last executing test programs: 24m34.51800984s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 24m19.100753688s ago: executing program 32 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 24m4.629953975s ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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") ioprio_set$pid(0x2, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000000)={0x7fff, 0x8000000000000001}) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$cec(0x0, 0x0, 0x82002) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x100000001, 0x2003) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x2, 0x3, 0x1, {0x400000080001, 0xff, 0x20fb, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 24m0.025801425s ago: executing program 0 (id=54): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r7, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 23m58.260117102s ago: executing program 0 (id=56): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 23m56.924879572s ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x9, 0xfffffffa, 0x1, 0x80000001, 0x1, 0x7, 0x5f19, 0x10}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000e3c6cc0fd646bb347633248d2378565de520", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) 23m55.962154911s ago: executing program 1 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='svc_wake_up\x00', r0}, 0xfffffffffffffec4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) write$bt_hci(r2, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYBLOB="4a0648386cec213de5dcd16e989382e6774bb933957529a7a77650073a787e7fc8a89d2ba75239ea5a59c1054bed602bd26b531cffde7aeccb1d5d1238478b673dd386c3caa68358e06743c7b5f64bfcbb5ad982da3f95dfa60a63aeac625e576f8e8490a6b4723254f662e68daa765785463b48604589e51ec7da14a4866461702c2e8a7ebbc15be0d1a7e4ae51ab69e8cdb76b096ba912f5b763e0a0ee1436bfbb16db8d060517936a4260357ecd0e71e00d647f25bdb59beff13dd7e4e963b5968368566a3b718357e3005898a29154f1b189c897b49e4246aeec61b849dc870f0c7e32f0d0", @ANYRES16=r0], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, 0x0) r6 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) accept4$rose(r5, 0x0, 0x0, 0x0) 23m54.621961958s ago: executing program 1 (id=62): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 23m54.169613614s ago: executing program 0 (id=63): creat(0x0, 0x182) open(&(0x7f0000000100)='./bus\x00', 0x147842, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000fd0200030000000006001d000003000005041b0011000000e1310e00051118"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x5, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x5}) 23m52.855803699s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x5, 0xfff9}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x6, 0x5, 0x6979, 0x4, 0x5}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a78", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005000800010000000800010000000000080004"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r5, 0x1, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b0, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) 23m48.906438513s ago: executing program 1 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='svc_wake_up\x00', r0}, 0xfffffffffffffec4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) write$bt_hci(r2, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYBLOB="4a0648386cec213de5dcd16e989382e6774bb933957529a7a77650073a787e7fc8a89d2ba75239ea5a59c1054bed602bd26b531cffde7aeccb1d5d1238478b673dd386c3caa68358e06743c7b5f64bfcbb5ad982da3f95dfa60a63aeac625e576f8e8490a6b4723254f662e68daa765785463b48604589e51ec7da14a4866461702c2e8a7ebbc15be0d1a7e4ae51ab69e8cdb76b096ba912f5b763e0a0ee1436bfbb16db8d060517936a4260357ecd0e71e00d647f25bdb59beff13dd7e4e963b5968368566a3b718357e3005898a29154f1b189c897b49e4246aeec61b849dc870f0c7e32f0d0", @ANYRES16=r0], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0xee00, 0x0) r7 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) accept4$rose(r5, 0x0, 0x0, 0x0) 23m46.813002204s ago: executing program 1 (id=73): close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004040) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) 23m45.656159079s ago: executing program 1 (id=74): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0xc6c1, 0x4, 0x10080, 0x5, 0x8, 0xcc7, 0xfff, 0x0, 0xffffffff, 0x100, 0x401, 0x1, 0x1, 0x1, 0x0, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xffdffffb, 0x0, 0x307, 0x2, 0xe69, 0x2003c, 0x4, 0x106, 0x8000000]}) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 23m42.168400115s ago: executing program 1 (id=77): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c840012147cd9e5943aa8a315357b30c56529d6b619a78687eea13ea02981afbb0f60a68d5bab037cd866678f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba860ae52d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0029d36cb8ed369e9f96ac0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045", 0xbe}, {&(0x7f0000001400)="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", 0x5b9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077", 0x9a}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 23m36.289203025s ago: executing program 33 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x5, 0xfff9}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x6, 0x5, 0x6979, 0x4, 0x5}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a78", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005000800010000000800010000000000080004"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r5, 0x1, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b0, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) 23m27.117980126s ago: executing program 34 (id=77): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c840012147cd9e5943aa8a315357b30c56529d6b619a78687eea13ea02981afbb0f60a68d5bab037cd866678f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba860ae52d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0029d36cb8ed369e9f96ac0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045", 0xbe}, {&(0x7f0000001400)="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", 0x5b9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077", 0x9a}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m18.772802776s ago: executing program 2 (id=2142): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1m17.300665975s ago: executing program 2 (id=2149): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xc28, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.95114067s ago: executing program 2 (id=2151): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.564267276s ago: executing program 2 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) 1m15.336951924s ago: executing program 2 (id=2161): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 1m15.006353015s ago: executing program 2 (id=2165): socket(0x15, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 59.500495692s ago: executing program 6 (id=2208): r0 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0x8000e7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r6, 0x1) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x28, 0x2004, @fd=r3, 0x5, 0x8, 0x9, 0xa, 0x0, {0x3}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 55.616759934s ago: executing program 6 (id=2213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) 55.260618565s ago: executing program 6 (id=2214): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x100) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 54.331804552s ago: executing program 6 (id=2219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) 53.465102506s ago: executing program 6 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 52.304261028s ago: executing program 6 (id=2228): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000440)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0xffffffff, 0x100, 0x3, 0x1, 0x1ff, 0x6, 0x1, 0xdfb560e}}) socket$nl_route(0x10, 0x3, 0x0) 36.815344971s ago: executing program 35 (id=2228): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000440)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0xffffffff, 0x100, 0x3, 0x1, 0x1ff, 0x6, 0x1, 0xdfb560e}}) socket$nl_route(0x10, 0x3, 0x0) 17.621942211s ago: executing program 8 (id=2316): socket(0x15, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 16.532280884s ago: executing program 8 (id=2318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018014000180080001f7e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001dbcfb0670276791500ac1e00"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0xfc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}], 0x1f4) remap_file_pages(&(0x7f0000a19000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x80000) 15.932592291s ago: executing program 8 (id=2320): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) 13.837694436s ago: executing program 8 (id=2327): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) 12.80041102s ago: executing program 8 (id=2329): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40048c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) 11.420878088s ago: executing program 8 (id=2332): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x28}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x40240, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002800800014036"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 7.999438728s ago: executing program 4 (id=2345): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40048c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) 6.668263109s ago: executing program 4 (id=2350): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 6.264982719s ago: executing program 4 (id=2351): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 5.792549327s ago: executing program 7 (id=2354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0xc8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x7c, 0x1, [@m_skbmod={0x78, 0xa, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x5}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0xba01}, 0x810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.928599789s ago: executing program 4 (id=2355): modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1021000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 4.917538392s ago: executing program 5 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018014000180080001f7e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001dbcfb0670276791500ac1e00"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0xfc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455ba"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}], 0x1f4) remap_file_pages(&(0x7f0000a19000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x80000) 4.666292846s ago: executing program 4 (id=2357): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0x0) 4.588642537s ago: executing program 5 (id=2358): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x67e34, 0x5922b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.582751706s ago: executing program 7 (id=2359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x1002}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffff99, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.301920864s ago: executing program 5 (id=2360): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40048c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) 3.612347479s ago: executing program 7 (id=2361): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.347907726s ago: executing program 4 (id=2362): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24048180) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x190) listen(r0, 0x3) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 2.347037963s ago: executing program 7 (id=2363): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)='<', 0x1}], 0x2) 2.19628439s ago: executing program 5 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.396304763s ago: executing program 7 (id=2365): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x2, 0xf}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 1.326984152s ago: executing program 5 (id=2366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 991.820183ms ago: executing program 5 (id=2367): socket$inet_sctp(0x2, 0x1, 0x84) fsopen(&(0x7f0000000000)='smb3\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) pivot_root(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) 0s ago: executing program 7 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018014000180080001f7e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001dbcfb0670276791500ac1e00"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0xfc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455ba"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}], 0x1f4) remap_file_pages(&(0x7f0000a19000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x80000) kernel console output (not intermixed with test programs): pacity change from 0 to 128 [ 1243.802742][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.828655][T16107] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1243.887527][T16107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.951868][T15948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1243.992993][T15948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1244.331496][T16011] team0: Port device team_slave_1 added [ 1244.805607][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.901921][T16011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.908917][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.981667][T16011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.120044][T16011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.137718][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.229032][T16011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.313324][T16121] loop2: detected capacity change from 0 to 128 [ 1245.563780][T16126] loop4: detected capacity change from 0 to 512 [ 1245.577529][T16126] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1245.582007][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1245.593925][T16121] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1245.608402][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1245.618703][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1245.626944][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1245.634747][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1245.755767][T16121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.355324][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.608924][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.655690][T16137] loop2: detected capacity change from 0 to 512 [ 1246.671610][T16137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1246.737055][T16137] EXT4-fs (loop2): 1 truncate cleaned up [ 1246.756494][T16137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.532486][T16142] loop4: detected capacity change from 0 to 32768 [ 1247.760941][ T5844] Bluetooth: hci4: command tx timeout [ 1247.895008][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.674785][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.681309][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.939885][ T30] audit: type=1800 audit(1759780504.432:283): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="file1" dev="loop4" ino=9 res=0 errno=0 [ 1249.136937][T16011] hsr_slave_0: entered promiscuous mode [ 1249.159154][T16146] loop2: detected capacity change from 0 to 512 [ 1249.168596][T16011] hsr_slave_1: entered promiscuous mode [ 1249.178205][T16146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1249.193789][T16146] EXT4-fs (loop2): 1 truncate cleaned up [ 1249.201284][T16146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.220048][T16011] debugfs: 'hsr0' already exists in 'hsr' [ 1249.227863][T16011] Cannot create hsr debugfs directory [ 1249.522750][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.851020][ T5844] Bluetooth: hci4: command tx timeout [ 1250.103891][T16154] loop5: detected capacity change from 0 to 256 [ 1250.905225][T16154] FAT-fs (loop5): Directory bread(block 64) failed [ 1250.924182][T16154] FAT-fs (loop5): Directory bread(block 65) failed [ 1250.939050][T16154] FAT-fs (loop5): Directory bread(block 66) failed [ 1250.945783][T16154] FAT-fs (loop5): Directory bread(block 67) failed [ 1250.946668][T16156] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1250.952690][T16154] FAT-fs (loop5): Directory bread(block 68) failed [ 1250.960932][T16156] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1250.960975][T16156] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1251.171825][T16154] FAT-fs (loop5): Directory bread(block 69) failed [ 1251.178492][T16154] FAT-fs (loop5): Directory bread(block 70) failed [ 1251.282426][T16154] FAT-fs (loop5): Directory bread(block 71) failed [ 1251.291055][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.334960][T16154] FAT-fs (loop5): Directory bread(block 72) failed [ 1251.366719][T16154] FAT-fs (loop5): Directory bread(block 73) failed [ 1251.374760][T16159] loop4: detected capacity change from 0 to 40427 [ 1251.385993][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.468629][T16159] F2FS-fs (loop4): invalid crc value [ 1251.692349][T16159] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1251.735357][T16159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1251.896658][ T5844] Bluetooth: hci4: command tx timeout [ 1253.011360][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.018548][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.061244][ T50] bridge_slave_1: left allmulticast mode [ 1253.066907][ T50] bridge_slave_1: left promiscuous mode [ 1253.108905][ T5857] syz-executor: attempt to access beyond end of device [ 1253.108905][ T5857] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1253.131285][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.178430][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1253.178480][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1253.178502][ T5857] Call Trace: [ 1253.178514][ T5857] [ 1253.178528][ T5857] dump_stack_lvl+0x16c/0x1f0 [ 1253.178583][ T5857] f2fs_handle_critical_error+0x624/0x9f0 [ 1253.178624][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.178668][ T5857] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1253.178737][ T5857] f2fs_write_end_io+0x958/0xcf0 [ 1253.178784][ T5857] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1253.178831][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.178887][ T5857] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1253.178928][ T5857] bio_endio+0x713/0x860 [ 1253.178981][ T5857] submit_bio_noacct+0x306/0x1f60 [ 1253.179032][ T5857] __submit_merged_bio+0x33c/0x770 [ 1253.179081][ T5857] __submit_merged_write_cond+0x319/0x3f0 [ 1253.179138][ T5857] f2fs_write_cache_pages+0x2067/0x2570 [ 1253.179230][ T5857] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1253.179282][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179324][ T5857] ? __lock_acquire+0x62e/0x1ce0 [ 1253.179378][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179421][ T5857] ? __lock_acquire+0x62e/0x1ce0 [ 1253.179508][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179552][ T5857] ? find_held_lock+0x2b/0x80 [ 1253.179647][ T5857] ? __lock_acquire+0x62e/0x1ce0 [ 1253.179696][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179748][ T5857] f2fs_write_data_pages+0x4ad/0xd90 [ 1253.179810][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1253.179857][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179915][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.179966][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1253.180019][ T5857] do_writepages+0x27a/0x600 [ 1253.180068][ T5857] ? __pfx_do_writepages+0x10/0x10 [ 1253.180106][ T5857] ? do_raw_spin_unlock+0x172/0x230 [ 1253.180156][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.180207][ T5857] ? _raw_spin_unlock+0x28/0x50 [ 1253.180253][ T5857] filemap_fdatawrite_wbc+0x104/0x160 [ 1253.180300][ T5857] __filemap_fdatawrite_range+0xb9/0x100 [ 1253.180356][ T5857] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1253.180478][ T5857] ? find_held_lock+0x2b/0x80 [ 1253.180535][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.180580][ T5857] ? do_raw_spin_unlock+0x172/0x230 [ 1253.180630][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.180682][ T5857] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 1253.180759][ T5857] block_operations+0x2b0/0xfe0 [ 1253.180824][ T5857] ? __pfx_block_operations+0x10/0x10 [ 1253.180935][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.180984][ T5857] ? ktime_get+0x200/0x310 [ 1253.181015][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.181059][ T5857] ? lockdep_hardirqs_on+0x7c/0x110 [ 1253.181104][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.181148][ T5857] ? rcu_is_watching+0x12/0xc0 [ 1253.181222][ T5857] f2fs_write_checkpoint+0x32b/0x5300 [ 1253.181285][ T5857] ? kfree+0x2b8/0x6d0 [ 1253.181329][ T5857] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1253.181387][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.181429][ T5857] ? rcu_is_watching+0x12/0xc0 [ 1253.181482][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.181525][ T5857] ? kthread_stop+0x272/0x630 [ 1253.181572][ T5857] kill_f2fs_super+0x3d6/0x490 [ 1253.181625][ T5857] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1253.181699][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.181761][ T5857] deactivate_locked_super+0xc1/0x1a0 [ 1253.181818][ T5857] deactivate_super+0xde/0x100 [ 1253.181875][ T5857] cleanup_mnt+0x225/0x450 [ 1253.181936][ T5857] task_work_run+0x150/0x240 [ 1253.181987][ T5857] ? __pfx_task_work_run+0x10/0x10 [ 1253.182031][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.182079][ T5857] ? __pfx___x64_sys_umount+0x10/0x10 [ 1253.182125][ T5857] exit_to_user_mode_loop+0xec/0x130 [ 1253.182174][ T5857] do_syscall_64+0x419/0x4e0 [ 1253.182234][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.182270][ T5857] RIP: 0033:0x7f18e57901f7 [ 1253.182300][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1253.182337][ T5857] RSP: 002b:00007fff34341608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1253.182373][ T5857] RAX: 0000000000000000 RBX: 00007f18e5811d7d RCX: 00007f18e57901f7 [ 1253.182398][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff343416c0 [ 1253.182421][ T5857] RBP: 00007fff343416c0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.182443][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff34342750 [ 1253.182467][ T5857] R13: 00007f18e5811d7d R14: 0000000000131d6d R15: 00007fff34342790 [ 1253.182520][ T5857] [ 1253.647341][ T50] bridge_slave_0: left allmulticast mode [ 1253.650980][ T5857] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1253.653052][ T50] bridge_slave_0: left promiscuous mode [ 1253.665742][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.728349][T16180] loop2: detected capacity change from 0 to 512 [ 1253.973314][ T5844] Bluetooth: hci4: command tx timeout [ 1254.247420][T16180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1254.594182][T16187] loop5: detected capacity change from 0 to 128 [ 1254.704074][T16187] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1254.704861][T16180] EXT4-fs (loop2): 1 truncate cleaned up [ 1254.930597][T16180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.945503][T16187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.778783][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.796093][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.819264][ T50] bond0 (unregistering): Released all slaves [ 1256.924324][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.931567][T14325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.396926][ T50] hsr_slave_0: left promiscuous mode [ 1257.423682][ T50] hsr_slave_1: left promiscuous mode [ 1257.430650][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.443235][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.467780][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.475700][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.538905][ T50] veth1_macvtap: left promiscuous mode [ 1257.545798][ T50] veth0_macvtap: left promiscuous mode [ 1257.552550][ T50] veth1_vlan: left promiscuous mode [ 1257.558181][ T50] veth0_vlan: left promiscuous mode [ 1257.805176][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.030192][T16214] loop2: detected capacity change from 0 to 512 [ 1258.061309][T16202] loop4: detected capacity change from 0 to 32768 [ 1258.079490][T16214] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1258.105012][T16202] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1335 (16202) [ 1258.258416][T16212] loop5: detected capacity change from 0 to 32768 [ 1259.280897][ T30] audit: type=1800 audit(1759780515.122:284): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1339" name="file1" dev="loop5" ino=9 res=0 errno=0 [ 1259.691078][T16202] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1259.808820][T16202] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1259.967711][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1259.993392][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1260.251286][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1260.331213][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1260.360184][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1260.370193][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1260.380940][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1260.391842][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1260.402224][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1260.412962][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1260.469894][T16202] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1260.569442][T16202] BTRFS error (device loop4): open_ctree failed: -12 [ 1261.302253][T16246] loop5: detected capacity change from 0 to 512 [ 1261.310197][T16246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1261.362686][T16246] EXT4-fs (loop5): 1 truncate cleaned up [ 1261.374065][T16246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.521759][T16250] loop2: detected capacity change from 0 to 512 [ 1261.535867][T16250] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1262.946504][T16259] loop4: detected capacity change from 0 to 256 [ 1263.016349][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.032896][T16259] FAT-fs (loop4): Directory bread(block 64) failed [ 1263.040354][T16259] FAT-fs (loop4): Directory bread(block 65) failed [ 1263.047659][T16259] FAT-fs (loop4): Directory bread(block 66) failed [ 1263.057631][T16259] FAT-fs (loop4): Directory bread(block 67) failed [ 1263.069382][T16259] FAT-fs (loop4): Directory bread(block 68) failed [ 1263.076444][T16259] FAT-fs (loop4): Directory bread(block 69) failed [ 1263.088127][T16259] FAT-fs (loop4): Directory bread(block 70) failed [ 1263.096653][T16259] FAT-fs (loop4): Directory bread(block 71) failed [ 1263.103696][T16259] FAT-fs (loop4): Directory bread(block 72) failed [ 1263.110237][T16259] FAT-fs (loop4): Directory bread(block 73) failed [ 1264.035619][T16265] loop5: detected capacity change from 0 to 1024 [ 1264.215093][T16265] hfsplus: Unknown parameter '.odecompose' [ 1265.320363][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1265.435023][T16270] loop2: detected capacity change from 0 to 512 [ 1265.468285][T16270] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1265.529117][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1266.750279][T16279] overlayfs: failed to resolve './bus': -2 [ 1266.751182][T16125] chnl_net:caif_netlink_parms(): no params data found [ 1267.407123][T16284] loop4: detected capacity change from 0 to 128 [ 1267.479593][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1349'. [ 1267.508744][T16284] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1267.544172][T16284] ext4 filesystem being mounted at /451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1267.576024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.414497][ T5857] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1269.676525][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.716504][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.741203][T16125] bridge_slave_0: entered allmulticast mode [ 1269.770003][T16125] bridge_slave_0: entered promiscuous mode [ 1269.785895][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.799787][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.815211][T16125] bridge_slave_1: entered allmulticast mode [ 1269.843681][T16125] bridge_slave_1: entered promiscuous mode [ 1269.852990][T16303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1352'. [ 1269.871710][T16303] bridge: RTM_NEWNEIGH with invalid ether address [ 1270.558294][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.623241][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.878398][T16125] team0: Port device team_slave_0 added [ 1270.895204][T16125] team0: Port device team_slave_1 added [ 1271.076851][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.122808][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.150306][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.278299][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.316851][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.344831][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.429732][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.567347][T16011] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1272.316295][ T5939] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1272.501409][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 1272.524888][ T5939] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1272.553762][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.575469][T16125] hsr_slave_0: entered promiscuous mode [ 1272.577105][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 1272.582290][ T5939] usb 3-1: config 0 has no interface number 0 [ 1272.601633][T16125] hsr_slave_1: entered promiscuous mode [ 1272.608129][T16125] debugfs: 'hsr0' already exists in 'hsr' [ 1272.615809][ T5939] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.641776][T16125] Cannot create hsr debugfs directory [ 1272.651686][T16011] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1272.663290][ T5939] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1272.679314][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.692512][T16011] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1272.699846][ T5939] usb 3-1: Product: syz [ 1272.717887][ T5939] usb 3-1: Manufacturer: syz [ 1272.730572][ T5939] usb 3-1: SerialNumber: syz [ 1272.741522][ T5939] usb 3-1: config 0 descriptor?? [ 1272.856306][T16011] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1276.100002][ T5939] usb 3-1: USB disconnect, device number 28 [ 1276.263292][T16381] loop4: detected capacity change from 0 to 512 [ 1276.361215][T16381] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1277.307470][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.971406][T16011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.049125][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.083720][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.090967][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.114751][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.121983][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.548399][T16125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1278.627083][T16125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1278.644744][T16125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1278.726868][T16125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1278.868766][T16011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.965890][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.004812][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.156446][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.163737][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.246757][T16420] overlayfs: failed to resolve './bus': -2 [ 1280.182461][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.189695][T14325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.782290][T16421] loop5: detected capacity change from 0 to 2048 [ 1281.080516][T16421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.085947][ T13] bridge_slave_1: left allmulticast mode [ 1281.098716][ T13] bridge_slave_1: left promiscuous mode [ 1281.105913][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.143078][T16421] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.155702][ T13] bridge_slave_0: left allmulticast mode [ 1281.161487][ T13] bridge_slave_0: left promiscuous mode [ 1281.167458][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.491627][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.635532][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.646894][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.661008][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.677046][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.724388][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1284.752735][T16455] loop4: detected capacity change from 0 to 32768 [ 1284.771887][ T5843] Bluetooth: hci0: command tx timeout [ 1284.798343][T16455] jfs_lookup: iget failed on inum 4 [ 1285.726706][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.729821][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.736450][ T13] bond0 (unregistering): Released all slaves [ 1285.773396][T16463] Bluetooth: MGMT ver 1.23 [ 1286.085865][ T13] hsr_slave_0: left promiscuous mode [ 1286.112641][ T13] hsr_slave_1: left promiscuous mode [ 1286.134456][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.162341][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.778547][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1286.819311][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1286.863904][ T5844] Bluetooth: hci0: command tx timeout [ 1287.570399][T16011] veth0_vlan: entered promiscuous mode [ 1287.718813][T16011] veth1_vlan: entered promiscuous mode [ 1288.594243][T16440] chnl_net:caif_netlink_parms(): no params data found [ 1288.931607][ T5844] Bluetooth: hci0: command tx timeout [ 1289.000903][T10242] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1289.065995][T16011] veth0_macvtap: entered promiscuous mode [ 1289.096765][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.116093][T16440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.124333][T16440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.132996][T16440] bridge_slave_0: entered allmulticast mode [ 1289.143929][T16440] bridge_slave_0: entered promiscuous mode [ 1289.174210][T16440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.181886][T10242] usb 3-1: Using ep0 maxpacket: 32 [ 1289.198539][T16440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.210226][T10242] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1289.230127][T10242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.238574][T16440] bridge_slave_1: entered allmulticast mode [ 1289.255524][T16440] bridge_slave_1: entered promiscuous mode [ 1289.262022][T10242] usb 3-1: Product: syz [ 1289.274702][T10242] usb 3-1: Manufacturer: syz [ 1289.287103][T10242] usb 3-1: SerialNumber: syz [ 1289.316458][T10242] usb 3-1: config 0 descriptor?? [ 1289.349977][T10242] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1289.395997][T16440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.437118][T16440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.605249][T16440] team0: Port device team_slave_0 added [ 1289.625395][T16440] team0: Port device team_slave_1 added [ 1289.758365][T16440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.786237][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.860772][T16440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.885831][T16440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.893214][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.920315][T16440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.063557][T16440] hsr_slave_0: entered promiscuous mode [ 1290.077763][T16440] hsr_slave_1: entered promiscuous mode [ 1290.228441][T16125] veth0_vlan: entered promiscuous mode [ 1290.410111][T16125] veth1_vlan: entered promiscuous mode [ 1290.646721][T16125] veth0_macvtap: entered promiscuous mode [ 1290.727192][T16125] veth1_macvtap: entered promiscuous mode [ 1290.765185][ T6792] bridge_slave_1: left allmulticast mode [ 1290.771302][ T6792] bridge_slave_1: left promiscuous mode [ 1290.777133][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.787031][ T6792] bridge_slave_0: left allmulticast mode [ 1290.793073][ T6792] bridge_slave_0: left promiscuous mode [ 1290.798945][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.013959][ T5844] Bluetooth: hci0: command tx timeout [ 1291.272917][T10242] gspca_ov534_9: reg_w failed -71 [ 1291.763198][T16542] loop5: detected capacity change from 0 to 256 [ 1291.884276][T10242] gspca_ov534_9: Unknown sensor 0000 [ 1291.892703][T10242] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1292.156612][T10242] usb 3-1: USB disconnect, device number 29 [ 1292.468718][T16546] loop4: detected capacity change from 0 to 512 [ 1292.492093][T16546] msdos: Unknown parameter 'nod4„_ZSJà­k' [ 1294.025701][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1294.035504][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1294.057991][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1294.115399][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1294.124950][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1295.914469][ T6792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.984680][ T6792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.005105][ T6792] bond0 (unregistering): Released all slaves [ 1296.211140][ T5843] Bluetooth: hci1: command tx timeout [ 1296.226410][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.333398][ T6792] hsr_slave_0: left promiscuous mode [ 1296.356440][ T6792] hsr_slave_1: left promiscuous mode [ 1296.545194][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.554144][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.591906][ T6792] veth0_macvtap: left promiscuous mode [ 1296.598125][ T6792] veth1_vlan: left promiscuous mode [ 1296.604052][ T6792] veth0_vlan: left promiscuous mode [ 1297.891134][ T6792] team0 (unregistering): Port device team_slave_1 removed [ 1297.937450][ T6792] team0 (unregistering): Port device team_slave_0 removed [ 1298.290799][ T5843] Bluetooth: hci1: command tx timeout [ 1298.491262][T16588] process 'syz.5.1405' launched './file1' with NULL argv: empty string added [ 1298.658491][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.223863][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.357455][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.370841][ T5843] Bluetooth: hci1: command tx timeout [ 1300.394663][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.469581][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 1300.514340][T14325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.593154][T16440] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1300.726595][T16440] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1301.322104][T16440] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1301.378414][T16440] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1302.226898][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.332776][T16440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.369113][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.376290][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.452824][ T5843] Bluetooth: hci1: command tx timeout [ 1302.468419][T16554] chnl_net:caif_netlink_parms(): no params data found [ 1302.559995][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.567237][ T6068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.025755][T16554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.033140][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.048571][T16554] bridge_slave_0: entered allmulticast mode [ 1303.056932][T16554] bridge_slave_0: entered promiscuous mode [ 1303.075001][T16554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.088713][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.096159][T16554] bridge_slave_1: entered allmulticast mode [ 1303.105588][T16554] bridge_slave_1: entered promiscuous mode [ 1303.164807][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.218248][T16554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.249060][T16554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.302322][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.404468][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.474010][T16554] team0: Port device team_slave_0 added [ 1303.509231][T16554] team0: Port device team_slave_1 added [ 1303.545087][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.667205][T16554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.690458][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.717853][T16554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.732386][T16554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.739354][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.800834][T16554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.006198][T16440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.184507][T16554] hsr_slave_0: entered promiscuous mode [ 1305.212074][T16554] hsr_slave_1: entered promiscuous mode [ 1305.256055][T16554] debugfs: 'hsr0' already exists in 'hsr' [ 1305.271291][T16554] Cannot create hsr debugfs directory [ 1305.410890][ T5939] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1305.583773][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 1305.602322][ T5939] usb 5-1: config 0 has no interfaces? [ 1305.609347][ T5939] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1305.665000][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.078845][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.108836][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.117539][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.129551][ T5939] usb 5-1: config 0 descriptor?? [ 1306.158520][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.172687][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1306.207027][ T12] bridge_slave_1: left allmulticast mode [ 1306.238468][ T12] bridge_slave_1: left promiscuous mode [ 1306.333827][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.443784][ T5939] usb 5-1: USB disconnect, device number 24 [ 1306.598522][ T12] bridge_slave_0: left allmulticast mode [ 1306.618255][ T12] bridge_slave_0: left promiscuous mode [ 1306.831036][T16687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1307.367510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.153444][ T5952] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1308.210924][ T5844] Bluetooth: hci4: command tx timeout [ 1308.330817][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 