last executing test programs: 12.070313012s ago: executing program 0 (id=375): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 11.488803397s ago: executing program 0 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "e0ec64ad", "defc24a9"}}, 0x0}, 0x0) 8.173406486s ago: executing program 0 (id=390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0]}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x27) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) 7.191240245s ago: executing program 4 (id=394): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 6.495795791s ago: executing program 3 (id=395): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x8911, &(0x7f0000000100)="d1a6de5edfa6a17060c2c9057ce13a") r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000880)=""/209, 0x28, 0xd1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000380), 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 6.221625367s ago: executing program 4 (id=397): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 5.72397882s ago: executing program 3 (id=400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000180)=[{r0, 0x3}], 0x1, 0xe37e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000008500)="88", 0x34000}], 0x1}}], 0x1, 0x0) 5.697520886s ago: executing program 4 (id=401): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000200)={[{@fat=@uid}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@umask={'umask', 0x3d, 0x8001}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_lower}, {@fat=@nocase}]}, 0x3, 0x366, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.420242615s ago: executing program 0 (id=402): syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x102000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 5.340247708s ago: executing program 2 (id=403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 5.176023324s ago: executing program 1 (id=404): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008004, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.911017192s ago: executing program 3 (id=405): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x6c, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xa4, 0x4d, 0x45, 0x40, 0x45e, 0x466, 0x56f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x2, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xec, 0x99, 0x7b, 0x0, [@generic={0x2}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "52bb8595200b2e"}]}}, {{0x9, 0x5, 0xd}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0xa4, 0x12, 0x8d, 0x0, [], [{}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 4.165003067s ago: executing program 2 (id=406): add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @d}, 0x18, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x28, 0x3, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r1 = add_key$keyring(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, r1) request_key(&(0x7f0000001c80)='dns_resolver\x00', &(0x7f0000001cc0)={'syz', 0x1}, &(0x7f0000001d00)='#+\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000001e00)='rxrpc\x00', &(0x7f0000001e40)={'syz', 0x2}, 0x0) request_key(&(0x7f0000001f80)='cifs.idmap\x00', &(0x7f0000001fc0)={'syz', 0x3}, &(0x7f0000002000)='\b\x00', 0xfffffffffffffffa) keyctl$set_timeout(0xf, 0x0, 0x3) add_key(&(0x7f0000002040)='ceph\x00', &(0x7f0000002080)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000002140)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) 4.118124833s ago: executing program 4 (id=407): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0xac}}, 0x0) 4.078452065s ago: executing program 1 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e"], 0x24}}, 0x0) 3.967562861s ago: executing program 0 (id=409): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_connect(0x0, 0x10e, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024"], 0x0) 3.324141355s ago: executing program 1 (id=410): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x8911, &(0x7f0000000100)="d1a6de5edfa6a17060c2c9057ce13a") r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000880)=""/209, 0x28, 0xd1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000380), 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.840767493s ago: executing program 2 (id=411): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 2.790957896s ago: executing program 4 (id=412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0]}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x27) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) 2.512775905s ago: executing program 1 (id=413): syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000001200)="$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") symlink(&(0x7f0000000580)='.\x02/file0\x00', &(0x7f00000002c0)='.\x02\x00') lstat(&(0x7f0000001140)='.