring_setup(0x2928, &(0x7f0000000080), &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001340)=""/102378, 0x7706c522012798af) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x8, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}], 0x1) 1m10.641716284s ago: executing program 1 (id=2368): socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.240072838s ago: executing program 0 (id=2369): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000400)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mlock2(&(0x7f00006f7000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x14) 1m9.939780598s ago: executing program 2 (id=2371): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x5411, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x5f, 0x30, 0x2e, 0x0, 0x0]}}, &(0x7f00000003c0)=""/3, 0x33, 0x3, 0x1, 0x9}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000440)={0x2, 0xffffffff}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x9, 0xfffffffc}, 0x10}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x177, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000100)="9ef99c7569af3551c96010e5e3cab4184e5e82"}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000006800010000000000000000000a0000000000000018000880340001000000000000000000000004000000000008000500", @ANYRES32=r9, @ANYBLOB="0600070003"], 0x40}}, 0x0) 1m8.882348358s ago: executing program 0 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa4601, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f00000004c0)={0xa8, 0x0, 0x1}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x0, 0x84) sendto$inet(r8, &(0x7f00000000c0)="18", 0x1, 0x0, 0x0, 0x0) io_setup(0x22, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r9, 0x0) listen(r9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m6.045003303s ago: executing program 4 (id=2373): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1m5.041434309s ago: executing program 4 (id=2375): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nodiscard}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@barrier}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfd14) sendfile(r0, r0, 0x0, 0x80000001) 1m2.788933326s ago: executing program 2 (id=2376): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket(0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x0, 0x103, 0x3, 0x1, 0xfffffffe}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x6c}}, 0x4000800) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) 1m1.003298542s ago: executing program 4 (id=2377): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) 1m0.264919969s ago: executing program 4 (id=2380): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x131) socket$inet_sctp(0x2, 0x0, 0x84) getsockname$netlink(r2, 0x0, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r2, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000780)={'gre0\x00', 0x0}) connect$packet(r2, &(0x7f00000009c0)={0x11, 0x1b, 0x0, 0x1, 0x13, 0x6, @remote}, 0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RLCREATE(r3, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x0, 0x3}}}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x13, 0x0, 0x38) 58.946292201s ago: executing program 4 (id=2381): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)="c5"}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xb) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x10000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x111}}, 0x20) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) socket$kcm(0x29, 0x5, 0x0) 11.258412972s ago: executing program 1 (id=2379): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x10001}}) 10.516404509s ago: executing program 1 (id=2407): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$fb(r1, 0x0, 0x0) fstat(r0, &(0x7f0000000580)) r2 = socket(0x1e, 0x4, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x0, 0xa, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, 0x4a) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)=0x6) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) map_shadow_stack(&(0x7f00004fd000/0x4000)=nil, 0x4000, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000180)) connect$can_bcm(r8, &(0x7f0000000480), 0x10) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f00000000c0), 0x0, 0x111d, &(0x7f0000001480)="$eJzs2LFqFEEcBvBv9k7NobBy6RcLCwsJkbNWUyhca6uNSipT5SpFMA9jY+eDaCr7kF6LPMHK3eayCOFUkrPQ3w+Wmf3PNzsz5U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbph8K8lmlYyXtSpJSZrmcHqcpFnWb34eVCl5ujudPd6fPJl1sVQpz5Iyn5Xy8UGXnYwn43vj+5s7t7/M3rx9/WJvb3d/MfDyekmTo5NLPcUop3sZrAjNN7hxlgYAAID/R3th9e8t9OnGmtYHAAAAfuVybxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lxb9/2ry06VpCRNczg9TtKcM+/KX9ofAAAAcHElVZ7X59W7a4De3Xyty1m97Tyssp0PdUaLyLBPV6sWXTkIAAAA/7z22qK5lXLQ/yaX933gToZ9fZEcZmurez9t8n0nGeRgY/vnb48eJTk6efdq/pR2sO6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAADAXgEAAP//1gXd9g==") 7.37558058s ago: executing program 0 (id=2382): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x2001095, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x10a1b4, &(0x7f0000000e00)={[{@nouid32}, {@nodiscard}, {@data_err_abort}, {@noauto_da_alloc}, {@noinit_itable}, {@lazytime}, {@usrquota}, {@errors_continue}, {@data_err_ignore}, {@nobarrier}, {@dioread_nolock}, {@jqfmt_vfsold}]}, 0x11, 0x472, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r6, 0x5423, &(0x7f0000000040)=0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000002c0)) 6.62443882s ago: executing program 3 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@remote, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @dev}}}}}}, 0x2e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) 5.678292671s ago: executing program 3 (id=2413): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@uid_forget}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x42efa2f8}}, {@noadinicb}, {@longad}, {@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x4}}]}, 0xfe, 0xc39, &(0x7f0000000240)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.39226594s ago: executing program 2 (id=2386): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000200)={@loopback, @remote, @local}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfefc) r6 = syz_open_dev$dmmidi(&(0x7f00000019c0), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000000)={0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 3.77337976s ago: executing program 3 (id=2414): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000440)=[@increfs_done], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d09da4d", "bc3a20b10f4ad11e"}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00009f08a0987f2b3f64d220513438d6d0fba7b272ab3ee9489d9c355c1600000000", @ANYRES32=0x0, @ANYBLOB="14000500fe8000"/20], 0x3c}}, 0x0) 3.315875332s ago: executing program 2 (id=2415): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, 0x0, 0x0) 2.747748754s ago: executing program 0 (id=2416): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @ext={0x1, &(0x7f0000000080)="1b"}}], 0x1c) 2.567316671s ago: executing program 2 (id=2417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac36b12d2a7", "e8582492a0ce0500046d832f001ad89b6800000002080000110000ebff00", "75249783", "dfa27021fe106750"}, 0x38) sendfile(r0, r1, &(0x7f0000000100), 0x10001) 2.517626001s ago: executing program 3 (id=2418): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2056) 2.118522787s ago: executing program 0 (id=2419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.79031762s ago: executing program 2 (id=2420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002078020000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000f000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f0000001980)=ANY=[@ANYBLOB='discard,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6370ddc0b6b2e856d3cc1a3835372c6572726f72733d72656d6f756e742d726f2c00"], 0x3, 0x1507, &(0x7f0000000440)="$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") 1.467706945s ago: executing program 3 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x408}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = dup(r1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 1.065006634s ago: executing program 0 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x1003000, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,size=0']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ftruncate(r4, 0x8979) writev(r4, &(0x7f0000002940)=[{0x0}], 0x1) ftruncate(r3, 0x8979) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xffffff66) 118.822897ms ago: executing program 4 (id=2390): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x17a, &(0x7f0000000480)="$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") chdir(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000001a00)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) getdents(r1, &(0x7f00000001c0)=""/233, 0xe9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000680)={[{@data_err_abort}, {@noblock_validity}, {@block_validity}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4b9, &(0x7f0000000c80)="$eJzs3M1vFOUfAPDvTF8ory38+P1+8qKsorERbWlB5eBBjSZcTEz0gMdaKkEKGFoTIUSKMXg0/gXq0cTEkxdPmhijnjRe9W5MiOECejA1sztDZ9kXt9uWCvv5JLt9npl59nm+M/PsPjtPZwPoWZXsKYnYEhE/R8RwLVu/QaX258a1i9N/XLs4ncTi4ku/J9Xtrl+7OF1sWpTbnGdG04j03ST2NKl37vyFU1OzszPn8vz4/Ok3xufOX3js5OmpEzMnZs5MHjly+NDEk09MPr4qcWZxXd/99tm9u46+8sEL04vx6nefZu3dkq8vx1EzsuI6K1EZiojFzNLSwerzQyt+9X+XraV00r+ODWFZ+iIiO1wD1f4/HH2xdPCG4/l3bma+XqcGAmsm+2za3rC0L/+b1j68gLtUoo9Djyo+8bPvv8Xjdo4/1tvVZ7LnmWr8N/JHbU1/pNl32ZHaN/a+FuX/t8L6t0TEsYU/P8we0fQ6BADA6voyG/882mz8l9aNbbblcygjEXEgInZExH8iYmdE/DcfB/0/Iu5ZZv2VW/KN458fN3YVWIey8d9T+dxW/fgvzbdIbua2VuMfSF47OTtzMN8nozGwIctPtKnjq+d+er/Vukpp/Jc9svqLsWDejt/6N9SXOT41P7WCkOtcvRyxu79Z/MnNmYBsD+yKiN1dvH62z04+8sneLL1tc+P6xvizkXY5/jZWYZ5p8eOIh2vHfyFuib+Q1GpqNT85PhSzMwfHi7Oi0fc/XHmxnB8opeviH+ospqFug20iO/6bmp7/efxFNyjma+eWX8eVX95r+Z2m8fgncWyhvEV+/pfeBbLzfzB5uZoezJe9NTU/f24iYjBfULd8cqlskS+2z+If3d+8/++I+OujvNyeiMhO4nsj4r6I2Je3/f6IeCAi9reJ/9tnH3y9/R5q1//XVhb/8XbHP2IkKc/Xd5HoO/XNF63q7+z973A1NZov6eT9r9MGrmTfAQAAwJ0irc5BJ+lYkS5dnNoZm9LZs3PzByrx5pnjtbnqkRhIiytdw6XroRP5teEiP3lL/lBEbK/+p9HGan5s+uzs1vUMHKjeq1PX/yNNx8Zq635t9U8vwN1jWfNo5bsDP/t89RsD3Fbu14Tepf9D79L/oXfp/9C7mvX/SxE31qEpwG3m8x96l/4PvUv/h96l/0NParwlvvihhW7u9F9K7Di6ouJrnlgcXpNXXlh+qb6585fXItIo/2hHy0QSEd1VEWn7bQY7qP3c3KX1OQHSf9zm6S53yzIS+/LEhojotNSljvbqap0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd76/AwAA//8zudg1") openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x40000, 0x48) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r6, 0x0, &(0x7f0000000280)) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x440b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xcee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[@ANYBLOB='nodiscard,order=strict,nobarrier,norecovery,discard,discard,nobrrrier,nobarrier,nobarrier,\x00'], 0x1, 0xa88, &(0x7f0000001540)="$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") mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 0s ago: executing program 3 (id=2424): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 159.022304][ T5156] cgroup: Unknown subsys name 'net' [ 159.193258][ T5156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 204.309892][ T5156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.470662][ T5175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.480660][ T5175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.490054][ T5175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.539278][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.547895][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.560025][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.568513][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.577524][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.587528][ T5187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.597561][ T5187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.607089][ T5187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.618234][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.622164][ T5181] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.627657][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.634570][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.650197][ T5190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.656851][ T5181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.666207][ T5192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.677917][ T5189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.678321][ T5190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.695987][ T5189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.707249][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.719327][ T5181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.728010][ T5190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.732098][ T5189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.737202][ T5190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.747384][ T5189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.769131][ T5189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.795682][ T5190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.807028][ T5190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.121689][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 211.262496][ T5180] chnl_net:caif_netlink_parms(): no params data found [ 211.681501][ T5178] chnl_net:caif_netlink_parms(): no params data found [ 211.811393][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 211.845947][ T5185] Bluetooth: hci2: command tx timeout [ 211.851695][ T5189] Bluetooth: hci3: command tx timeout [ 211.855948][ T5190] Bluetooth: hci1: command tx timeout [ 211.859442][ T5189] Bluetooth: hci0: command tx timeout [ 211.924635][ T5189] Bluetooth: hci4: command tx timeout [ 212.117451][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 212.145750][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.153513][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.161510][ T5180] bridge_slave_0: entered allmulticast mode [ 212.170896][ T5180] bridge_slave_0: entered promiscuous mode [ 