1308.515233][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.536597][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.352032][ T5952] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1309.364674][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.384976][ T5952] usb 3-1: config 0 descriptor?? [ 1309.514175][T16701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1426'. [ 1309.741376][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.747802][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.847550][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.862100][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.875160][ T12] bond0 (unregistering): Released all slaves [ 1309.933397][ T5952] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 1310.292100][ T5844] Bluetooth: hci4: command tx timeout [ 1310.731085][ T5952] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 1310.751735][ T5952] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1310.797233][ T5952] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 1311.048475][ T5952] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 1311.124096][ T12] hsr_slave_0: left promiscuous mode [ 1311.140603][ T12] hsr_slave_1: left promiscuous mode [ 1311.170183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.177772][ T5952] usb 3-1: USB disconnect, device number 30 [ 1311.187407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.262643][T16719] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1311.271964][T16719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1311.499907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.622245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.821106][ T12] veth1_macvtap: left promiscuous mode [ 1311.826705][ T12] veth0_macvtap: left promiscuous mode [ 1311.832651][ T12] veth1_vlan: left promiscuous mode [ 1311.837993][ T12] veth0_vlan: left promiscuous mode [ 1312.370797][ T5844] Bluetooth: hci4: command tx timeout [ 1312.601008][T16737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1313.276681][T16743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1313.380818][T16740] mmap: syz.2.1434 (16740) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1313.469611][T16740] loop6: detected capacity change from 0 to 524287487 [ 1313.478929][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.487274][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.495872][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.504069][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.512176][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.520400][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.529038][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.537173][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.545404][T16740] ldm_validate_partition_table(): Disk read failed. [ 1313.552447][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.560750][T16740] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.569890][T16740] Dev loop6: unable to read RDB block 0 [ 1313.576684][T16740] loop6: unable to read partition table [ 1313.583041][T16740] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1314.463192][ T5844] Bluetooth: hci4: command tx timeout [ 1315.597045][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1439'. [ 1315.736818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1315.780573][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1315.950801][ T5952] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1316.103556][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.114002][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1316.123584][ T5952] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1316.134616][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.154766][ T5952] usb 6-1: config 0 descriptor?? [ 1316.165300][ T5952] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1316.185700][ T5952] dvb-usb: bulk message failed: -22 (3/0) [ 1316.242354][ T5952] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1316.272005][ T5952] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1316.296645][ T5952] usb 6-1: media controller created [ 1316.316081][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.356438][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 1316.413627][ T5952] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1316.452079][ T5952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 1316.477501][ T5952] dvb-usb: schedule remote query interval to 150 msecs. [ 1316.484583][ T5952] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1316.496305][ T5952] usb 6-1: USB disconnect, device number 42 [ 1317.469820][ T5952] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1317.840862][ T5952] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1317.976886][T16440] veth0_vlan: entered promiscuous mode [ 1318.036770][T16440] veth1_vlan: entered promiscuous mode [ 1318.051382][ T5952] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1318.090020][ T5952] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1318.106839][ T5952] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.158342][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1318.199437][ T5952] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1318.219420][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.244282][ T5952] usb 6-1: config 0 descriptor?? [ 1318.274318][T16778] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1318.437620][T16440] veth0_macvtap: entered promiscuous mode [ 1318.502029][T16440] veth1_macvtap: entered promiscuous mode [ 1318.510072][T16676] chnl_net:caif_netlink_parms(): no params data found [ 1318.535993][ T5952] usbhid 6-1:0.0: can't add hid device: -71 [ 1318.555682][ T5952] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1318.577953][T16440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.588889][ T5952] usb 6-1: USB disconnect, device number 43 [ 1318.610203][T16440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.708605][ T3497] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.762953][ T3497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.114138][ T3497] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.308888][T16554] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1319.452561][T16554] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1319.580600][ T3497] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.628676][T16554] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1319.686897][T16554] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1319.828322][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.843398][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.854526][T16676] bridge_slave_0: entered allmulticast mode [ 1319.876399][T16676] bridge_slave_0: entered promiscuous mode [ 1319.895207][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.910904][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.927233][T16676] bridge_slave_1: entered allmulticast mode [ 1319.950236][T16676] bridge_slave_1: entered promiscuous mode [ 1320.065049][T16676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.119742][T16676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.199416][T16676] team0: Port device team_slave_0 added [ 1320.234244][T16676] team0: Port device team_slave_1 added [ 1320.278551][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.302524][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.327861][T16676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.335707][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.362705][T16676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.407466][T16676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.415531][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.442757][T16676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.529539][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.542233][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.651408][T16676] hsr_slave_0: entered promiscuous mode [ 1320.667414][T16676] hsr_slave_1: entered promiscuous mode [ 1320.693253][T16676] debugfs: 'hsr0' already exists in 'hsr' [ 1320.704798][T16676] Cannot create hsr debugfs directory [ 1321.064760][ T30] audit: type=1326 audit(1759780577.542:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e578eec9 code=0x7ffc0000 [ 1321.089453][ T30] audit: type=1326 audit(1759780577.542:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e578eec9 code=0x7ffc0000 [ 1321.114907][ T30] audit: type=1326 audit(1759780577.542:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f18e578eec9 code=0x7ffc0000 [ 1321.157562][ T30] audit: type=1326 audit(1759780577.542:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e578eec9 code=0x7ffc0000 [ 1321.183401][ T30] audit: type=1326 audit(1759780577.542:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e578eec9 code=0x7ffc0000 [ 1321.347368][T16554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.445737][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.309243][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.316492][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.370377][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.370515][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.119113][T16554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1324.713004][T16676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1324.842667][T16676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1325.084019][T16676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1325.976482][T16676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1326.620823][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.921188][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.116254][T16676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.223901][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.231143][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.382569][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.389773][T14325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.471290][T10242] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1327.661243][T10242] usb 8-1: Using ep0 maxpacket: 8 [ 1327.671594][T10242] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1327.693847][T10242] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1327.740591][T10242] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1327.770844][T10242] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.840765][T10242] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1328.020555][T10242] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.055757][T16554] veth0_vlan: entered promiscuous mode [ 1329.064378][T10242] usb 8-1: usb_control_msg returned -32 [ 1329.069991][T10242] usbtmc 8-1:16.0: can't read capabilities [ 1330.196945][T16554] veth1_vlan: entered promiscuous mode [ 1331.462965][ T24] usb 8-1: USB disconnect, device number 2 [ 1331.554414][T16554] veth0_macvtap: entered promiscuous mode [ 1331.635910][T16554] veth1_macvtap: entered promiscuous mode [ 1331.766495][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.858904][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.974398][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.788110][ T6792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.853720][ T6792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.950776][ T6792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.975884][ T6792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.053965][T16990] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1333.593932][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.633503][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.795418][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.835030][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.874680][T17018] input: syz0 as /devices/virtual/input/input6 [ 1336.583792][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 1336.806275][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 1336.817570][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1488'. [ 1337.858410][T16676] veth0_vlan: entered promiscuous mode [ 1337.917081][T16676] veth1_vlan: entered promiscuous mode [ 1338.170451][T16676] veth0_macvtap: entered promiscuous mode [ 1338.210394][T16676] veth1_macvtap: entered promiscuous mode [ 1339.068163][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1501'. [ 1339.153546][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.335824][T16676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.406645][T16676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.653276][ T6068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.695995][ T6068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.772465][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'. [ 1340.425562][ T6068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.449503][ T6068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.500801][ T5826] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1340.671521][ T5826] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1340.697320][T12181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.746335][ T5826] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1340.751807][T12181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.782982][ T5826] usb 8-1: Product: syz [ 1340.787813][ T5826] usb 8-1: Manufacturer: syz [ 1340.827658][ T5826] usb 8-1: SerialNumber: syz [ 1340.865755][ T5826] usb 8-1: config 0 descriptor?? [ 1341.203142][T14326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.062618][T14326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.131405][ T5826] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1342.501798][ T5826] peak_usb 8-1:0.0 can0: sending command failure: -22 [ 1343.074161][ T5826] peak_usb 8-1:0.0 can0: sending command failure: -22 [ 1343.141294][ T5826] peak_usb 8-1:0.0 can0: sending command failure: -22 [ 1343.387590][T17091] netlink: 'syz.5.1507': attribute type 1 has an invalid length. [ 1343.475802][T17093] gretap1: entered promiscuous mode [ 1343.512282][ T5826] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -22 [ 1343.834851][ T5826] usb 8-1: USB disconnect, device number 3 [ 1343.843235][T17097] bridge1: entered promiscuous mode [ 1343.877725][T17097] bridge1: entered allmulticast mode [ 1344.069682][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1510'. [ 1344.227320][T17099] macvlan2: entered promiscuous mode [ 1344.261396][T17099] macvlan2: entered allmulticast mode [ 1344.269606][T17099] bond1: entered promiscuous mode [ 1344.269671][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1510'. [ 1344.311929][T17099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1344.431234][T17099] bond1: left promiscuous mode [ 1344.614843][T17105] loop6: detected capacity change from 0 to 8192 [ 1344.658115][T17105] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1344.723969][T17105] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1344.773134][T17105] ntfs3(loop6): Failed to load $Extend (-2). [ 1344.779191][T17105] ntfs3(loop6): Failed to initialize $Extend. [ 1345.290818][ T30] audit: type=1326 audit(1759780601.752:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1345.441108][T17128] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1345.850872][ T30] audit: type=1326 audit(1759780601.752:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1345.873278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.156122][ T30] audit: type=1326 audit(1759780601.752:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.179188][ T30] audit: type=1326 audit(1759780601.752:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.252198][ T30] audit: type=1326 audit(1759780601.752:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.274569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.804934][ T30] audit: type=1326 audit(1759780601.752:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.840310][ T30] audit: type=1326 audit(1759780601.752:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.863778][ T30] audit: type=1326 audit(1759780601.842:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1346.974616][ T30] audit: type=1326 audit(1759780601.842:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1347.132468][ T30] audit: type=1326 audit(1759780601.862:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a0932af79 code=0x7ffc0000 [ 1347.154832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.143740][T17172] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1350.860251][T17175] : entered promiscuous mode [ 1351.860479][ T5919] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1352.793274][ T5919] usb 8-1: Using ep0 maxpacket: 8 [ 1352.808569][ T5919] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1352.838360][ T5919] usb 8-1: config 0 has no interface number 0 [ 1352.871774][ T5919] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.909284][ T5919] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1352.963606][ T5919] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1352.995672][ T5919] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1353.069973][ T5919] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1353.964975][ T5919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.978014][ T5919] usb 8-1: config 0 descriptor?? [ 1354.121212][ T5919] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1354.207353][T17222] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1354.934389][T17238] loop6: detected capacity change from 0 to 524287487 [ 1354.936184][T17238] buffer_io_error: 7 callbacks suppressed [ 1354.936235][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.936426][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.936552][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.936682][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.937043][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.937330][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.937703][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.938024][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.938299][T17238] ldm_validate_partition_table(): Disk read failed. [ 1354.938461][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.938646][T17238] Buffer I/O error on dev loop6, logical block 0, async page read [ 1354.938957][T17238] Dev loop6: unable to read RDB block 0 [ 1354.939447][T17238] loop6: unable to read partition table [ 1354.939692][T17238] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1355.765603][ T5939] usb 8-1: USB disconnect, device number 4 [ 1355.828988][T17242] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1355.860522][ T5939] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1356.388531][T17251] netlink: 'syz.6.1563': attribute type 3 has an invalid length. [ 1356.397192][T17251] netlink: 'syz.6.1563': attribute type 3 has an invalid length. [ 1358.302717][ T5844] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1358.328235][T17260] overlayfs: failed to clone upperpath [ 1358.545585][T17267] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1360.200025][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 1360.724387][T17300] overlayfs: failed to clone upperpath [ 1360.810880][T17302] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1361.065685][T17309] UBIFS error (pid: 17309): cannot open "c:::", error -22 [ 1361.661290][T17314] 9pnet_fd: Insufficient options for proto=fd [ 1361.911367][T17322] veth0: entered promiscuous mode [ 1361.922267][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1593'. [ 1362.044075][T17326] Illegal XDP return value 4294967274 on prog (id 255) dev N/A, expect packet loss! [ 1362.443223][ T5844] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1362.463486][ T5844] Bluetooth: hci5: Injecting HCI hardware error event [ 1362.477778][ T5843] Bluetooth: hci5: hardware error 0x00 [ 1363.071144][T17342] netlink: zone id is out of range [ 1363.099698][T17342] netlink: set zone limit has 4 unknown bytes [ 1365.151942][T17369] vivid-003: disconnect [ 1365.164107][T17365] vivid-003: reconnect [ 1365.251407][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1366.785836][T17398] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 1366.793782][T17398] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 1367.342180][T17419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1369.890968][ T5826] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1370.102403][ T5826] usb 8-1: Using ep0 maxpacket: 16 [ 1370.133935][T17457] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1370.133935][T17457] The task syz.6.1647 (17457) triggered the difference, watch for misbehavior. [ 1370.182305][ T5826] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1370.424618][ T5826] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1370.435912][ T5826] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.480248][T17459] overlayfs: failed to clone upperpath [ 1370.491481][ T5826] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.167699][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1371.177138][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.183632][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.198504][ T5826] usb 8-1: SerialNumber: syz [ 1371.263888][T17449] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1371.311685][T17449] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1371.452698][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 1371.569876][T17468] vxlan0: entered promiscuous mode [ 1371.606670][ T5826] usb 8-1: USB disconnect, device number 5 [ 1371.622414][T17468] vxlan0: entered allmulticast mode [ 1371.656852][T12181] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.668569][T12181] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.684156][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1371.684182][ T30] audit: type=1804 audit(1759780628.152:440): pid=17476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1652" name="/newroot/27/file0" dev="tmpfs" ino=163 res=1 errno=0 [ 1371.741608][T12181] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.756424][ T3497] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.806181][T17480] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1372.440856][ T5826] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1372.621157][ T5826] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1372.637133][ T5826] usb 7-1: config 6 has an invalid interface number: 150 but max is 0 [ 1372.656880][ T5826] usb 7-1: config 6 has no interface number 0 [ 1372.850487][ T5826] usb 7-1: config 6 interface 150 has no altsetting 0 [ 1374.417383][T17505] overlayfs: failed to clone upperpath [ 1374.422724][ T5826] usb 7-1: string descriptor 0 read error: -22 [ 1374.429394][ T5826] usb 7-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=58.0f [ 1374.502065][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.598184][ T5826] usbhid 7-1:6.150: couldn't find an input interrupt endpoint [ 1374.770140][ T5826] usb 7-1: USB disconnect, device number 2 [ 1374.898364][T17513] overlayfs: missing 'lowerdir' [ 1374.943169][ T30] audit: type=1326 audit(1759780631.422:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0938eec9 code=0x7ffc0000 [ 1375.046338][ T30] audit: type=1326 audit(1759780631.422:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0938eec9 code=0x7ffc0000 [ 1375.046844][T17515] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1375.176827][ T30] audit: type=1326 audit(1759780631.452:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f2a0938eec9 code=0x7ffc0000 [ 1375.280856][ T30] audit: type=1326 audit(1759780631.452:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0938eec9 code=0x7ffc0000 [ 1375.379587][ T30] audit: type=1326 audit(1759780631.452:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0938eec9 code=0x7ffc0000 [ 1375.727602][T17537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1375.730812][ T5939] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1375.941782][ T5939] usb 8-1: Using ep0 maxpacket: 16 [ 1375.973776][ T5939] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1376.013512][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.034412][ T5939] usb 8-1: Product: syz [ 1376.044065][ T5939] usb 8-1: Manufacturer: syz [ 1376.055622][ T5939] usb 8-1: SerialNumber: syz [ 1376.076607][ T5939] usb 8-1: config 0 descriptor?? [ 1376.243540][T17551] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1376.351238][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1376.502153][ T5939] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1376.535573][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1376.540506][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.553437][ T5939] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1376.577648][ T5939] usb 8-1: media controller created [ 1376.601885][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.649616][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1376.696681][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1376.742648][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.764481][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1376.795490][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.865656][ T5939] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1376.888058][ T24] usb 9-1: config 0 descriptor?? [ 1377.088532][ T5939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1377.101215][ T5939] usb 8-1: USB disconnect, device number 6 [ 1377.924700][ T5939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1378.293303][T17574] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 1378.301201][T17574] netlink: 'syz.2.1696': attribute type 2 has an invalid length. [ 1378.410723][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1378.537249][T17579] overlayfs: failed to clone upperpath [ 1378.969704][T17586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.971782][T17590] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1378.977293][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.249147][T17592] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1380.163363][T17312] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1380.747889][T17617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1381.633799][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1381.697904][T17631] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1381.717009][ T24] usb 9-1: USB disconnect, device number 2 [ 1381.718163][T17630] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1381.800822][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1381.877917][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1383.940513][T17664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1384.074784][T17669] tmpfs: Bad value for 'mpol' [ 1384.285744][T17675] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1384.504371][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 1386.250875][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1743'. [ 1388.301592][T17716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1392.360233][T17761] overlayfs: failed to clone upperpath [ 1393.070057][T17765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1393.416373][T17769] overlayfs: failed to clone upperpath [ 1398.559953][T17312] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1398.734371][T17312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.745501][T17312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.755784][T17312] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1399.269086][T17312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.293740][T17312] usb 8-1: config 0 descriptor?? [ 1400.483655][T17823] overlayfs: failed to clone upperpath [ 1400.675122][T17312] usbhid 8-1:0.0: can't add hid device: -71 [ 1400.707417][T17312] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1400.752214][T17312] usb 8-1: USB disconnect, device number 7 [ 1401.163550][T17839] UBIFS error (pid: 17839): cannot open "c:::", error -22 [ 1402.214186][T17834] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1402.214230][T17834] bond1: option arp_ip_target: invalid value (0) [ 1402.269694][T17834] bond1 (unregistering): Released all slaves [ 1402.278536][T17849] 9pnet_fd: Insufficient options for proto=fd [ 1407.159138][T17882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1409.090951][T17878] Bluetooth: hci0: command 0x0406 tx timeout [ 1412.310955][T17875] Set syz1 is full, maxelem 65536 reached [ 1414.088437][T17919] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1414.221276][ T30] audit: type=1800 audit(1759780670.692:446): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1812" name="/newroot/564/bus" dev="tmpfs" ino=3412 res=0 errno=0 [ 1414.278628][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 