\x02/file1\x00', 0x0) 2.215935529s ago: executing program 2 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000000000800114000000000090002"], 0x5c}}, 0x0) 1.993365673s ago: executing program 3 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000001c0)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x6}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 1.723027096s ago: executing program 1 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x4a) 1.647321426s ago: executing program 2 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x4400, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1.315409178s ago: executing program 3 (id=418): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x3c, 0x0, 0x0) 550.338726ms ago: executing program 4 (id=419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x2) 474.71304ms ago: executing program 3 (id=420): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0xa}) 421.688856ms ago: executing program 0 (id=421): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 226.64905ms ago: executing program 2 (id=422): add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @d}, 0x18, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x28, 0x3, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r1 = add_key$keyring(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, r1) request_key(&(0x7f0000001c80)='dns_resolver\x00', &(0x7f0000001cc0)={'syz', 0x1}, &(0x7f0000001d00)='#+\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000001e00)='rxrpc\x00', &(0x7f0000001e40)={'syz', 0x2}, 0x0) request_key(&(0x7f0000001f80)='cifs.idmap\x00', &(0x7f0000001fc0)={'syz', 0x3}, &(0x7f0000002000)='\b\x00', 0xfffffffffffffffa) keyctl$set_timeout(0xf, 0x0, 0x3) add_key(&(0x7f0000002040)='ceph\x00', &(0x7f0000002080)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000002140)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) 0s ago: executing program 1 (id=423): syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x102000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 148.403484][ T5033] cgroup: Unknown subsys name 'net' [ 148.564569][ T5033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.664510][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.671164][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.474646][ T5033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.419316][ T5178] mmap: syz.2.113 (5178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.903581][ T5398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.913143][ T5398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.922505][ T5398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.930576][ T5398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.952186][ T5398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.982564][ T5401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.994211][ T5401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.003590][ T5401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.028312][ T5401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.050130][ T5401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.076620][ T5401] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.132596][ T5401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.382927][ T4433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.392347][ T4433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.401662][ T4433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.414863][ T4433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.425982][ T4433] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.435218][ T4433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.512566][ T4433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.522094][ T4433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.531415][ T4433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.544670][ T4433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.564907][ T4433] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.574569][ T4433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.623832][ T4433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.633192][ T4433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.701766][ T4433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.771558][ T4433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.794915][ T4433] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.804397][ T4433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.910644][ T5395] chnl_net:caif_netlink_parms(): no params data found [ 217.071028][ T5404] chnl_net:caif_netlink_parms(): no params data found [ 217.117261][ T5401] Bluetooth: hci1: command tx timeout [ 217.257249][ T5401] Bluetooth: hci0: command tx timeout [ 217.524140][ T5401] Bluetooth: hci2: command tx timeout [ 217.530697][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 217.651435][ T5401] Bluetooth: hci3: command tx timeout [ 217.894894][ T5401] Bluetooth: hci4: command tx timeout [ 217.901646][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 217.993536][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 218.312395][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.320138][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.328040][ T5395] bridge_slave_0: entered allmulticast mode [ 218.337302][ T5395] bridge_slave_0: entered promiscuous mode [ 218.434050][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.441882][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.449606][ T5395] bridge_slave_1: entered allmulticast mode [ 218.458825][ T5395] bridge_slave_1: entered promiscuous mode [ 218.469587][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.479328][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.487192][ T5404] bridge_slave_0: entered allmulticast mode [ 218.496127][ T5404] bridge_slave_0: entered promiscuous mode [ 218.640251][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.648784][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.656558][ T5404] bridge_slave_1: entered allmulticast mode [ 218.664725][ T5404] bridge_slave_1: entered promiscuous mode [ 