212.231740][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.239742][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.247812][ T5180] bridge_slave_1: entered allmulticast mode [ 212.256902][ T5180] bridge_slave_1: entered promiscuous mode [ 212.458444][ T5180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.527117][ T5180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.762604][ T5180] team0: Port device team_slave_0 added [ 212.852790][ T5180] team0: Port device team_slave_1 added [ 212.868881][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.878404][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.886271][ T5177] bridge_slave_0: entered allmulticast mode [ 212.895369][ T5177] bridge_slave_0: entered promiscuous mode [ 213.029733][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.037881][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.045700][ T5177] bridge_slave_1: entered allmulticast mode [ 213.053787][ T5177] bridge_slave_1: entered promiscuous mode [ 213.129654][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.139432][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.147330][ T5174] bridge_slave_0: entered allmulticast mode [ 213.156395][ T5174] bridge_slave_0: entered promiscuous mode [ 213.170190][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.177623][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.203916][ T5180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.409616][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.418234][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.426073][ T5174] bridge_slave_1: entered allmulticast mode [ 213.434035][ T5174] bridge_slave_1: entered promiscuous mode [ 213.445457][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.452731][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.479788][ T5180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.501229][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.512044][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.520436][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.528231][ T5188] bridge_slave_0: entered allmulticast mode [ 213.537427][ T5188] bridge_slave_0: entered promiscuous mode [ 213.548432][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.556281][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.563971][ T5178] bridge_slave_0: entered allmulticast mode [ 213.572952][ T5178] bridge_slave_0: entered promiscuous mode [ 213.666431][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.685629][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.698164][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.706074][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.713816][ T5188] bridge_slave_1: entered allmulticast mode [ 213.723482][ T5188] bridge_slave_1: entered promiscuous mode [ 213.732367][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.740305][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.748144][ T5178] bridge_slave_1: entered allmulticast mode [ 213.757331][ T5178] bridge_slave_1: entered promiscuous mode [ 213.807464][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.934465][ T5189] Bluetooth: hci0: command tx timeout [ 213.935509][ T5185] Bluetooth: hci2: command tx timeout [ 213.940069][ T5189] Bluetooth: hci1: command tx timeout [ 213.947165][ T51] Bluetooth: hci3: command tx timeout [ 214.016859][ T51] Bluetooth: hci4: command tx timeout [ 214.065531][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.085717][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.108321][ T5177] team0: Port device team_slave_0 added [ 214.155483][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.170958][ T5174] team0: Port device team_slave_0 added [ 214.248488][ T5177] team0: Port device team_slave_1 added [ 214.297288][ T5174] team0: Port device team_slave_1 added [ 214.313829][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.336028][ T5180] hsr_slave_0: entered promiscuous mode [ 214.345364][ T5180] hsr_slave_1: entered promiscuous mode [ 214.422072][ T5178] team0: Port device team_slave_0 added [ 214.526445][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.533612][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.559982][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.579646][ T5178] team0: Port device team_slave_1 added [ 214.589354][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.599005][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.625366][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.703431][ T5188] team0: Port device team_slave_0 added [ 214.763893][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.771653][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.798100][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.831338][ T5188] team0: Port device team_slave_1 added [ 214.919150][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.927769][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.954211][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.968816][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.976237][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.002468][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.110737][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.118067][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.144599][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.239405][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.246801][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.273580][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.290292][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.297782][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.324331][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.432735][ T5177] hsr_slave_0: entered promiscuous mode [ 215.442406][ T5177] hsr_slave_1: entered promiscuous mode [ 215.451191][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.460232][ T5177] Cannot create hsr debugfs directory [ 215.600403][ T5174] hsr_slave_0: entered promiscuous mode [ 215.611745][ T5174] hsr_slave_1: entered promiscuous mode [ 215.620352][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.628286][ T5174] Cannot create hsr debugfs directory [ 215.815464][ T5178] hsr_slave_0: entered promiscuous mode [ 215.827552][ T5178] hsr_slave_1: entered promiscuous mode [ 215.836274][ T5178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.843971][ T5178] Cannot create hsr debugfs directory [ 216.004733][ T51] Bluetooth: hci3: command tx timeout [ 216.010629][ T51] Bluetooth: hci2: command tx timeout [ 216.014565][ T5190] Bluetooth: hci1: command tx timeout [ 216.016688][ T5185] Bluetooth: hci0: command tx timeout [ 216.091013][ T5185] Bluetooth: hci4: command tx timeout [ 216.171877][ T5188] hsr_slave_0: entered promiscuous mode [ 216.182156][ T5188] hsr_slave_1: entered promiscuous mode [ 216.191848][ T5188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.199825][ T5188] Cannot create hsr debugfs directory [ 216.487491][ T5180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.603005][ T5180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.743162][ T5180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.805001][ T5180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.238203][ T5177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.279792][ T5177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.311123][ T5177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.347973][ T5177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.474554][ T5174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.508820][ T5174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.535814][ T5174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.561686][ T5174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.796572][ T5178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.890029][ T5178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.930299][ T5188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.953934][ T5188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.993832][ T5188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.034809][ T5178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.057447][ T5178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.095306][ T5185] Bluetooth: hci0: command tx timeout [ 218.100955][ T5185] Bluetooth: hci2: command tx timeout [ 218.106806][ T5189] Bluetooth: hci1: command tx timeout [ 218.112587][ T5189] Bluetooth: hci3: command tx timeout [ 218.128892][ T5188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.166312][ T5189] Bluetooth: hci4: command tx timeout [ 218.527811][ T5180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.758376][ T5180] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.881977][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.953992][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.961842][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.054347][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.062030][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.109067][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.140959][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.147844][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.170170][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.177992][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.310429][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.318321][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.633738][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.700740][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.824728][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.941603][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.031310][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.108748][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.116598][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.160023][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.211963][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.219893][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.239023][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.246821][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.483821][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.491657][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.513829][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.521658][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.547509][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.555434][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.700003][ T5188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.710853][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.741843][ T5174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.754979][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.935305][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.221731][ T5180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.459710][ T5177] veth0_vlan: entered promiscuous mode [ 222.608391][ T5177] veth1_vlan: entered promiscuous mode [ 222.670283][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.979361][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.068789][ T5177] veth0_macvtap: entered promiscuous mode [ 223.143194][ T5177] veth1_macvtap: entered promiscuous mode [ 223.221833][ T5188] veth0_vlan: entered promiscuous mode [ 223.409789][ T5188] veth1_vlan: entered promiscuous mode [ 223.433627][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.506979][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.631682][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.701324][ T5177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.710582][ T5177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.719990][ T5177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.729264][ T5177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.936904][ T5188] veth0_macvtap: entered promiscuous mode [ 223.957725][ T5174] veth0_vlan: entered promiscuous mode [ 224.066639][ T5188] veth1_macvtap: entered promiscuous mode [ 224.178599][ T5174] veth1_vlan: entered promiscuous mode [ 224.341027][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.353048][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.368631][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.456670][ T5178] veth0_vlan: entered promiscuous mode [ 224.552823][ T5174] veth0_macvtap: entered promiscuous mode [ 224.588659][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.600504][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.618810][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.643729][ T5178] veth1_vlan: entered promiscuous mode [ 224.669112][ T5174] veth1_macvtap: entered promiscuous mode [ 224.728743][ T5188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.737971][ T5188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.747199][ T5188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.756329][ T5188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.958674][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.970738][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.981000][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.991811][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.007171][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.169580][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.180456][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.190647][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.201436][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.216811][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.261529][ T5178] veth0_macvtap: entered promiscuous mode [ 225.312061][ T5178] veth1_macvtap: entered promiscuous mode [ 225.490809][ T5180] veth0_vlan: entered promiscuous mode [ 225.520453][ T5174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.532210][ T5174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.542326][ T5174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.551556][ T5174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.579497][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.590429][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.602315][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.616430][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.627937][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.638812][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.654028][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.735367][ T5180] veth1_vlan: entered promiscuous mode [ 225.903023][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.913850][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.924850][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.935591][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.946192][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.957064][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.972211][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.162763][ T5178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.179097][ T5178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.190277][ T5178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.200991][ T5178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.243074][ T5180] veth0_macvtap: entered promiscuous mode [ 226.313125][ T5180] veth1_macvtap: entered promiscuous mode [ 226.529906][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.540973][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.551242][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.562075][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.576435][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.589018][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.599209][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.610062][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.629934][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.723447][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.735513][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.750643][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.762070][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.772348][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.783202][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.793526][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.808449][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.825322][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.877359][ T5180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.887424][ T5180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.897239][ T5180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.906450][ T5180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.557464][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.566330][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.798752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.809368][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.305626][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.313762][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.550220][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.559494][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.581415][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.589615][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.010749][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.019314][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.030371][ T2526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.038446][ T2526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.103766][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.112569][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.427442][ T2526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.435974][ T2526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.444003][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.452325][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.497041][ T5465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.631168][ T5465] fuse: Unknown parameter '$`' [ 242.369660][ T5480] ======================================================= [ 242.369660][ T5480] WARNING: The mand mount option has been deprecated and [ 242.369660][ T5480] and is ignored by this kernel. Remove the mand [ 242.369660][ T5480] option from the mount to silence this warning. [ 242.369660][ T5480] ======================================================= [ 242.814766][ T5487] syz.1.52[5487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.815681][ T5487] syz.1.52[5487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.257808][ T5510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.486730][ T5569] syzkaller0: entered promiscuous mode [ 248.526287][ T5567] syzkaller0: left promiscuous mode [ 252.065339][ T1063] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 252.337304][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.348754][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.359151][ T1063] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 252.368745][ T1063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.455482][ T1063] usb 4-1: config 0 descriptor?? [ 252.498598][ T5628] loop1: detected capacity change from 0 to 64 [ 252.674349][ C0] hrtimer: interrupt took 204140 ns [ 252.710470][ T5628] minix_free_block (loop1:2): bit already cleared [ 252.717746][ T5628] minix_free_block (loop1:3): bit already cleared [ 252.724619][ T5628] minix_free_block (loop1:4): bit already cleared [ 252.859311][ T5628] minix_free_block (loop1:2): bit already cleared [ 252.866419][ T5628] minix_free_block (loop1:3): bit already cleared [ 252.873051][ T5628] minix_free_block (loop1:4): bit already cleared [ 252.988450][ T1063] usbhid 4-1:0.0: can't add hid device: -71 [ 252.995285][ T1063] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 253.108160][ T1063] usb 4-1: USB disconnect, device number 2 [ 253.494712][ T4883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.764731][ T4883] usb 1-1: Using ep0 maxpacket: 16 [ 253.805876][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.817277][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.827584][ T4883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.848611][ T4883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.861188][ T4883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.872124][ T4883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 253.957158][ T4883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.966677][ T4883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.975126][ T4883] usb 1-1: Product: syz [ 253.979529][ T4883] usb 1-1: Manufacturer: syz [ 253.984532][ T4883] usb 1-1: SerialNumber: syz [ 254.280773][ T4883] cdc_ncm 1-1:1.0: bind() failure [ 254.297727][ T4883] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 254.305018][ T4883] cdc_ncm 1-1:1.1: bind() failure [ 254.465677][ T4883] usb 1-1: USB disconnect, device number 2 [ 254.512224][ T5650] Zero length message leads to an empty skb [ 255.648139][ T5665] loop4: detected capacity change from 0 to 64 [ 255.906387][ T5665] minix_free_block (loop4:2): bit already cleared [ 255.913066][ T5665] minix_free_block (loop4:3): bit already cleared [ 255.919963][ T5665] minix_free_block (loop4:4): bit already cleared [ 256.013962][ T5665] minix_free_block (loop4:2): bit already cleared [ 256.020852][ T5665] minix_free_block (loop4:3): bit already cleared [ 256.027746][ T5665] minix_free_block (loop4:4): bit already cleared [ 256.405450][ T1680] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 256.644927][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.656401][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.666635][ T1680] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 256.676149][ T1680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.752169][ T1680] usb 4-1: config 0 descriptor?? [ 257.261643][ T1680] usbhid 4-1:0.0: can't add hid device: -71 [ 257.268452][ T1680] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 257.356681][ T1680] usb 4-1: USB disconnect, device number 3 [ 258.506852][ T5702] loop3: detected capacity change from 0 to 64 [ 258.711349][ T5702] minix_free_block (loop3:2): bit already cleared [ 258.718281][ T5702] minix_free_block (loop3:3): bit already cleared [ 258.729273][ T5702] minix_free_block (loop3:4): bit already cleared [ 260.169825][ T4883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 260.476968][ T4883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.492541][ T4883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.504557][ T4883] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 260.513902][ T4883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.598117][ T4883] usb 2-1: config 0 descriptor?? [ 260.732766][ T5736] loop0: detected capacity change from 0 to 64 [ 261.086713][ T4883] usbhid 2-1:0.0: can't add hid device: -71 [ 261.093378][ T4883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.177804][ T4883] usb 2-1: USB disconnect, device number 2 [ 261.188432][ T5736] minix_free_block (loop0:2): bit already cleared [ 261.195429][ T5736] minix_free_block (loop0:3): bit already cleared [ 261.202053][ T5736] minix_free_block (loop0:4): bit already cleared [ 263.300542][ T5773] loop2: detected capacity change from 0 to 64 [ 263.512415][ T5773] minix_free_block (loop2:2): bit already cleared [ 263.519890][ T5773] minix_free_block (loop2:3): bit already cleared [ 263.527810][ T5773] minix_free_block (loop2:4): bit already cleared [ 263.810549][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 264.081248][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.092650][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.102956][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 264.112411][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.204423][ T25] usb 1-1: config 0 descriptor?? [ 264.701864][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 264.709715][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 264.779157][ T25] usb 1-1: USB disconnect, device number 3 [ 265.706083][ T5805] loop2: detected capacity change from 0 to 64 [ 265.834186][ T5805] minix_free_block (loop2:2): bit already cleared [ 265.841219][ T5805] minix_free_block (loop2:3): bit already cleared [ 265.848083][ T5805] minix_free_block (loop2:4): bit already cleared [ 267.957670][ T4883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 268.078501][ T5837] netlink: 892 bytes leftover after parsing attributes in process `syz.3.213'. [ 268.246959][ T4883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.258344][ T4883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.268646][ T4883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 268.282100][ T4883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.345984][ T4883] usb 3-1: config 0 descriptor?? [ 268.883561][ T4883] usbhid 3-1:0.0: can't add hid device: -71 [ 268.897072][ T4883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.951786][ T4883] usb 3-1: USB disconnect, device number 2 [ 269.165133][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 269.394582][ T25] usb 4-1: device descriptor read/64, error -71 [ 269.713487][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 269.787053][ T5853] capability: warning: `syz.0.219' uses deprecated v2 capabilities in a way that may be insecure [ 269.885016][ T25] usb 4-1: device descriptor read/64, error -71 [ 270.033721][ T25] usb usb4-port1: attempt power cycle [ 270.505112][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.603954][ T25] usb 4-1: device descriptor read/8, error -71 [ 270.905357][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.972719][ T5866] netlink: 892 bytes leftover after parsing attributes in process `syz.0.226'. [ 270.990400][ T25] usb 4-1: device descriptor read/8, error -71 [ 271.008725][ T5868] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET) [ 271.153554][ T25] usb usb4-port1: unable to enumerate USB device [ 271.966578][ T4883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 272.210989][ T4883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.222501][ T4883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.232817][ T4883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 272.242454][ T4883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.291325][ T4883] usb 5-1: config 0 descriptor?? [ 272.815065][ T4883] usbhid 5-1:0.0: can't add hid device: -71 [ 272.821876][ T4883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.902503][ T4883] usb 5-1: USB disconnect, device number 2 [ 273.479632][ T5892] netlink: 892 bytes leftover after parsing attributes in process `syz.2.238'. [ 274.654982][ T1680] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.845587][ T1680] usb 3-1: device descriptor read/64, error -71 [ 275.165191][ T1680] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 275.395354][ T1680] usb 3-1: device descriptor read/64, error -71 [ 275.556993][ T1680] usb usb3-port1: attempt power cycle [ 276.058375][ T1680] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 276.142784][ T1680] usb 3-1: device descriptor read/8, error -71 [ 276.455865][ T1680] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.586141][ T1680] usb 3-1: device descriptor read/8, error -71 [ 276.742312][ T1680] usb usb3-port1: unable to enumerate USB device [ 277.114620][ T5239] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 277.359258][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.372476][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.382782][ T5239] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 277.396173][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.528023][ T5239] usb 5-1: config 0 descriptor?? [ 278.459992][ T5239] usbhid 5-1:0.0: can't add hid device: -71 [ 278.467000][ T5239] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.583318][ T5239] usb 5-1: USB disconnect, device number 3 [ 280.608008][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.614852][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.522465][ T5972] fuse: Unknown parameter 'gdÃ0x0000000000000008' [ 