1415.339626][T17940] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1417.138403][T17962] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1826'. [ 1417.326881][T17969] overlayfs: failed to resolve './file0': -2 [ 1417.741095][ T5826] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1417.900251][ T5826] usb 9-1: Using ep0 maxpacket: 32 [ 1417.934081][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.970586][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.980936][T17312] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1418.009089][ T5826] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1418.040701][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.111091][ T5826] usb 9-1: config 0 descriptor?? [ 1418.195764][T17312] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1418.468893][T17312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.478236][T17312] usb 7-1: Product: syz [ 1418.520805][T17312] usb 7-1: Manufacturer: syz [ 1418.532620][T17312] usb 7-1: SerialNumber: syz [ 1418.545736][T17312] usb 7-1: config 0 descriptor?? [ 1419.330803][T17878] Bluetooth: hci1: command 0x0406 tx timeout [ 1419.441316][T17312] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1419.456009][T17312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1419.472794][T17312] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1419.531413][ T5826] usbhid 9-1:0.0: can't add hid device: -32 [ 1419.539275][ T5826] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1419.562886][ T5826] usb 9-1: USB disconnect, device number 3 [ 1419.574616][T17975] dvb-usb: bulk message failed: -22 (7/0) [ 1419.604176][T17312] usb 7-1: media controller created [ 1419.738252][T17312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1420.021401][T17312] DVB: Unable to find symbol mt352_attach() [ 1420.274918][T17312] DVB: Unable to find symbol nxt6000_attach() [ 1420.320846][T17312] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1420.361189][T17312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 1420.455987][T17312] dvb-usb: schedule remote query interval to 1000 msecs. [ 1420.456020][T17312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1420.456049][T17312] dvb-usb: bulk message failed: -22 (7/0) [ 1420.456094][T17312] dvb-usb: bulk message failed: -22 (7/0) [ 1420.462995][T17312] usb 7-1: USB disconnect, device number 3 [ 1420.749197][T18003] netlink: zone id is out of range [ 1420.749385][T18003] netlink: zone id is out of range [ 1420.757174][T18003] netlink: del zone limit has 4 unknown bytes [ 1421.622836][T17312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1422.231723][T18007] block device autoloading is deprecated and will be removed. [ 1423.070754][T17312] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1423.913528][ T24] IPVS: starting estimator thread 0... [ 1423.994436][T17312] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.009444][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.020925][T18040] IPVS: using max 24 ests per chain, 57600 per kthread [ 1424.139787][T17312] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1424.200515][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1424.288560][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1424.388873][T17312] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.402270][ T5952] IPVS: starting estimator thread 0... [ 1424.446332][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.562141][T17312] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1424.576374][T18049] IPVS: using max 20 ests per chain, 48000 per kthread [ 1424.603986][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1424.659992][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1424.692332][T17312] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.692403][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.692452][T17312] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1424.692499][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1424.692548][T17312] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1424.715728][T17312] usb 9-1: string descriptor 0 read error: -22 [ 1424.715887][T17312] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1424.715930][T17312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.771860][T17312] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1425.109246][ T5939] usb 9-1: USB disconnect, device number 4 [ 1425.386236][T18060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.611672][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.624148][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.947207][ T6792] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.986826][ T6792] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.998497][ T6792] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.028284][ T6792] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.080857][ T5952] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1429.225465][ T5952] usb 9-1: config 0 has no interfaces? [ 1429.243453][ T5952] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1429.580990][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 1430.154479][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1430.184295][ T5952] usb 9-1: Product: syz [ 1430.188540][ T5952] usb 9-1: Manufacturer: syz [ 1430.200026][ T5952] usb 9-1: SerialNumber: syz [ 1430.564133][T18119] UBIFS error (pid: 18119): cannot open "c:::", error -22 [ 1431.213248][T17878] Bluetooth: hci0: unexpected event for opcode 0x043d [ 1431.228953][ T5952] usb 9-1: config 0 descriptor?? [ 1431.783061][ T5952] usb 9-1: can't set config #0, error -71 [ 1431.831761][ T5952] usb 9-1: USB disconnect, device number 5 [ 1432.024281][ T30] audit: type=1326 audit(1759780688.462:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18131 comm="syz.5.1889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8d4d8eec9 code=0x0 [ 1432.622363][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.628735][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.630934][ T5952] IPVS: starting estimator thread 0... [ 1433.464579][T18137] IPVS: using max 20 ests per chain, 48000 per kthread [ 1434.677255][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1896'. [ 1435.766348][ T5939] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1435.960870][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 1436.143733][ T5939] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1436.430770][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.471263][ T5939] usb 7-1: config 0 descriptor?? [ 1436.517432][T18165] syz_tun: entered allmulticast mode [ 1436.540190][T18163] syz_tun: left allmulticast mode [ 1437.027779][T18167] UBIFS error (pid: 18167): cannot open "c:::", error -22 [ 1437.997947][ T5939] as10x_usb: device has been detected [ 1438.043870][ T5939] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1438.071508][ T5939] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1438.415271][ T5939] as10x_usb: error during firmware upload part1 [ 1438.435307][ T5939] Registered device nBox DVB-T Dongle [ 1439.721836][ T5952] usb 7-1: USB disconnect, device number 4 [ 1439.860177][ T5952] Unregistered device nBox DVB-T Dongle [ 1439.877007][ T5952] as10x_usb: device has been disconnected [ 1441.074817][T18210] UBIFS error (pid: 18210): cannot open "c:::", error -22 [ 1442.692857][T18221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1919'. [ 1442.966665][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1923'. [ 1444.550759][ T8834] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1444.728414][ T8834] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1444.757333][ T8834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.782930][ T8834] usb 9-1: Product: syz [ 1444.797492][ T8834] usb 9-1: Manufacturer: syz [ 1444.829008][ T8834] usb 9-1: SerialNumber: syz [ 1444.860561][ T8834] usb 9-1: config 0 descriptor?? [ 1445.089805][T18252] UBIFS error (pid: 18252): cannot open "c:::", error -22 [ 1445.792918][ T8834] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1445.841611][ T8834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1445.862946][ T8834] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1445.872994][T18239] dvb-usb: bulk message failed: -22 (7/0) [ 1445.904601][ T8834] usb 9-1: media controller created [ 1445.987859][ T8834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1446.103312][T18256] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1446.283170][ T5843] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1446.309970][ T8834] DVB: Unable to find symbol mt352_attach() [ 1446.569810][ T8834] DVB: Unable to find symbol nxt6000_attach() [ 1446.597812][ T8834] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1446.671449][ T8834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 1446.734326][ T8834] dvb-usb: schedule remote query interval to 1000 msecs. [ 1446.784552][ T8834] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1446.790513][T18274] overlayfs: failed to resolve './file1': -2 [ 1446.807288][ T8834] dvb-usb: bulk message failed: -22 (7/0) [ 1446.890917][ T8834] dvb-usb: bulk message failed: -22 (7/0) [ 1447.040299][ T8834] usb 9-1: USB disconnect, device number 6 [ 1447.332306][ T8834] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1447.778275][T18294] UBIFS error (pid: 18294): cannot open "c:::", error -22 [ 1448.688533][T18300] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1448.971018][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1953'. [ 1449.954458][T18316] overlayfs: failed to resolve './file1': -2 [ 1450.854633][T18336] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1450.954486][T18341] UBIFS error (pid: 18341): cannot open "c:::", error -22 [ 1452.824560][T18350] overlayfs: failed to resolve './file1': -2 [ 1454.455965][T18375] UBIFS error (pid: 18375): cannot open "c:::", error -22 [ 1455.357655][T18378] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1459.830935][T18427] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1460.404629][T17878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1460.422159][T17878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1460.430551][T17878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1460.452289][T17878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1460.468526][T17878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1461.741594][ T5826] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1462.043586][ T5826] usb 9-1: Using ep0 maxpacket: 16 [ 1462.441543][ T5826] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.460833][ T5826] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.486800][ T5826] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1462.500917][ T5826] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1462.522556][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.531053][ T5843] Bluetooth: hci6: command tx timeout [ 1462.564587][ T5826] usb 9-1: config 0 descriptor?? [ 1462.720217][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.173397][ T5826] hid (null): unknown global tag 0xbf [ 1463.191317][ T5826] hid (null): unknown global tag 0xc [ 1463.196703][ T5826] hid (null): unknown global tag 0xe [ 1464.058977][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.099464][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.166323][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.179910][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.216282][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.451893][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1464.461634][T17312] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1464.461922][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.508018][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1465.141051][ T5843] Bluetooth: hci6: command tx timeout [ 1465.342315][T17312] usb 8-1: config 0 has an invalid interface number: 47 but max is 0 [ 1465.350475][T17312] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.459790][T17312] usb 8-1: config 0 has no interface number 0 [ 1465.462705][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1465.478453][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1465.487617][ T5826] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 1465.847037][T17312] usb 8-1: config 0 interface 47 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.592694][T17312] usb 8-1: config 0 has an invalid interface number: 47 but max is 0 [ 1466.605871][ T5826] cougar 0003:060B:500A.0003: unexpected long global item [ 1467.529904][T17878] Bluetooth: hci6: command tx timeout [ 1467.537429][ T5826] cougar 0003:060B:500A.0003: parse failed [ 1467.571638][T17312] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.576380][ T5826] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 1467.592865][T17312] usb 8-1: config 0 has no interface number 0 [ 1467.604234][T18429] chnl_net:caif_netlink_parms(): no params data found [ 1467.605129][T17312] usb 8-1: config 0 interface 47 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.929685][ T5826] usb 9-1: USB disconnect, device number 7 [ 1468.054258][T17312] usb 8-1: unable to read config index 2 descriptor/start: -71 [ 1468.064586][T17312] usb 8-1: can't read configurations, error -71 [ 1468.297578][T18500] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1468.337073][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.729814][ T30] audit: type=1326 audit(1759780725.202:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18505 comm="syz.8.2024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfadf8eec9 code=0x0 [ 1468.767590][T18506] overlayfs: failed to clone upperpath [ 1469.004255][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.571160][T17878] Bluetooth: hci6: command tx timeout [ 1469.945271][T18429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.945847][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.946082][T18429] bridge_slave_0: entered allmulticast mode [ 1469.960045][T18429] bridge_slave_0: entered promiscuous mode [ 1469.968976][T18429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.969144][T18429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.969314][T18429] bridge_slave_1: entered allmulticast mode [ 1469.972646][T18429] bridge_slave_1: entered promiscuous mode [ 1471.068878][T18429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.277841][T18429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.565565][T18429] team0: Port device team_slave_0 added [ 1473.091019][T18429] team0: Port device team_slave_1 added [ 1473.445641][T18429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.461172][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.491007][T18429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.518141][T18429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.525372][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.573700][T18429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.614010][ T50] bridge_slave_1: left allmulticast mode [ 1473.619714][ T50] bridge_slave_1: left promiscuous mode [ 1473.743003][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.812133][ T50] bridge_slave_0: left allmulticast mode [ 1473.839324][T18546] overlayfs: failed to resolve './file0': -2 [ 1473.893054][ T50] bridge_slave_0: left promiscuous mode [ 1473.907728][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.261872][T18558] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1478.661325][T18592] overlayfs: failed to resolve './file0': -2 [ 1479.140746][T17312] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1479.294170][T17312] usb 7-1: Using ep0 maxpacket: 16 [ 1479.304667][T17312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1479.316987][T17312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1479.350129][T17312] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1479.376380][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.386336][T17312] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1479.397316][T17312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1479.406444][T17312] usb 7-1: SerialNumber: syz [ 1479.419343][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.431855][T18602] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1479.445232][T18602] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1479.461281][ T50] bond0 (unregistering): Released all slaves [ 1479.523992][T18584] erspan1: entered allmulticast mode [ 1479.708549][T17312] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1479.770946][T17312] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1479.777442][T17312] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1479.894233][T17312] usb 7-1: USB disconnect, device number 5 [ 1480.094448][T18429] hsr_slave_0: entered promiscuous mode [ 1480.110091][T18429] hsr_slave_1: entered promiscuous mode [ 1481.021362][T18429] debugfs: 'hsr0' already exists in 'hsr' [ 1481.029589][T18429] Cannot create hsr debugfs directory [ 1482.584341][ T50] hsr_slave_0: left promiscuous mode [ 1482.981562][ T50] hsr_slave_1: left promiscuous mode [ 1482.987751][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.017639][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.305718][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.320485][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.333256][T18644] overlayfs: failed to resolve './file0': -2 [ 1486.154508][ T50] veth1_macvtap: left promiscuous mode [ 1486.172828][ T50] veth0_macvtap: left promiscuous mode [ 1486.178547][ T50] veth1_vlan: left promiscuous mode [ 1486.184089][ T50] veth0_vlan: left promiscuous mode [ 1490.761381][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2080'. [ 1491.472228][T18711] overlayfs: failed to resolve './file0': -2 [ 1493.718499][T18721] Set syz1 is full, maxelem 65536 reached [ 1494.100318][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.873068][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.681858][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1495.730088][ T30] audit: type=1326 audit(1759780752.192:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.5.2089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8d4d8eec9 code=0x0 [ 1495.849630][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1497.902592][T18689] tipc: Started in network mode [ 1497.907503][T18689] tipc: Node identity , cluster identity 4711 [ 1497.914487][T18689] tipc: Failed to set node id, please configure manually [ 1497.945939][T18689] tipc: Enabling of bearer rejected, failed to enable media [ 1498.209760][T18753] overlayfs: failed to resolve './file0': -2 [ 1498.350746][T17622] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1499.420728][T17622] usb 8-1: Using ep0 maxpacket: 16 [ 1499.427924][T17622] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.464024][T17622] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.499071][T17622] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1499.536202][T17622] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1499.875052][T17622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.887900][T17622] usb 8-1: config 0 descriptor?? [ 1500.322890][T17622] hid (null): unknown global tag 0xbf [ 1500.342394][T17622] hid (null): unknown global tag 0xc [ 1500.357470][T17622] hid (null): unknown global tag 0xe [ 1500.389733][T17622] hid_parser_main: 73 callbacks suppressed [ 1500.389759][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472124][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472170][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472207][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472243][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472279][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472315][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472351][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472387][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472423][T17622] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 1500.472852][T17622] cougar 0003:060B:500A.0004: unexpected long global item [ 1500.473662][T17622] cougar 0003:060B:500A.0004: parse failed [ 1500.473786][T17622] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22 [ 1500.694299][T17622] usb 8-1: USB disconnect, device number 10 [ 1501.514042][T18429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1503.132808][T18429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1503.465499][T18429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1503.514642][T18806] overlayfs: failed to resolve './file0': -2 [ 1503.550756][T17622] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1503.591829][T18429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1503.756301][T17622] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1503.792348][T17622] usb 9-1: config 1 has no interface number 0 [ 1503.798552][T17622] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1503.862018][T17622] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1503.879927][T18819] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1503.962808][T17622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.372587][T17622] usb 9-1: Product: syz [ 1504.380738][T17622] usb 9-1: Manufacturer: syz [ 1504.385389][T17622] usb 9-1: SerialNumber: syz [ 1504.734188][T17622] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71 [ 1505.301005][T17622] usb 9-1: USB disconnect, device number 8 [ 1505.836842][T18429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.031105][T18429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.073192][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.080465][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.155561][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.162882][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.816027][T18851] capability: warning: `syz.7.2124' uses deprecated v2 capabilities in a way that may be insecure [ 1506.932359][T18855] overlayfs: failed to clone upperpath [ 1507.105533][T18861] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1507.404050][T18429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.222442][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1508.234273][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1508.243605][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1511.138093][T18912] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1512.544600][T18429] veth0_vlan: entered promiscuous mode [ 1512.629133][T18429] veth1_vlan: entered promiscuous mode [ 1513.030385][ T5826] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1513.418919][T18429] veth0_macvtap: entered promiscuous mode [ 1513.479576][T18429] veth1_macvtap: entered promiscuous mode [ 1513.510843][ T5826] usb 9-1: Using ep0 maxpacket: 32 [ 1513.555192][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.637810][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.664889][T18429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.680112][ T5826] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1513.701991][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.722122][ T5826] usb 9-1: config 0 descriptor?? [ 1513.738357][T18429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.764032][ T5826] hub 9-1:0.0: USB hub found [ 1513.818126][ T6792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.852614][ T6792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.872844][ T6792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.914041][ T6792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.970386][ T5826] hub 9-1:0.0: 1 port detected [ 1514.166160][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2157'. [ 1514.176944][ T5826] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 1514.192161][ T5826] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 1514.223028][ T5826] usbhid 9-1:0.0: can't add hid device: -71 [ 1514.230198][ T5826] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1514.264755][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2157'. [ 1514.293050][T18960] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1514.347435][ T5826] usb 9-1: USB disconnect, device number 9 [ 1514.437677][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.447883][T18963] overlayfs: failed to clone upperpath [ 1514.469126][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.606376][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.645152][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.838735][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2170'. [ 1517.871699][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2170'. [ 1518.115618][T19008] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1518.700823][ T5826] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1518.887780][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 1518.905466][ T5826] usb 5-1: config 0 has no interfaces? [ 1518.935628][ T5826] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1518.955849][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.970796][ T5826] usb 5-1: Product: syz [ 1518.978964][ T5826] usb 5-1: Manufacturer: syz [ 1519.407130][T19034] overlayfs: failed to clone upperpath [ 1519.982262][ T5826] usb 5-1: SerialNumber: syz [ 1519.990154][ T5826] usb 5-1: config 0 descriptor?? [ 1521.181305][ T5826] usb 5-1: USB disconnect, device number 25 [ 1521.316833][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1521.327708][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1521.335660][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1521.344638][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1521.354793][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1521.798209][ T6068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.823974][ T6068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.304611][T19067] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1522.359229][ T6068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.359324][ T6068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.722969][ T6068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.723037][ T6068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.953936][ T6068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.954002][ T6068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.410903][ T5843] Bluetooth: hci5: command tx timeout [ 1523.422475][T19037] chnl_net:caif_netlink_parms(): no params data found [ 1525.491790][ T5843] Bluetooth: hci5: command tx timeout [ 1525.646955][ T6068] bridge_slave_1: left allmulticast mode [ 1525.684729][ T6068] bridge_slave_1: left promiscuous mode [ 1525.697052][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.723016][ T6068] bridge_slave_0: left allmulticast mode [ 1525.824558][ T6068] bridge_slave_0: left promiscuous mode [ 1527.726510][ T5843] Bluetooth: hci5: command tx timeout [ 1528.332409][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.186089][T19121] Set syz1 is full, maxelem 65536 reached [ 1529.716189][T19125] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1529.816187][ T5843] Bluetooth: hci5: command tx timeout [ 1534.174468][ T6068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.199163][T19162] ceph: No mds server is up or the cluster is laggy [ 1534.229396][ T6068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.293976][ T6068] bond0 (unregistering): Released all slaves [ 1534.580374][ T30] audit: type=1804 audit(1759780791.052:450): pid=19171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2214" name="/newroot/112/file0" dev="tmpfs" ino=645 res=1 errno=0 [ 1534.652921][T19160] erspan1: entered allmulticast mode [ 1534.667373][T19037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.691527][T19037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.698806][T19037] bridge_slave_0: entered allmulticast mode [ 1534.790116][T19037] bridge_slave_0: entered promiscuous mode [ 1535.380983][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2217'. [ 1536.054132][T19181] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1536.165246][T19037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.173827][T19037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.200020][T19037] bridge_slave_1: entered allmulticast mode [ 1536.229585][T19037] bridge_slave_1: entered promiscuous mode [ 1536.600206][T19037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.376301][T19037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.665293][T19208] overlayfs: failed to resolve './file1': -2 [ 1539.143037][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2232'. [ 1539.154585][T19037] team0: Port device team_slave_0 added [ 1539.168136][T19037] team0: Port device team_slave_1 added [ 1539.916012][T19221] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1539.974592][ T6068] hsr_slave_0: left promiscuous mode [ 