218.744143][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.752099][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.759781][ T5394] bridge_slave_0: entered allmulticast mode [ 218.771405][ T5394] bridge_slave_0: entered promiscuous mode [ 218.797244][ T5395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.809761][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.817702][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.825602][ T5394] bridge_slave_1: entered allmulticast mode [ 218.834510][ T5394] bridge_slave_1: entered promiscuous mode [ 218.905172][ T5395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.994868][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.014096][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.036993][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.114057][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.120726][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.171867][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.172835][ T5401] Bluetooth: hci1: command tx timeout [ 219.332830][ T5401] Bluetooth: hci0: command tx timeout [ 219.349132][ T5395] team0: Port device team_slave_0 added [ 219.391907][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.399622][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.407425][ T5407] bridge_slave_0: entered allmulticast mode [ 219.416279][ T5407] bridge_slave_0: entered promiscuous mode [ 219.436498][ T5394] team0: Port device team_slave_0 added [ 219.455009][ T5395] team0: Port device team_slave_1 added [ 219.470268][ T5404] team0: Port device team_slave_0 added [ 219.545092][ T5394] team0: Port device team_slave_1 added [ 219.554120][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.564347][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.571739][ T5401] Bluetooth: hci2: command tx timeout [ 219.577736][ T5407] bridge_slave_1: entered allmulticast mode [ 219.585801][ T5407] bridge_slave_1: entered promiscuous mode [ 219.600746][ T5404] team0: Port device team_slave_1 added [ 219.731505][ T5401] Bluetooth: hci3: command tx timeout [ 219.760065][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.768082][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.794403][ T5395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.845562][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.853664][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.861507][ T5411] bridge_slave_0: entered allmulticast mode [ 219.870364][ T5411] bridge_slave_0: entered promiscuous mode [ 219.947033][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.954446][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.980815][ T5395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.001186][ T5401] Bluetooth: hci4: command tx timeout [ 220.003027][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.037114][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.044329][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.070647][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.087360][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.094762][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.121059][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.137043][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.144802][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.152589][ T5411] bridge_slave_1: entered allmulticast mode [ 220.161086][ T5411] bridge_slave_1: entered promiscuous mode [ 220.171797][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.178944][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.205330][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.220002][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.227281][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.253663][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.287255][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.467684][ T5407] team0: Port device team_slave_0 added [ 220.493609][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.514673][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.530529][ T5407] team0: Port device team_slave_1 added [ 220.826623][ T5411] team0: Port device team_slave_0 added [ 220.845878][ T5411] team0: Port device team_slave_1 added [ 220.990495][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.998951][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.026636][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.052149][ T5404] hsr_slave_0: entered promiscuous mode [ 221.065390][ T5404] hsr_slave_1: entered promiscuous mode [ 221.090033][ T5394] hsr_slave_0: entered promiscuous mode [ 221.099353][ T5394] hsr_slave_1: entered promiscuous mode [ 221.108778][ T5394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.116749][ T5394] Cannot create hsr debugfs directory [ 221.169106][ T5395] hsr_slave_0: entered promiscuous mode [ 221.179717][ T5395] hsr_slave_1: entered promiscuous mode [ 221.188351][ T5395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.196210][ T5395] Cannot create hsr debugfs directory [ 221.205226][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.212429][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.238758][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.251620][ T5401] Bluetooth: hci1: command tx timeout [ 221.307124][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.314437][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.341624][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.358030][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.365345][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.391843][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.411521][ T5401] Bluetooth: hci0: command tx timeout [ 221.651618][ T5401] Bluetooth: hci2: command tx timeout [ 221.814666][ T5411] hsr_slave_0: entered promiscuous mode [ 221.823440][ T5401] Bluetooth: hci3: command tx timeout [ 221.829423][ T5411] hsr_slave_1: entered promiscuous mode [ 221.838971][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.846922][ T5411] Cannot create hsr debugfs directory [ 221.865832][ T5407] hsr_slave_0: entered promiscuous mode [ 221.874492][ T5407] hsr_slave_1: entered promiscuous mode [ 221.882877][ T5407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.890599][ T5407] Cannot create hsr debugfs directory [ 222.080223][ T5401] Bluetooth: hci4: command tx timeout [ 222.789390][ T5404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.899359][ T5404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.974955][ T5404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.038010][ T5404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.230956][ T5394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.257336][ T5394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.301423][ T5394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.331690][ T5401] Bluetooth: hci1: command tx timeout [ 223.344210][ T5394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.379606][ T5395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.469176][ T5395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.499788][ T5401] Bluetooth: hci0: command tx timeout [ 223.502794][ T5395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.526598][ T5395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.777486][ T5401] Bluetooth: hci2: command tx timeout [ 223.781071][ T5411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.807994][ T5407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.830167][ T5411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.855861][ T5411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.891189][ T5411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.900022][ T5401] Bluetooth: hci3: command tx timeout [ 223.920806][ T5407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.954160][ T5407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.058312][ T5407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.155195][ T5401] Bluetooth: hci4: command tx timeout [ 224.712790][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.918282][ T5404] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.000578][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.135722][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.143496][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.247454][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.255402][ T1492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.300892][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.339512][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.403416][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.485483][ T5395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.594524][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.602265][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.623542][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.631180][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.656312][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.742926][ T5395] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.824782][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.868394][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.876171][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.974040][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.981817][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.996970][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.004689][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.055268][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.063008][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.171567][ T5394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.182381][ T5394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.216009][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.223944][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.255216][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.262937][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.768661][ T5395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.242930][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.455903][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.797127][ T5395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.885338][ T5404] veth0_vlan: entered promiscuous mode [ 228.990309][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.017620][ T5404] veth1_vlan: entered promiscuous mode [ 229.039863][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.197724][ T5394] veth0_vlan: entered promiscuous mode [ 229.396160][ T5394] veth1_vlan: entered promiscuous mode [ 229.526029][ T5395] veth0_vlan: entered promiscuous mode [ 229.616219][ T5404] veth0_macvtap: entered promiscuous mode [ 229.728409][ T5395] veth1_vlan: entered promiscuous mode [ 229.767538][ T5404] veth1_macvtap: entered promiscuous mode [ 229.808245][ T5411] veth0_vlan: entered promiscuous mode [ 229.958230][ T5411] veth1_vlan: entered promiscuous mode [ 229.997941][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.021074][ T5394] veth0_macvtap: entered promiscuous mode [ 230.113351][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.154477][ T5394] veth1_macvtap: entered promiscuous mode [ 230.250431][ T5404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.262383][ T5404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.273301][ T5404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.282520][ T5404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.310005][ T5395] veth0_macvtap: entered promiscuous mode [ 230.393213][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.404008][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.419265][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.477276][ T5395] veth1_macvtap: entered promiscuous mode [ 230.583976][ T5411] veth0_macvtap: entered promiscuous mode [ 230.645565][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.656406][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.673270][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.746237][ T5411] veth1_macvtap: entered promiscuous mode [ 230.767140][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.781141][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.791826][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.802530][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.817850][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.882378][ T5394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.893299][ T5394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.902519][ T5394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.911712][ T5394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.990799][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.001731][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.011931][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.022771][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.033018][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.043817][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.058970][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.133241][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.144178][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.154561][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.165338][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.180432][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.198135][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.209989][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.221750][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.234450][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.244628][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.255490][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.270960][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.464544][ T5411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.473807][ T5411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.483051][ T5411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.493326][ T5411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.597876][ T5395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.607175][ T5395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.616394][ T5395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.625678][ T5395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.311325][ T5407] veth0_vlan: entered promiscuous mode [ 232.482489][ T5407] veth1_vlan: entered promiscuous mode [ 232.906951][ T5407] veth0_macvtap: entered promiscuous mode [ 233.010280][ T5407] veth1_macvtap: entered promiscuous mode [ 233.223818][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.235800][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.246085][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.256892][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.267073][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.277809][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.288042][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.298795][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.314142][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.443046][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.453906][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.464108][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.474853][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.484993][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.500001][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.511713][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.522486][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.537533][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.582682][ T5407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.591813][ T5407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.600822][ T5407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.610050][ T5407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.040850][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.050135][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.270319][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.278521][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.320870][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.330170][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.440200][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.448689][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.710192][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.718352][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.814211][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.823041][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.049008][ T4020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.057372][ T4020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.187710][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.195940][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.382990][ T3870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.391133][ T3870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.589281][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.597645][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.665141][ T5602] loop3: detected capacity change from 0 to 164 [ 240.717186][ T5602] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 241.648499][ T5612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.271509][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 242.512201][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 242.589976][ T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=91.c5 [ 242.603533][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.635178][ T25] usb 3-1: Product: syz [ 242.639870][ T25] usb 3-1: Manufacturer: syz [ 242.644779][ T25] usb 3-1: SerialNumber: syz [ 242.664665][ T25] usb 3-1: config 0 descriptor?? [ 242.928480][ T25] usb 3-1: Limiting number of CPorts to U8_MAX [ 243.260075][ T25] usb 3-1: Not enough endpoints found in device, aborting! [ 243.318613][ T25] usb 3-1: USB disconnect, device number 2 [ 243.330452][ T5583] udevd[5583]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 243.360343][ T5583] udevd[5583]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 243.568822][ T5631] loop0: detected capacity change from 0 to 164 [ 243.698357][ T5631] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 246.473029][ T5670] loop1: detected capacity change from 0 to 164 [ 246.534068][ T5670] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 246.644423][ C1] eth0: bad gso: type: 1, size: 1408 [ 248.471627][ T4717] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 248.721973][ T4717] usb 1-1: Using ep0 maxpacket: 32 [ 248.760119][ T4717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.771667][ T4717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.781921][ T4717] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.791367][ T4717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.850450][ T4717] usb 1-1: config 0 descriptor?? [ 248.887392][ T4717] hub 1-1:0.0: USB hub found [ 249.010710][ T5705] loop4: detected capacity change from 0 to 164 [ 249.137846][ T5705] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 249.160214][ T4717] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 249.379290][ T4717] usbhid 1-1:0.0: can't add hid device: -71 [ 249.386185][ T4717] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 249.482147][ T4717] usb 1-1: USB disconnect, device number 2 [ 249.906912][ T5714] bridge0: port 3(ip6gretap0) entered blocking state [ 249.914650][ T5714] bridge0: port 3(ip6gretap0) entered disabled state [ 249.922286][ T5714] ip6gretap0: entered allmulticast mode [ 249.930964][ T5714] ip6gretap0: entered promiscuous mode [ 249.939261][ T5714] bridge0: port 3(ip6gretap0) entered blocking state [ 249.946808][ T5714] bridge0: port 3(ip6gretap0) entered forwarding state [ 250.579271][ T5726] loop4: detected capacity change from 0 to 256 [ 250.626254][ T5726] ======================================================= [ 250.626254][ T5726] WARNING: The mand mount option has been deprecated and [ 250.626254][ T5726] and is ignored by this kernel. Remove the mand [ 250.626254][ T5726] option from the mount to silence this warning. [ 250.626254][ T5726] ======================================================= [ 251.009640][ T5726] FAT-fs (loop4): Directory bread(block 64) failed [ 251.016787][ T5726] FAT-fs (loop4): Directory bread(block 65) failed [ 251.024020][ T5726] FAT-fs (loop4): Directory bread(block 66) failed [ 251.030820][ T5726] FAT-fs (loop4): Directory bread(block 67) failed [ 251.037896][ T5726] FAT-fs (loop4): Directory bread(block 68) failed [ 251.044825][ T5726] FAT-fs (loop4): Directory bread(block 69) failed [ 251.051881][ T5726] FAT-fs (loop4): Directory bread(block 70) failed [ 251.058647][ T5726] FAT-fs (loop4): Directory bread(block 71) failed [ 251.065711][ T5726] FAT-fs (loop4): Directory bread(block 72) failed [ 251.072575][ T5726] FAT-fs (loop4): Directory bread(block 73) failed [ 251.802025][ T5740] loop2: detected capacity change from 0 to 164 [ 252.063094][ T5740] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 253.062348][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 253.261559][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 253.291636][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.303098][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.313362][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.322793][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.374710][ T10] usb 1-1: config 0 descriptor?? [ 253.396237][ T10] hub 1-1:0.0: USB hub found [ 253.584009][ T5755] bridge0: port 3(ip6gretap0) entered blocking state [ 253.591587][ T5755] bridge0: port 3(ip6gretap0) entered disabled state [ 