286.309586][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.330865][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.340217][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.362387][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.388291][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.435674][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.145947][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 288.566556][ T5189] Bluetooth: hci5: command tx timeout [ 288.746853][ T6020] loop1: detected capacity change from 0 to 64 [ 289.169186][ T6020] minix_free_block (loop1:2): bit already cleared [ 289.176092][ T6020] minix_free_block (loop1:3): bit already cleared [ 289.182879][ T6020] minix_free_block (loop1:4): bit already cleared [ 289.258693][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.421912][ T6027] minix_free_block (loop1:2): bit already cleared [ 289.429100][ T6027] minix_free_block (loop1:3): bit already cleared [ 289.436122][ T6027] minix_free_block (loop1:4): bit already cleared [ 289.488734][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.710932][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.900856][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.260805][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.268761][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.277140][ T5990] bridge_slave_0: entered allmulticast mode [ 290.293797][ T5990] bridge_slave_0: entered promiscuous mode [ 290.478845][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.487320][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.501843][ T5990] bridge_slave_1: entered allmulticast mode [ 290.511497][ T5990] bridge_slave_1: entered promiscuous mode [ 290.644616][ T5189] Bluetooth: hci5: command tx timeout [ 290.847841][ T13] bridge_slave_1: left allmulticast mode [ 290.853735][ T13] bridge_slave_1: left promiscuous mode [ 290.860851][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.967092][ T13] bridge_slave_0: left allmulticast mode [ 290.972997][ T13] bridge_slave_0: left promiscuous mode [ 290.979868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.896035][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.961298][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.006622][ T13] bond0 (unregistering): Released all slaves [ 292.080558][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.166876][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.697300][ T5990] team0: Port device team_slave_0 added [ 292.734691][ T5189] Bluetooth: hci5: command tx timeout [ 292.960664][ T5990] team0: Port device team_slave_1 added [ 293.188637][ T6064] loop1: detected capacity change from 0 to 64 [ 293.500389][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.507778][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.535366][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.700214][ T6064] minix_free_block (loop1:2): bit already cleared [ 293.707118][ T6064] minix_free_block (loop1:3): bit already cleared [ 293.713810][ T6064] minix_free_block (loop1:4): bit already cleared [ 293.816364][ T13] hsr_slave_0: left promiscuous mode [ 293.850373][ T13] hsr_slave_1: left promiscuous mode [ 293.895168][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.903042][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.968023][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.979310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.986382][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 294.104998][ T13] veth1_macvtap: left promiscuous mode [ 294.110778][ T13] veth0_macvtap: left promiscuous mode [ 294.116813][ T13] veth1_vlan: left promiscuous mode [ 294.125190][ T13] veth0_vlan: left promiscuous mode [ 294.805799][ T5189] Bluetooth: hci5: command tx timeout [ 295.417187][ T13] team0 (unregistering): Port device team_slave_1 removed [ 295.470507][ T13] team0 (unregistering): Port device team_slave_0 removed [ 296.107129][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.114690][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.146258][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.797692][ T5990] hsr_slave_0: entered promiscuous mode [ 296.897258][ T5990] hsr_slave_1: entered promiscuous mode [ 296.924501][ T5990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.932413][ T5990] Cannot create hsr debugfs directory [ 298.322222][ T6116] loop1: detected capacity change from 0 to 64 [ 299.046827][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 299.110952][ T6123] minix_free_block (loop1:2): bit already cleared [ 299.117810][ T6123] minix_free_block (loop1:3): bit already cleared [ 299.124991][ T6123] minix_free_block (loop1:4): bit already cleared [ 299.535119][ T5990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.645400][ T5990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.820527][ T5990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.965315][ T5990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.646760][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.915924][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.070065][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.077857][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.093810][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.101624][ T5227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.296729][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 302.591197][ T6163] loop1: detected capacity change from 0 to 64 [ 304.807559][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.435534][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 305.495533][ T5990] veth0_vlan: entered promiscuous mode [ 305.602351][ T5990] veth1_vlan: entered promiscuous mode [ 306.099975][ T5990] veth0_macvtap: entered promiscuous mode [ 306.217013][ T5990] veth1_macvtap: entered promiscuous mode [ 306.454021][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.468594][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.479687][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.490520][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.500696][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.511578][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.521803][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.532599][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.547857][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.928840][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.941351][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.952586][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.965094][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.975890][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.990031][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.001150][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.011878][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.027141][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.456296][ T5990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.467435][ T5990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.477978][ T5990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.487309][ T5990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.859054][ T6231] loop1: detected capacity change from 0 to 64 [ 308.478400][ T6231] minix_free_block (loop1:2): bit already cleared [ 308.485836][ T6231] minix_free_block (loop1:3): bit already cleared [ 308.492464][ T6231] minix_free_block (loop1:4): bit already cleared [ 308.632364][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 311.238665][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 314.066798][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 315.818973][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.827113][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.255113][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.263205][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.966844][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 318.080112][ T6374] input: syz0 as /devices/virtual/input/input6 [ 318.780186][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 321.134655][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 333.935460][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 333.944065][ T5190] Bluetooth: hci1: command 0x0406 tx timeout [ 333.951582][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 333.958312][ T5190] Bluetooth: hci2: command 0x0406 tx timeout [ 334.620873][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 335.849532][ T6580] raw_sendmsg: syz.2.489 forgot to set AF_INET. Fix it! [ 337.060181][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 337.975079][ T6610] misc userio: The device must be registered before sending interrupts [ 339.389607][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 340.195140][ T6645] serio: Serial port pts0 [ 342.094419][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.103717][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.345321][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 347.375544][ T6767] serio: Serial port pts0 [ 347.590470][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.602063][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.612325][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 347.621766][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.702891][ T44] usb 3-1: config 0 descriptor?? [ 348.415271][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 348.421913][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.515479][ T44] usb 3-1: USB disconnect, device number 7 [ 348.527790][ T5655] udevd[5655]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 350.954750][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 351.246577][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.258075][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.268454][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 351.277975][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.308246][ T8] usb 1-1: config 0 descriptor?? [ 352.023010][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 352.029924][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.114153][ T8] usb 1-1: USB disconnect, device number 4 [ 354.586086][ T6869] binder: 6868:6869 ioctl c0306201 0 returned -14 [ 355.055652][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.297211][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.308675][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.322297][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 355.333114][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.396770][ T8] usb 3-1: config 0 descriptor?? [ 355.856827][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 356.047468][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 356.053916][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.144512][ T8] usb 3-1: USB disconnect, device number 8 [ 359.016063][ T5227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 359.293399][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.308795][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.320102][ T5227] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 359.329599][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.427133][ T5227] usb 2-1: config 0 descriptor?? [ 360.091138][ T5227] usbhid 2-1:0.0: can't add hid device: -71 [ 360.098798][ T5227] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 360.155777][ T5227] usb 2-1: USB disconnect, device number 3 [ 361.919262][ T6973] serio: Serial port pts0 [ 361.946315][ T6974] netlink: 900 bytes leftover after parsing attributes in process `syz.3.663'. [ 362.559537][ T6981] random: crng reseeded on system resumption [ 363.097456][ T5227] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 363.356342][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.367887][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.378309][ T5227] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 363.387764][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.487126][ T5227] usb 4-1: config 0 descriptor?? [ 363.940268][ T5227] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 363.997337][ T5227] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 364.143535][ T5227] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 364.151614][ T5227] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 364.229579][ T5227] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71 [ 364.365159][ T5227] usb 4-1: USB disconnect, device number 8 [ 367.477573][ T5227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 367.735148][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.746543][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.756814][ T5227] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 367.766299][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.837423][ T5227] usb 4-1: config 0 descriptor?? [ 368.291402][ T5227] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 368.347113][ T5227] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 368.568702][ T5227] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 368.576765][ T5227] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 368.619750][ T5227] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 368.681625][ T5227] usb 4-1: USB disconnect, device number 9 [ 370.290445][ T7066] misc userio: Invalid payload size [ 372.052801][ T7097] misc userio: Invalid payload size [ 374.070380][ T7132] misc userio: Invalid payload size [ 375.518283][ T7151] netlink: 828 bytes leftover after parsing attributes in process `syz.4.741'. [ 378.090862][ T7192] netlink: 900 bytes leftover after parsing attributes in process `syz.0.756'. [ 380.691244][ T7226] serio: Serial port pts1 [ 385.729341][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.155720][ T7333] sctp: [Deprecated]: syz.0.820 (pid 7333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.155720][ T7333] Use struct sctp_sack_info instead [ 391.245470][ T7380] serio: Serial port pts0 [ 392.095068][ T1063] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 392.329509][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.340984][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.351266][ T1063] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 392.360722][ T1063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.442694][ T1063] usb 4-1: config 0 descriptor?? [ 392.967624][ T1063] belkin 0003:1020:0006.0003: item fetching failed at offset 2/5 [ 393.036983][ T1063] belkin 0003:1020:0006.0003: parse failed [ 393.043309][ T1063] belkin 0003:1020:0006.0003: probe with driver belkin failed with error -22 [ 393.176490][ T5237] usb 4-1: USB disconnect, device number 10 [ 403.459798][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.466793][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.336250][ T7588] serio: Serial port pts0 [ 409.142924][ T7637] serio: Serial port pts0 [ 410.645921][ T5185] Bluetooth: hci5: command 0x0406 tx timeout [ 414.595153][ T29] audit: type=1107 audit(1722777896.425:2): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='EáÍ; [ 414.595153][ T29] zÍ­wÕ™@fNÎBIíž_yuP Õ mJ-5ædÍ@¿H&4Ê|iÛO\·1Ûxe\´ÝK(]X A.ÁïkìzÍ;Œ-ÿ¤j˜qªØ)ìm [ 414.595153][ T29] 8CªÓËtõ1ÿ<’Ù”5z’F1Qå}~ôo16U9Âæ†lÒT=ŠG+ã[û1[ÿäÒ' [ 414.637149][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.027546][ T7730] serio: Serial port pts1 [ 419.895876][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 431.157879][ T7962] serio: Serial port pts0 [ 440.984717][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 441.204567][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 441.260861][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 441.270035][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 441.280719][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.365435][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.375083][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.383349][ T8] usb 4-1: Product: syz [ 441.387965][ T8] usb 4-1: Manufacturer: syz [ 441.392801][ T8] usb 4-1: SerialNumber: syz [ 441.785781][ T8] usb 4-1: 0:2 : does not exist [ 441.915570][ T8] usb 4-1: USB disconnect, device number 11 [ 442.632253][ T5395] udevd[5395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.140121][ T8153] serio: Serial port pts0 [ 450.368286][ T29] audit: type=1400 audit(1722777932.105:3): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8252 comm="syz.1.1231" [ 452.975325][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1251'. [ 457.407599][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 457.656328][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.667846][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.681632][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.691216][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.760190][ T44] usb 1-1: config 0 descriptor?? [ 458.275997][ T44] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 458.319277][ T44] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 459.127112][ T1063] usb 1-1: USB disconnect, device number 5 [ 459.826668][ T8388] binder: BINDER_SET_CONTEXT_MGR already set [ 459.832877][ T8388] binder: 8387:8388 ioctl 40046207 0 returned -16 [ 464.907362][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.914057][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.214633][ T1680] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 469.470677][ T1680] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.483106][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.498327][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.509547][ T1680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.523565][ T1680] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.533104][ T1680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.603575][ T1680] usb 4-1: config 0 descriptor?? [ 470.159474][ T1680] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 470.252557][ T1680] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 471.075213][ T1063] usb 4-1: USB disconnect, device number 12 [ 471.604642][ T1680] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 471.845742][ T1680] usb 2-1: Using ep0 maxpacket: 8 [ 471.884838][ T1680] usb 2-1: config 0 has no interfaces? [ 471.890689][ T1680] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 471.900464][ T1680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.973692][ T1680] usb 2-1: config 0 descriptor?? [ 472.225915][ T1680] usb 2-1: USB disconnect, device number 4 [ 472.855701][ T1680] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 473.107845][ T1680] usb 2-1: config 0 has no interfaces? [ 473.113796][ T1680] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 473.123395][ T1680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.166048][ T1680] usb 2-1: config 0 descriptor?? [ 473.401388][ T5237] usb 2-1: USB disconnect, device number 5 [ 477.546403][ T1680] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 477.823723][ T1680] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 477.904067][ T1680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.914952][ T1680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 477.923258][ T1680] usb 1-1: SerialNumber: syz [ 477.998150][ T1680] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 478.337632][ T1063] usb 1-1: USB disconnect, device number 6 [ 479.947324][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.744502][ T8685] serio: Serial port pts0 [ 487.246217][ T8768] serio: Serial port pts0 [ 491.440752][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 497.867858][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.878217][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.892909][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.921121][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.941347][ T5185] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 497.967453][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.596283][ T8898] chnl_net:caif_netlink_parms(): no params data found [ 500.008281][ T5185] Bluetooth: hci4: command tx timeout [ 501.190263][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.199364][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.209921][ T8898] bridge_slave_0: entered allmulticast mode [ 501.219391][ T8898] bridge_slave_0: entered promiscuous mode [ 501.252146][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.262858][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.270953][ T8898] bridge_slave_1: entered allmulticast mode [ 501.283514][ T8898] bridge_slave_1: entered promiscuous mode [ 501.700587][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.803516][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.085639][ T5185] Bluetooth: hci4: command tx timeout [ 502.211048][ T8898] team0: Port device team_slave_0 added [ 502.285621][ T8898] team0: Port device team_slave_1 added [ 502.659146][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.671935][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.700293][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.849159][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.856707][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.887120][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.491244][ T8898] hsr_slave_0: entered promiscuous mode [ 503.546094][ T8898] hsr_slave_1: entered promiscuous mode [ 503.597314][ T8898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.605468][ T8898] Cannot create hsr debugfs directory [ 504.164464][ T5185] Bluetooth: hci4: command tx timeout [ 504.913212][ T8898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.148048][ T8898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.323435][ T8898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.545184][ T8898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.257290][ T5185] Bluetooth: hci4: command tx timeout [ 506.317613][ T8898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.416323][ T8898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.513630][ T8898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.636037][ T8898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.125335][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.353408][ T8898] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.460656][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.468488][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.589621][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.597396][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.051806][ T8898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.220053][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.446631][ T8898] veth0_vlan: entered promiscuous mode [ 514.570764][ T8898] veth1_vlan: entered promiscuous mode [ 514.987431][ T8898] veth0_macvtap: entered promiscuous mode [ 515.074907][ T8898] veth1_macvtap: entered promiscuous mode [ 515.289506][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.300431][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.310745][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.321559][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.331779][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.342738][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.358373][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.646627][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.657946][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.672773][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.684909][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.704337][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.715303][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.725595][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.736411][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.746617][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.757822][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.786272][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.058018][ T8898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.067495][ T8898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.076719][ T8898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.098883][ T8898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.148434][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.156744][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.240820][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.249091][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.355453][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.362120][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.347775][ T9313] serio: Serial port pts0 [ 530.470549][ T9317] sctp: [Deprecated]: syz.1.1667 (pid 9317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.470549][ T9317] Use struct sctp_sack_info instead [ 532.533908][ T9344] fuse: Bad value for 'fd' [ 534.063616][ T4531] bridge_slave_1: left allmulticast mode [ 534.069966][ T4531] bridge_slave_1: left promiscuous mode [ 534.076695][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.158422][ T4531] bridge_slave_0: left allmulticast mode [ 534.164946][ T4531] bridge_slave_0: left promiscuous mode [ 534.171499][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.245702][ T9362] usb usb1: usbfs: process 9362 (syz.2.1687) did not claim interface 0 before use [ 534.606360][ T9370] fuse: Bad value for 'fd' [ 535.346364][ T4531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.398517][ T4531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.507813][ T4531] bond0 (unregistering): Released all slaves [ 536.538817][ T4531] hsr_slave_0: left promiscuous mode [ 536.580578][ T4531] hsr_slave_1: left promiscuous mode [ 536.620265][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.678103][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.686701][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.807824][ T4531] veth1_macvtap: left promiscuous mode [ 536.813791][ T4531] veth0_macvtap: left promiscuous mode [ 536.820728][ T4531] veth1_vlan: left promiscuous mode [ 536.826448][ T4531] veth0_vlan: left promiscuous mode [ 537.220371][ T9403] fuse: Bad value for 'fd' [ 538.546333][ T4531] team0 (unregistering): Port device team_slave_1 removed [ 538.667319][ T4531] team0 (unregistering): Port device team_slave_0 removed [ 542.692701][ T9464] process 'syz.3.1731' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 556.595932][ T9665] serio: Serial port pts1 [ 567.358694][ T9817] serio: Serial port pts0 [ 567.443452][ T9819] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1887'. [ 576.150400][ T9974] random: crng reseeded on system resumption [ 583.841147][ T4883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 584.069353][ T4883] usb 4-1: Using ep0 maxpacket: 32 [ 584.114837][ T4883] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 584.123605][ T4883] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 584.132825][ T4883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 584.142777][ T4883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 584.152886][ T4883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 584.162990][ T4883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 584.179111][ T4883] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 584.189435][ T4883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.268957][ T4883] usb 4-1: config 0 descriptor?? [ 584.573936][ T4883] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 584.635874][ T4883] usb 4-1: USB disconnect, device number 13 [ 584.717875][ T4883] usblp0: removed [ 585.223327][ T4883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 585.444527][ T4883] usb 4-1: Using ep0 maxpacket: 32 [ 585.495601][ T4883] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 585.504671][ T4883] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 585.517089][ T4883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 585.526620][ T4883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 585.536705][ T4883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 585.546781][ T4883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 585.560344][ T4883] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 585.569848][ T4883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.671582][ T4883] usb 4-1: config 0 descriptor?? [ 586.146522][ T4883] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 586.231925][ T4883] usb 4-1: USB disconnect, device number 14 [ 586.293055][ T4883] usblp0: removed [ 587.802172][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.809059][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.822303][T10213] serio: Serial port pts0 [ 594.837069][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 605.684707][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 605.981959][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 606.031692][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.40 [ 606.041342][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.049820][ T10] usb 2-1: Product: syz [ 606.054569][ T10] usb 2-1: Manufacturer: syz [ 606.059401][ T10] usb 2-1: SerialNumber: syz [ 606.480782][ T10] usbhid 2-1:1.0: can't add hid device: -22 [ 606.491272][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 606.550365][ T10] usb 2-1: USB disconnect, device number 6 [ 610.208165][T10473] netlink: 7784 bytes leftover after parsing attributes in process `syz.0.2161'. [ 611.386267][T10490] fuse: Bad value for 'fd' [ 613.470773][T10525] fuse: Bad value for 'fd' [ 613.604368][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 613.834503][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 613.876617][ T44] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 613.887417][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.898774][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.908981][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 613.922311][ T44] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 613.931797][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.008109][ T44] usb 4-1: config 0 descriptor?? [ 614.463967][ T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0 [ 614.472034][ T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0 [ 614.479996][ T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0 [ 614.495745][ T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0 [ 614.503468][ T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0 [ 614.603946][ T44] hid-generic 0003:1B96:9F0A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 615.075907][ T10] usb 4-1: USB disconnect, device number 15 [ 615.587420][T10556] fuse: Bad value for 'fd' [ 617.275411][T10589] fuse: Bad value for 'fd' [ 617.975390][ T29] audit: type=1800 audit(1722778099.755:4): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2214" name="/newroot/423/bus" dev="tmpfs" ino=2204 res=0 errno=0 [ 619.363998][T10616] capability: warning: `syz.1.2226' uses 32-bit capabilities (legacy support in use) [ 620.565243][ T5190] Bluetooth: hci4: command 0x0406 tx timeout [ 624.143996][T10694] fuse: Invalid rootmode [ 626.247107][T10725] fuse: Bad value for 'rootmode' [ 628.345502][T10757] fuse: Bad value for 'rootmode' [ 629.463031][T10776] loop4: detected capacity change from 0 to 764 [ 630.385246][T10780] loop0: detected capacity change from 0 to 2048 [ 630.476989][T10780] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 631.075626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 632.406374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 632.475386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 633.036743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 633.057441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 633.231450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 633.461478][T10795] fuse: Bad value for 'rootmode' [ 634.418116][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 634.566383][T10807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2308'. [ 634.946320][T10812] input: syz1 as /devices/virtual/input/input8 [ 635.384232][T10820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 636.780008][T10841] loop4: detected capacity change from 0 to 512 [ 636.874521][T10841] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 637.065114][T10843] evm: overlay not supported [ 637.421355][ T29] audit: type=1326 audit(1722778119.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.450207][ T29] audit: type=1326 audit(1722778119.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.473620][ T29] audit: type=1326 audit(1722778119.195:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.496743][ T29] audit: type=1326 audit(1722778119.195:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.519440][ T29] audit: type=1326 audit(1722778119.195:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.546424][ T29] audit: type=1326 audit(1722778119.195:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.570201][ T29] audit: type=1326 audit(1722778119.195:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.592735][ T29] audit: type=1326 audit(1722778119.195:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.615187][ T29] audit: type=1326 audit(1722778119.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 637.642051][ T29] audit: type=1326 audit(1722778119.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000 [ 638.597302][T10850] loop2: detected capacity change from 0 to 2048 [ 638.796713][T10850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.353311][ T5174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.489462][T10867] netlink: 'syz.4.2332': attribute type 2 has an invalid length. [ 640.585132][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 640.810256][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 640.841192][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.853008][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.863791][ T25] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 640.873308][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.965531][ T25] usb 3-1: config 0 descriptor?? [ 641.484949][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.495024][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.549370][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.559502][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.684563][ T25] aquacomputer_d5next 0003:0C70:F014.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 642.964691][ T25] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 643.903246][ T44] usb 3-1: USB disconnect, device number 9 [ 644.259200][T10897] loop2: detected capacity change from 0 to 512 [ 644.354565][T10897] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 644.525757][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 644.525835][ T29] audit: type=1326 audit(1722778126.335:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7fc00000 [ 649.031310][T10940] loop1: detected capacity change from 0 to 512 [ 649.226662][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.233446][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.635196][T10945] loop4: detected capacity change from 0 to 64 [ 651.893861][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'. [ 652.275154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 652.840866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 653.605123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 653.613899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 658.551796][T10982] loop2: detected capacity change from 0 to 128 [ 661.360975][T11001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.370944][T11001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.398986][T11001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.419674][T11001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.432273][T11001] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 661.443890][T11001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.471781][T11000] chnl_net:caif_netlink_parms(): no params data found [ 663.526216][T11001] Bluetooth: hci3: command tx timeout [ 664.087513][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.095899][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.103670][T11000] bridge_slave_0: entered allmulticast mode [ 664.112093][T11000] bridge_slave_0: entered promiscuous mode [ 664.211052][ T5190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.222120][ T5190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.231616][ T5190] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.244761][ T5190] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.259465][ T5190] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 664.268637][ T5190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 664.628025][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.635572][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.643130][T11000] bridge_slave_1: entered allmulticast mode [ 664.651432][T11000] bridge_slave_1: entered promiscuous mode [ 665.079059][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.221760][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.575376][T11000] team0: Port device team_slave_0 added [ 665.633847][ T5190] Bluetooth: hci3: command tx timeout [ 665.737522][T11000] team0: Port device team_slave_1 added [ 665.846948][T11021] veth0_vlan: entered allmulticast mode [ 666.241621][T11023] veth0_vlan: left promiscuous mode [ 666.249911][T11023] veth0_vlan: entered promiscuous mode [ 666.268877][T11015] chnl_net:caif_netlink_parms(): no params data found [ 666.325303][ T5190] Bluetooth: hci6: command tx timeout [ 666.548441][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.555776][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.582154][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.123816][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.131255][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.157915][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.697112][ T5190] Bluetooth: hci3: command tx timeout [ 667.797372][T11000] hsr_slave_0: entered promiscuous mode [ 667.945754][T11000] hsr_slave_1: entered promiscuous mode [ 668.425514][ T5190] Bluetooth: hci6: command tx timeout [ 668.715675][T11015] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.723135][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.731306][T11015] bridge_slave_0: entered allmulticast mode [ 668.739517][T11015] bridge_slave_0: entered promiscuous mode [ 668.921526][T11015] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.929562][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.937326][T11015] bridge_slave_1: entered allmulticast mode [ 668.945611][T11015] bridge_slave_1: entered promiscuous mode [ 669.148679][T11000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.429318][T11000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.766367][ T5190] Bluetooth: hci3: command tx timeout [ 669.788832][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.862159][T11000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.982044][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.157721][T11000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.213759][T11001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 670.222729][T11001] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 670.233616][T11001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 670.250437][T11001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 670.262995][T11001] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 670.273230][T11001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 670.495047][T11001] Bluetooth: hci6: command tx timeout [ 670.857858][T11015] team0: Port device team_slave_0 added [ 671.149163][T11036] loop3: detected capacity change from 0 to 4096 [ 671.173820][T11000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.247178][T11015] team0: Port device team_slave_1 added [ 671.386463][T11000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.475391][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.665957][T11000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.872901][ T5990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.886570][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.893638][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.919977][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.951316][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.959114][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.986116][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.040243][T11000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.324481][T11001] Bluetooth: hci7: command tx timeout [ 672.448699][T11015] hsr_slave_0: entered promiscuous mode [ 672.574375][T11001] Bluetooth: hci6: command tx timeout [ 672.617170][T11015] hsr_slave_1: entered promiscuous mode [ 672.861494][T11015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.869480][T11015] Cannot create hsr debugfs directory [ 672.942128][T11037] chnl_net:caif_netlink_parms(): no params data found [ 674.011611][T11050] loop3: detected capacity change from 0 to 128 [ 674.055400][T11050] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 674.175304][T11050] syz.3.2391: attempt to access beyond end of device [ 674.175304][T11050] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 674.191564][T11050] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 674.200816][T11050] syz.3.2391: attempt to access beyond end of device [ 674.200816][T11050] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 674.214727][T11050] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 674.223283][T11050] syz.3.2391: attempt to access beyond end of device [ 674.223283][T11050] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 674.236873][T11050] Buffer I/O error on dev loop3, logical block 1157, async page read [ 674.245212][T11050] syz.3.2391: attempt to access beyond end of device [ 674.245212][T11050] loop3: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 674.259210][T11050] Buffer I/O error on dev loop3, logical block 3211264, async page read [ 674.268015][T11050] syz.3.2391: attempt to access beyond end of device [ 674.268015][T11050] loop3: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 674.282656][T11050] Buffer I/O error on dev loop3, logical block 8768635, async page read [ 674.296662][T11050] syz.3.2391: attempt to access beyond end of device [ 674.296662][T11050] loop3: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 