253.599219][ T5755] ip6gretap0: entered allmulticast mode [ 253.607985][ T5755] ip6gretap0: entered promiscuous mode [ 253.615943][ T5758] loop4: detected capacity change from 0 to 128 [ 253.616174][ T5755] bridge0: port 3(ip6gretap0) entered blocking state [ 253.629861][ T5755] bridge0: port 3(ip6gretap0) entered forwarding state [ 253.686476][ T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 253.722079][ T5758] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 253.800022][ T5758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.915031][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 253.921859][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 253.989409][ T10] usb 1-1: USB disconnect, device number 3 [ 254.562281][ T5766] loop1: detected capacity change from 0 to 256 [ 254.789374][ T5443] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 255.030955][ T5766] FAT-fs (loop1): Directory bread(block 64) failed [ 255.037963][ T5766] FAT-fs (loop1): Directory bread(block 65) failed [ 255.045254][ T5766] FAT-fs (loop1): Directory bread(block 66) failed [ 255.052153][ T5766] FAT-fs (loop1): Directory bread(block 67) failed [ 255.059071][ T5766] FAT-fs (loop1): Directory bread(block 68) failed [ 255.066108][ T5766] FAT-fs (loop1): Directory bread(block 69) failed [ 255.073253][ T5766] FAT-fs (loop1): Directory bread(block 70) failed [ 255.080112][ T5766] FAT-fs (loop1): Directory bread(block 71) failed [ 255.080386][ T5766] FAT-fs (loop1): Directory bread(block 72) failed [ 255.080510][ T5766] FAT-fs (loop1): Directory bread(block 73) failed [ 255.143348][ T5443] usb 4-1: config 1 has an invalid interface number: 82 but max is 1 [ 255.143499][ T5443] usb 4-1: config 1 has no interface number 1 [ 255.143633][ T5443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 255.143782][ T5443] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.143957][ T5443] usb 4-1: too many endpoints for config 1 interface 82 altsetting 187: 133, using maximum allowed: 30 [ 255.144141][ T5443] usb 4-1: config 1 interface 82 altsetting 187 has a duplicate endpoint with address 0xD, skipping [ 255.144291][ T5443] usb 4-1: config 1 interface 82 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 255.144468][ T5443] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 255.144603][ T5443] usb 4-1: config 1 interface 82 has no altsetting 0 [ 255.167522][ T5443] usb 4-1: New USB device found, idVendor=045e, idProduct=0466, bcdDevice=56.f6 [ 255.167689][ T5443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.167823][ T5443] usb 4-1: Product: syz [ 255.167930][ T5443] usb 4-1: Manufacturer: syz [ 255.168037][ T5443] usb 4-1: SerialNumber: syz [ 255.589159][ T5443] usb 4-1: USB disconnect, device number 2 [ 257.254751][ T5789] bridge0: port 3(ip6gretap0) entered blocking state [ 257.262337][ T5789] bridge0: port 3(ip6gretap0) entered disabled state [ 257.304213][ T5789] ip6gretap0: entered allmulticast mode [ 257.313022][ T5789] ip6gretap0: entered promiscuous mode [ 257.321140][ T5789] bridge0: port 3(ip6gretap0) entered blocking state [ 257.328634][ T5789] bridge0: port 3(ip6gretap0) entered forwarding state [ 257.607992][ T5795] loop2: detected capacity change from 0 to 128 [ 257.698552][ T5795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 257.770562][ T5795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.064902][ T5801] loop4: detected capacity change from 0 to 256 [ 258.870262][ T5801] FAT-fs (loop4): Directory bread(block 64) failed [ 258.882788][ T5801] FAT-fs (loop4): Directory bread(block 65) failed [ 258.891144][ T5801] FAT-fs (loop4): Directory bread(block 66) failed [ 258.898233][ T5801] FAT-fs (loop4): Directory bread(block 67) failed [ 258.905278][ T5801] FAT-fs (loop4): Directory bread(block 68) failed [ 258.912130][ T5801] FAT-fs (loop4): Directory bread(block 69) failed [ 258.919026][ T5801] FAT-fs (loop4): Directory bread(block 70) failed [ 258.926040][ T5801] FAT-fs (loop4): Directory bread(block 71) failed [ 258.933231][ T5801] FAT-fs (loop4): Directory bread(block 72) failed [ 258.939983][ T5801] FAT-fs (loop4): Directory bread(block 73) failed [ 259.323019][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 259.545967][ T10] usb 4-1: config 1 has an invalid interface number: 82 but max is 1 [ 259.554626][ T10] usb 4-1: config 1 has no interface number 1 [ 259.560980][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 259.571274][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.584495][ T10] usb 4-1: too many endpoints for config 1 interface 82 altsetting 187: 133, using maximum allowed: 30 [ 259.600021][ T10] usb 4-1: config 1 interface 82 altsetting 187 has a duplicate endpoint with address 0xD, skipping [ 259.612564][ T10] usb 4-1: config 1 interface 82 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 259.626362][ T10] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 259.635853][ T10] usb 4-1: config 1 interface 82 has no altsetting 0 [ 259.707448][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0466, bcdDevice=56.f6 [ 259.717018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.725457][ T10] usb 4-1: Product: syz [ 259.729843][ T10] usb 4-1: Manufacturer: syz [ 259.734891][ T10] usb 4-1: SerialNumber: syz [ 260.233003][ T10] usb 4-1: USB disconnect, device number 3 [ 260.563177][ T5827] bridge0: port 3(ip6gretap0) entered blocking state [ 260.582105][ T5827] bridge0: port 3(ip6gretap0) entered disabled state [ 260.589534][ T5827] ip6gretap0: entered allmulticast mode [ 260.613928][ T5827] ip6gretap0: entered promiscuous mode [ 260.633299][ T5827] bridge0: port 3(ip6gretap0) entered blocking state [ 260.640677][ T5827] bridge0: port 3(ip6gretap0) entered forwarding state [ 260.649077][ C1] eth0: bad gso: type: 1, size: 1408 [ 260.663449][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.891477][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 260.956350][ T25] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 260.965247][ T25] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 260.975931][ T25] usb 1-1: config 135 has no interface number 0 [ 260.982501][ T25] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.032964][ T25] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 261.042417][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.050854][ T25] usb 1-1: Product: syz [ 261.055441][ T25] usb 1-1: Manufacturer: syz [ 261.060275][ T25] usb 1-1: SerialNumber: syz [ 261.162904][ T25] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 261.169693][ T25] usb 1-1: No valid video chain found. [ 261.246470][ T5833] loop1: detected capacity change from 0 to 128 [ 261.312822][ T5833] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 261.378854][ T5833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.528299][ T25] usb 1-1: USB disconnect, device number 4 [ 262.439466][ T5840] syzkaller0: entered promiscuous mode [ 262.445376][ T5840] syzkaller0: entered allmulticast mode [ 263.751692][ T5401] ===================================================== [ 263.758944][ T5401] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 263.766403][ T5401] hci_rx_work+0x10a8/0x1130 [ 263.771434][ T5401] process_scheduled_works+0xae0/0x1c40 [ 263.777193][ T5401] worker_thread+0xea5/0x1520 [ 263.782262][ T5401] kthread+0x3e2/0x540 [ 263.786542][ T5401] ret_from_fork+0x6d/0x90 [ 263.794548][ T5401] ret_from_fork_asm+0x1a/0x30 [ 263.799534][ T5401] [ 263.803135][ T5401] Uninit was created at: [ 263.807659][ T5401] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 263.813984][ T5401] kmalloc_reserve+0x13d/0x4a0 [ 263.818944][ T5401] __alloc_skb+0x363/0x7b0 [ 263.823740][ T5401] vhci_write+0x128/0x910 [ 263.828236][ T5401] vfs_write+0xb2f/0x1550 [ 263.832945][ T5401] ksys_write+0x20f/0x4c0 [ 263.837478][ T5401] __ia32_sys_write+0x91/0xe0 [ 263.842570][ T5401] ia32_sys_call+0x2e34/0x40d0 [ 263.847573][ T5401] __do_fast_syscall_32+0xb0/0x110 [ 263.853039][ T5401] do_fast_syscall_32+0x38/0x80 [ 263.858072][ T5401] do_SYSENTER_32+0x1f/0x30 [ 263.862897][ T5401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.869459][ T5401] [ 263.871998][ T5401] CPU: 0 PID: 5401 Comm: kworker/u9:4 Not tainted 6.10.0-syzkaller-09278-ga4f928552058 #0 [ 263.882305][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.898537][ T5401] Workqueue: hci3 hci_rx_work [ 263.906536][ T5401] ===================================================== [ 263.913706][ T5401] Disabling lock debugging due to kernel taint [ 263.919959][ T5401] Kernel panic - not syncing: kmsan.panic set ... [ 263.926492][ T5401] CPU: 0 PID: 5401 Comm: kworker/u9:4 Tainted: G B 6.10.0-syzkaller-09278-ga4f928552058 #0 [ 263.938047][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.948300][ T5401] Workqueue: hci3 hci_rx_work [ 263.953201][ T5401] Call Trace: [ 263.956598][ T5401] [ 263.959635][ T5401] dump_stack_lvl+0x216/0x2d0 [ 263.964495][ T5401] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.970538][ T5401] dump_stack+0x1e/0x30 [ 263.974863][ T5401] panic+0x4e2/0xcd0 [ 263.978922][ T5401] ? kmsan_get_metadata+0x141/0x1d0 [ 263.984360][ T5401] kmsan_report+0x2d5/0x2e0 [ 263.989079][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 263.994498][ T5401] ? __msan_warning+0x95/0x120 [ 263.999458][ T5401] ? hci_rx_work+0x10a8/0x1130 [ 264.004424][ T5401] ? process_scheduled_works+0xae0/0x1c40 [ 264.010336][ T5401] ? worker_thread+0xea5/0x1520 [ 264.015367][ T5401] ? kthread+0x3e2/0x540 [ 264.019798][ T5401] ? ret_from_fork+0x6d/0x90 [ 264.024550][ T5401] ? ret_from_fork_asm+0x1a/0x30 [ 264.029692][ T5401] ? filter_irq_stacks+0x60/0x1a0 [ 264.034944][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.040364][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.045929][ T5401] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 264.052492][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.057927][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.063347][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.068770][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.074188][ T5401] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 264.080739][ T5401] ? kmsan_get_metadata+0x146/0x1d0 [ 264.086155][ T5401] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.092212][ T5401] __msan_warning+0x95/0x120 [ 264.097014][ T5401] hci_rx_work+0x10a8/0x1130 [ 264.101824][ T5401] ? __pfx_hci_rx_work+0x10/0x10 [ 264.106954][ T5401] process_scheduled_works+0xae0/0x1c40 [ 264.112730][ T5401] worker_thread+0xea5/0x1520 [ 264.117596][ T5401] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.123648][ T5401] kthread+0x3e2/0x540 [ 264.127912][ T5401] ? __pfx_worker_thread+0x10/0x10 [ 264.133218][ T5401] ? __pfx_kthread+0x10/0x10 [ 264.138000][ T5401] ret_from_fork+0x6d/0x90 [ 264.142577][ T5401] ? __pfx_kthread+0x10/0x10 [ 264.147363][ T5401] ret_from_fork_asm+0x1a/0x30 [ 264.152352][ T5401] [ 264.155709][ T5401] Kernel Offset: disabled [ 264.160094][ T5401] Rebooting in 86400 seconds..