674.311823][T11050] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 674.335373][T11050] syz.3.2391: attempt to access beyond end of device [ 674.335373][T11050] loop3: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 674.349514][T11050] Buffer I/O error on dev loop3, logical block 209285, async page read [ 674.367096][T11050] syz.3.2391: attempt to access beyond end of device [ 674.367096][T11050] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 674.367246][T11050] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 674.367357][T11050] syz.3.2391: attempt to access beyond end of device [ 674.367357][T11050] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 674.367490][T11050] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 674.367599][T11050] syz.3.2391: attempt to access beyond end of device [ 674.367599][T11050] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 674.367731][T11050] Buffer I/O error on dev loop3, logical block 1157, async page read [ 674.418880][T11001] Bluetooth: hci7: command tx timeout [ 674.531910][ T29] audit: type=1800 audit(1722778156.205:18): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2391" name="/" dev="loop3" ino=2 res=0 errno=0 [ 674.668680][ T5190] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 674.678198][ T5190] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 674.689278][ T5190] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 674.776269][ T5190] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 674.781354][ T5190] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 674.783989][ T5190] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 674.832043][T11015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.351466][T11015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.751666][T11015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.841682][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.108050][T11015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.489752][ T5190] Bluetooth: hci7: command tx timeout [ 676.753045][T11050] syz.3.2391 (11050) used greatest stack depth: 3600 bytes left [ 676.863916][T11053] syz.3.2391 (11053): drop_caches: 2 [ 676.889477][ T5190] Bluetooth: hci8: command tx timeout [ 677.058330][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.112486][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.120614][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.128421][T11037] bridge_slave_0: entered allmulticast mode [ 677.136707][T11037] bridge_slave_0: entered promiscuous mode [ 677.306402][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.313866][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.321979][T11037] bridge_slave_1: entered allmulticast mode [ 677.330455][T11037] bridge_slave_1: entered promiscuous mode [ 677.342373][T11015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 677.477758][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.485573][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.496468][T11015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 677.953696][T11015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 678.020187][T11054] chnl_net:caif_netlink_parms(): no params data found [ 678.246899][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.254690][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.316549][T11044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.363807][ T5990] sysv_free_block: trying to free block not in datazone [ 678.405412][ T5990] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 678.442881][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.572500][ T5190] Bluetooth: hci7: command tx timeout [ 678.607960][T11044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.675540][T11015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.807066][T11044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.964893][ T5190] Bluetooth: hci8: command tx timeout [ 678.976861][T11044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.146218][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.075438][T11037] team0: Port device team_slave_0 added [ 680.162801][T11037] team0: Port device team_slave_1 added [ 680.171098][T11044] bridge_slave_1: left allmulticast mode [ 680.177316][T11044] bridge_slave_1: left promiscuous mode [ 680.183604][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.296710][T11044] bridge_slave_0: left allmulticast mode [ 680.302519][T11044] bridge_slave_0: left promiscuous mode [ 680.309270][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.665838][ T5234] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 680.771150][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.793671][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.816575][T11044] bond0 (unregistering): Released all slaves [ 681.014480][ T5234] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 681.027174][ T5234] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 681.039040][ T5234] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 681.051892][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.070572][ T5190] Bluetooth: hci8: command tx timeout [ 681.078607][T11067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.276110][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.283257][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.310428][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.715641][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.723305][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.751091][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.026459][T11044] hsr_slave_0: left promiscuous mode [ 682.050252][ T5234] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 682.060668][ T5234] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9 [ 682.218272][T11044] hsr_slave_1: left promiscuous mode [ 682.261744][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.270683][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.416727][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.425071][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.555493][ T25] usb 4-1: USB disconnect, device number 16 [ 682.555568][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 682.610226][T11044] veth1_macvtap: left promiscuous mode [ 682.616032][T11044] veth0_macvtap: left promiscuous mode [ 682.621726][T11044] veth1_vlan: left promiscuous mode [ 682.627484][T11044] veth0_vlan: left promiscuous mode [ 683.124537][ T5190] Bluetooth: hci8: command tx timeout [ 683.436755][T11044] team0 (unregistering): Port device team_slave_1 removed [ 683.460063][T11044] team0 (unregistering): Port device team_slave_0 removed [ 684.595746][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.603514][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.612943][T11054] bridge_slave_0: entered allmulticast mode [ 684.622625][T11054] bridge_slave_0: entered promiscuous mode [ 685.001725][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.009441][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.017288][T11054] bridge_slave_1: entered allmulticast mode [ 685.025497][T11054] bridge_slave_1: entered promiscuous mode [ 685.120423][T11037] hsr_slave_0: entered promiscuous mode [ 685.256761][T11037] hsr_slave_1: entered promiscuous mode [ 685.315204][T11037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.323008][T11037] Cannot create hsr debugfs directory [ 685.820976][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.983305][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.025020][T11044] bridge_slave_1: left allmulticast mode [ 686.030909][T11044] bridge_slave_1: left promiscuous mode [ 686.039562][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.105442][T11044] bridge_slave_0: left allmulticast mode [ 686.111838][T11044] bridge_slave_0: left promiscuous mode [ 686.121441][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.045084][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.111576][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.142090][T11044] bond0 (unregistering): Released all slaves [ 687.159350][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 687.476852][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.488279][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.501405][ T25] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 687.512002][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.633706][ T25] usb 4-1: config 0 descriptor?? [ 687.935179][T11054] team0: Port device team_slave_0 added [ 688.094494][ T25] elo 0003:04E7:0030.0008: item fetching failed at offset 2/5 [ 688.124358][ T25] elo 0003:04E7:0030.0008: parse failed [ 688.130697][ T25] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 688.197299][T11054] team0: Port device team_slave_1 added [ 688.320742][ T4883] usb 4-1: USB disconnect, device number 17 [ 688.365349][T11044] hsr_slave_0: left promiscuous mode [ 688.407457][T11044] hsr_slave_1: left promiscuous mode [ 688.431354][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.439452][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.459292][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.467177][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.494313][T11044] veth1_macvtap: left promiscuous mode [ 688.500095][T11044] veth0_macvtap: left promiscuous mode [ 688.506187][T11044] veth1_vlan: left promiscuous mode [ 688.511758][T11044] veth0_vlan: left promiscuous mode [ 689.185580][T11044] team0 (unregistering): Port device team_slave_1 removed [ 689.314269][T11044] team0 (unregistering): Port device team_slave_0 removed [ 689.695734][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.956463][T11102] tipc: Enabling of bearer rejected, failed to enable media [ 690.174210][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.181378][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.208379][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.232776][T11015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.398155][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.405407][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.432033][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.559910][T11015] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.692823][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.700447][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.809463][T11037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.911774][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.919384][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.052679][T11037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.462522][T11037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.720020][T11044] bridge_slave_1: left allmulticast mode [ 691.726345][T11044] bridge_slave_1: left promiscuous mode [ 691.732884][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.805106][T11044] bridge_slave_0: left allmulticast mode [ 691.811111][T11044] bridge_slave_0: left promiscuous mode [ 691.817907][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.446653][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.515081][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.596682][T11044] bond0 (unregistering): Released all slaves [ 692.767177][T11037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.937092][T11054] hsr_slave_0: entered promiscuous mode [ 693.005993][T11054] hsr_slave_1: entered promiscuous mode [ 693.042578][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.050703][T11054] Cannot create hsr debugfs directory [ 693.507798][T11000] veth0_vlan: entered promiscuous mode [ 693.722086][T11037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 693.798932][T11037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 693.929420][T11037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 694.020074][T11044] hsr_slave_0: left promiscuous mode [ 694.068246][T11044] hsr_slave_1: left promiscuous mode [ 694.100396][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.108347][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.146875][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.155443][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.235899][T11044] veth1_macvtap: left promiscuous mode [ 694.241755][T11044] veth0_macvtap: left promiscuous mode [ 694.248055][T11044] veth1_vlan: left promiscuous mode [ 694.255021][T11044] veth0_vlan: left promiscuous mode [ 695.167682][T11044] team0 (unregistering): Port device team_slave_1 removed [ 695.220750][T11044] team0 (unregistering): Port device team_slave_0 removed [ 695.534708][T11037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.664969][T11000] veth1_vlan: entered promiscuous mode [ 696.983972][T11000] veth0_macvtap: entered promiscuous mode [ 697.394155][T11000] veth1_macvtap: entered promiscuous mode [ 697.483379][T11129] loop3: detected capacity change from 0 to 128 [ 697.788145][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.799378][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.814751][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.853560][T11129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 697.915919][T11054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 698.009958][T11129] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 698.025609][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.036693][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.050182][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.061787][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.076858][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.096231][T11054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 698.212861][T11054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 698.353375][T11054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 698.437246][T11000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.446769][T11000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.459420][T11000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.470164][T11000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.760613][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.876443][T11037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.313127][T11037] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.414946][ T4438] bridge_slave_1: left allmulticast mode [ 699.420849][ T4438] bridge_slave_1: left promiscuous mode [ 699.427976][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.485907][ T4438] bridge_slave_0: left allmulticast mode [ 699.491826][ T4438] bridge_slave_0: left promiscuous mode [ 699.498613][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.056404][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.080073][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.111533][ T4438] bond0 (unregistering): Released all slaves [ 700.209344][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.217174][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.310625][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.318423][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.547367][T11015] veth0_vlan: entered promiscuous mode [ 700.897482][T11015] veth1_vlan: entered promiscuous mode [ 701.302876][ T4438] hsr_slave_0: left promiscuous mode [ 701.340776][ T4438] hsr_slave_1: left promiscuous mode [ 701.357039][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.367056][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.420117][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.430348][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.488337][ T4438] veth1_macvtap: left promiscuous mode [ 701.494301][ T4438] veth0_macvtap: left promiscuous mode [ 701.500374][ T4438] veth1_vlan: left promiscuous mode [ 701.506802][ T4438] veth0_vlan: left promiscuous mode [ 701.966312][ T5990] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.603030][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 702.641616][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 703.326447][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.366460][T11015] veth0_macvtap: entered promiscuous mode [ 703.502239][T11015] veth1_macvtap: entered promiscuous mode [ 703.588360][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.769913][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.777798][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.811479][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.822890][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.838353][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.950840][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.958632][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.112343][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.123263][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.133483][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.145277][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.160315][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.321615][T11054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.448902][T11015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.459764][T11015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.470570][T11015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.481812][T11015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.390035][T11037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.049346][T11037] veth0_vlan: entered promiscuous mode [ 706.211180][T11037] veth1_vlan: entered promiscuous mode [ 706.268744][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.610353][T11037] veth0_macvtap: entered promiscuous mode [ 706.681652][T11037] veth1_macvtap: entered promiscuous mode [ 706.888135][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.899331][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.909612][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.920503][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.935964][T11037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.130931][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.141925][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.153804][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.166148][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.176844][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.187782][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.202973][T11037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.278375][T11037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.292234][T11037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.303511][T11037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.312741][T11037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.918601][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.926709][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.150471][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.158656][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.349624][T11054] veth0_vlan: entered promiscuous mode [ 709.502233][T11054] veth1_vlan: entered promiscuous mode [ 709.959000][T11054] veth0_macvtap: entered promiscuous mode [ 710.120463][T11054] veth1_macvtap: entered promiscuous mode [ 710.385712][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.396532][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.406870][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.417634][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.427775][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.441697][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.457955][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.691576][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.699457][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.764614][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.775576][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.785754][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.796530][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.806700][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.817627][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.827931][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.838704][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.855327][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.202820][T11054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.212758][T11054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.222634][T11054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.232057][T11054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.764498][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.772536][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.033070][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.041344][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.126474][T11283] loop0: detected capacity change from 0 to 1024 [ 714.192640][T11283] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 714.246551][T11283] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 714.257361][T11283] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 714.394777][T11283] JBD2: no valid journal superblock found [ 714.400812][T11283] EXT4-fs (loop0): Could not load journal inode [ 714.738677][T11283] loop0: detected capacity change from 0 to 512 [ 715.923762][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.932480][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.155416][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.163555][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.388795][T11297] loop3: detected capacity change from 0 to 2048 [ 716.530338][T11297] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 716.603051][T11297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.037875][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 718.994749][T11327] fuse: Bad value for 'fd' [ 719.893829][T11090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.902257][T11090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.022093][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.030480][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.091440][T11343] loop4: detected capacity change from 0 to 8 [ 721.201272][T11343] ===================================================== [ 721.209217][T11343] BUG: KMSAN: uninit-value in pick_link+0xd8c/0x1690 [ 721.216770][T11343] pick_link+0xd8c/0x1690 [ 721.221300][T11343] step_into+0x156f/0x1640 [ 721.225939][T11343] walk_component+0x54c/0x650 [ 721.230723][T11343] path_lookupat+0x27d/0x6f0 [ 721.235540][T11343] filename_lookup+0x22f/0x750 [ 721.240418][T11343] user_path_at+0x85/0x390 [ 721.245060][T11343] __se_sys_mount+0x668/0x810 [ 721.249830][T11343] __ia32_sys_mount+0xe3/0x150 [ 721.254845][T11343] ia32_sys_call+0x2530/0x40d0 [ 721.259727][T11343] __do_fast_syscall_32+0xb0/0x110 [ 721.265703][T11343] do_fast_syscall_32+0x38/0x80 [ 721.270771][T11343] do_SYSENTER_32+0x1f/0x30 [ 721.275685][T11343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.282329][T11343] [ 721.286907][T11343] Uninit was created at: [ 721.296753][T11343] __alloc_pages_noprof+0x9d6/0xe70 [ 721.303835][T11343] alloc_pages_mpol_noprof+0x299/0x990 [ 721.309797][T11343] folio_alloc_noprof+0x1db/0x310 [ 721.317047][T11343] filemap_alloc_folio_noprof+0xa6/0x440 [ 721.322891][T11343] do_read_cache_folio+0x12a/0xfd0 [ 721.328789][T11343] read_cache_page+0x63/0x1d0 [ 721.333675][T11343] page_get_link+0x73/0xab0 [ 721.338735][T11343] pick_link+0xd6c/0x1690 [ 721.343426][T11343] step_into+0x156f/0x1640 [ 721.348514][T11343] walk_component+0x54c/0x650 [ 721.353629][T11343] path_lookupat+0x27d/0x6f0 [ 721.358796][T11343] filename_lookup+0x22f/0x750 [ 721.363897][T11343] user_path_at+0x85/0x390 [ 721.368662][T11343] __se_sys_mount+0x668/0x810 [ 721.373547][T11343] __ia32_sys_mount+0xe3/0x150 [ 721.378671][T11343] ia32_sys_call+0x2530/0x40d0 [ 721.383664][T11343] __do_fast_syscall_32+0xb0/0x110 [ 721.389142][T11343] do_fast_syscall_32+0x38/0x80 [ 721.399104][T11343] do_SYSENTER_32+0x1f/0x30 [ 721.403812][T11343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.412071][T11343] [ 721.415546][T11343] CPU: 0 UID: 0 PID: 11343 Comm: syz.4.2390 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 721.426694][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 721.437082][T11343] ===================================================== [ 721.444447][T11343] Disabling lock debugging due to kernel taint [ 721.450680][T11343] Kernel panic - not syncing: kmsan.panic set ... [ 721.457164][T11343] CPU: 0 UID: 0 PID: 11343 Comm: syz.4.2390 Tainted: G B 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 721.469519][T11343] Tainted: [B]=BAD_PAGE [ 721.473716][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 721.483954][T11343] Call Trace: [ 721.487302][T11343] [ 721.490369][T11343] dump_stack_lvl+0x216/0x2d0 [ 721.495176][T11343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 721.501192][T11343] dump_stack+0x1e/0x30 [ 721.505472][T11343] panic+0x4e2/0xcd0 [ 721.509568][T11343] ? kmsan_get_metadata+0x91/0x1c0 [ 721.514929][T11343] kmsan_report+0x2c7/0x2d0 [ 721.519665][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.525068][T11343] ? __msan_warning+0x95/0x120 [ 721.529939][T11343] ? pick_link+0xd8c/0x1690 [ 721.534546][T11343] ? step_into+0x156f/0x1640 [ 721.539241][T11343] ? walk_component+0x54c/0x650 [ 721.544196][T11343] ? path_lookupat+0x27d/0x6f0 [ 721.549087][T11343] ? filename_lookup+0x22f/0x750 [ 721.554175][T11343] ? user_path_at+0x85/0x390 [ 721.558909][T11343] ? __se_sys_mount+0x668/0x810 [ 721.563861][T11343] ? __ia32_sys_mount+0xe3/0x150 [ 721.568893][T11343] ? ia32_sys_call+0x2530/0x40d0 [ 721.573951][T11343] ? __do_fast_syscall_32+0xb0/0x110 [ 721.579379][T11343] ? do_fast_syscall_32+0x38/0x80 [ 721.584496][T11343] ? do_SYSENTER_32+0x1f/0x30 [ 721.589265][T11343] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.595916][T11343] ? do_read_cache_folio+0xc00/0xfd0 [ 721.601405][T11343] ? __pfx_squashfs_symlink_read_folio+0x10/0x10 [ 721.607877][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.613194][T11343] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 721.619120][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.624427][T11343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 721.630353][T11343] ? page_get_link+0x4dd/0xab0 [ 721.635219][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.640524][T11343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 721.646448][T11343] __msan_warning+0x95/0x120 [ 721.651133][T11343] pick_link+0xd8c/0x1690 [ 721.655583][T11343] step_into+0x156f/0x1640 [ 721.660109][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.665420][T11343] walk_component+0x54c/0x650 [ 721.670205][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.675516][T11343] path_lookupat+0x27d/0x6f0 [ 721.680229][T11343] filename_lookup+0x22f/0x750 [ 721.685111][T11343] ? __pfx_page_put_link+0x10/0x10 [ 721.690321][T11343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 721.696254][T11343] user_path_at+0x85/0x390 [ 721.700781][T11343] ? __se_sys_mount+0x644/0x810 [ 721.705792][T11343] ? __ia32_sys_mount+0xe3/0x150 [ 721.710828][T11343] __se_sys_mount+0x668/0x810 [ 721.715597][T11343] ? kmsan_get_metadata+0x13e/0x1c0 [ 721.720920][T11343] __ia32_sys_mount+0xe3/0x150 [ 721.725782][T11343] ia32_sys_call+0x2530/0x40d0 [ 721.730670][T11343] __do_fast_syscall_32+0xb0/0x110 [ 721.735879][T11343] ? irqentry_exit+0x16/0x60 [ 721.740551][T11343] do_fast_syscall_32+0x38/0x80 [ 721.745585][T11343] do_SYSENTER_32+0x1f/0x30 [ 721.750179][T11343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.756629][T11343] RIP: 0023:0xf7fd2579 [ 721.760772][T11343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 721.780488][T11343] RSP: 002b:00000000f578657c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 721.788991][T11343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020001a00 [ 721.797033][T11343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 721.805102][T11343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 721.813194][T11343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 721.821235][T11343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 721.829289][T11343] [ 721.832618][T11343] Kernel Offset: disabled [ 721.837003][T11343] Rebooting in 86400 seconds..