1539.988642][ T6068] hsr_slave_1: left promiscuous mode [ 1540.000040][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.154678][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.032153][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.039647][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.243930][ T6068] veth1_macvtap: left promiscuous mode [ 1541.269363][ T6068] veth0_macvtap: left promiscuous mode [ 1541.306245][ T6068] veth1_vlan: left promiscuous mode [ 1541.311924][ T6068] veth0_vlan: left promiscuous mode [ 1544.549705][T19235] Set syz1 is full, maxelem 65536 reached [ 1546.554873][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 1547.588123][ T6068] team0 (unregistering): Port device team_slave_1 removed [ 1547.668425][ T6068] team0 (unregistering): Port device team_slave_0 removed [ 1549.298493][T19278] delete_channel: no stack [ 1552.112378][T19037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.123689][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.149810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.156720][T19291] netlink: 'syz.5.2256': attribute type 1 has an invalid length. [ 1552.945346][T19037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.122985][T19037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.127579][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 1553.129978][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.415732][T19037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.872602][ T5826] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1554.232620][ T5826] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 1554.279896][ T5826] usb 8-1: config 0 has no interface number 0 [ 1554.293398][T19037] hsr_slave_0: entered promiscuous mode [ 1554.322923][ T5826] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1554.364092][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.375486][T19037] hsr_slave_1: entered promiscuous mode [ 1554.403074][T19037] debugfs: 'hsr0' already exists in 'hsr' [ 1554.420955][ T5826] usb 8-1: Product: syz [ 1554.425197][ T5826] usb 8-1: Manufacturer: syz [ 1554.460294][T19037] Cannot create hsr debugfs directory [ 1554.520870][ T5826] usb 8-1: SerialNumber: syz [ 1554.538084][ T5826] usb 8-1: config 0 descriptor?? [ 1554.583071][ T5826] hub 8-1:0.217: bad descriptor, ignoring hub [ 1554.589222][ T5826] hub 8-1:0.217: probe with driver hub failed with error -5 [ 1554.789968][ T5826] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1554.874636][ T5826] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1554.921336][ T5826] dib0700: firmware download failed at 7 with -22 [ 1554.973120][ T5826] usb 8-1: USB disconnect, device number 11 [ 1555.511985][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.519673][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.761326][T17878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1555.774910][T17878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1556.019417][T17878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1556.044951][T17878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1556.053658][T17878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1557.213982][T19338] binder: 19337:19338 ioctl 40046205 0 returned -22 [ 1557.330812][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1557.510978][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1557.542914][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1557.571101][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1557.579157][ T24] usb 8-1: SerialNumber: syz [ 1557.807532][ T78] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.863903][T17878] Bluetooth: hci3: command tx timeout [ 1558.956454][ T78] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.024435][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 1559.055575][ T24] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1559.093944][ T24] usb 8-1: USB disconnect, device number 12 [ 1559.135449][ T24] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 1559.797145][ T78] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.128592][ T78] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.257457][T17878] Bluetooth: hci3: command tx timeout [ 1562.392348][T19394] erspan1: entered allmulticast mode [ 1562.444009][T19323] chnl_net:caif_netlink_parms(): no params data found [ 1563.571310][T17878] Bluetooth: hci3: command tx timeout [ 1564.090954][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2288'. [ 1564.368405][ T5939] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1564.414531][ T78] bridge_slave_1: left allmulticast mode [ 1565.228727][ T78] bridge_slave_1: left promiscuous mode [ 1565.251043][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.269894][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.340035][ T5939] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1565.376496][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.385910][ T78] bridge_slave_0: left allmulticast mode [ 1565.410788][ T78] bridge_slave_0: left promiscuous mode [ 1565.441183][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.450160][ T5939] usb 8-1: config 0 descriptor?? [ 1565.653673][T17878] Bluetooth: hci3: command tx timeout [ 1566.018239][ T5939] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 1566.345516][ T5939] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 1566.637100][ T5939] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 1566.657339][ T5939] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 1566.674191][ T5939] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 1566.687807][ T5939] usb 8-1: USB disconnect, device number 13 [ 1566.787042][T19447] fido_id[19447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1566.945776][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.960413][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.972328][ T78] bond0 (unregistering): Released all slaves [ 1567.133821][T19037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1567.220781][T19323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.244087][T19323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.292054][T19323] bridge_slave_0: entered allmulticast mode [ 1567.301657][T19323] bridge_slave_0: entered promiscuous mode [ 1567.310358][T19037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1567.780236][T19037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1568.348198][T19323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.361472][T19323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.379123][T19323] bridge_slave_1: entered allmulticast mode [ 1568.412152][T19323] bridge_slave_1: entered promiscuous mode [ 1568.516488][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2303'. [ 1568.535291][T19037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1569.629574][T19323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.237549][T19323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.018227][T19323] team0: Port device team_slave_0 added [ 1571.317632][ T78] hsr_slave_0: left promiscuous mode [ 1571.399607][ T78] hsr_slave_1: left promiscuous mode [ 1571.421785][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.433825][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.493839][ T8834] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1571.920277][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.944796][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.023073][ T8834] usb 5-1: Using ep0 maxpacket: 8 [ 1572.043038][ T8834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.081110][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.132959][ T78] veth1_macvtap: left promiscuous mode [ 1572.150746][ T78] veth0_macvtap: left promiscuous mode [ 1572.156346][ T8834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.179702][ T78] veth1_vlan: left promiscuous mode [ 1572.201277][ T78] veth0_vlan: left promiscuous mode [ 1572.206741][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.238481][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1572.262486][ T8834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.269990][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.282851][ T8834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.507116][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.525128][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1572.538951][ T8834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.552380][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.606098][ T8834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.638217][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.674693][ T8834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1572.735853][ T8834] usb 5-1: string descriptor 0 read error: -22 [ 1572.806588][ T8834] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1572.826613][ T8834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.875496][ T8834] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1573.331906][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2318'. [ 1573.399762][ T43] usb 5-1: USB disconnect, device number 26 [ 1575.182186][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1575.328518][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1575.470677][T17312] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1575.666322][T17312] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1575.680991][T17312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.699315][T17312] usb 8-1: Product: syz [ 1575.718350][T17312] usb 8-1: Manufacturer: syz [ 1575.724119][T17312] usb 8-1: SerialNumber: syz [ 1576.988886][T17312] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1577.030134][T17312] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1577.531521][T17312] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1577.556043][T19323] team0: Port device team_slave_1 added [ 1577.556475][T17312] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1577.594083][T17312] usb 8-1: USB disconnect, device number 14 [ 1577.837015][T19323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.890963][T19323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.966832][T19323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.019839][T19323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.040272][T19323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.111382][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2330'. [ 1578.160043][T19323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.723405][T19323] hsr_slave_0: entered promiscuous mode [ 1578.730443][T19323] hsr_slave_1: entered promiscuous mode [ 1578.756116][T19323] debugfs: 'hsr0' already exists in 'hsr' [ 1578.805054][T19323] Cannot create hsr debugfs directory [ 1579.255935][ T8834] libceph: connect (1)[c::]:6789 error -101 [ 1579.271193][ T8834] libceph: mon0 (1)[c::]:6789 connect error [ 1579.357485][T19575] ceph: No mds server is up or the cluster is laggy [ 1579.538462][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1579.551631][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1579.565184][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1579.577287][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1579.585410][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1581.125381][T19323] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1581.220924][T19323] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1581.307266][T19323] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1581.411481][T19323] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1581.464444][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2343'. [ 1581.609512][T19583] chnl_net:caif_netlink_parms(): no params data found [ 1581.670276][ T5843] Bluetooth: hci4: command tx timeout [ 1581.744428][T19630] erspan1: entered allmulticast mode [ 1582.775241][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 1582.915444][T19583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.951152][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.958483][T19583] bridge_slave_0: entered allmulticast mode [ 1583.023038][T19583] bridge_slave_0: entered promiscuous mode [ 1583.178693][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 1583.225170][T19583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.232789][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.240080][T19583] bridge_slave_1: entered allmulticast mode [ 1583.249507][T19583] bridge_slave_1: entered promiscuous mode [ 1583.533714][T19583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.551804][T19663] netlink: zone id is out of range [ 1583.740830][T17878] Bluetooth: hci4: command tx timeout [ 1584.768887][T19583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.826093][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2356'. [ 1585.124966][T19583] team0: Port device team_slave_0 added [ 1585.166702][T19583] team0: Port device team_slave_1 added [ 1585.824828][T17878] Bluetooth: hci4: command tx timeout [ 1586.368825][T19583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.397269][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.480658][T19583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.511452][T19583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.518776][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.590675][T19583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.629055][T19323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.140711][ T5939] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1587.361154][ T5939] usb 5-1: device descriptor read/64, error -71 [ 1587.735184][ T5939] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1587.891242][T17878] Bluetooth: hci4: command tx timeout [ 1588.161083][ T5939] usb 5-1: device descriptor read/64, error -71 [ 1588.173929][T19583] hsr_slave_0: entered promiscuous mode [ 1588.192175][T19583] hsr_slave_1: entered promiscuous mode [ 1588.198673][T19583] debugfs: 'hsr0' already exists in 'hsr' [ 1588.241204][T19583] Cannot create hsr debugfs directory [ 1588.268431][T19323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.284101][ T5939] usb usb5-port1: attempt power cycle [ 1588.385281][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.392521][T14326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.644234][ T5939] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1588.707253][ T78] bridge_slave_1: left allmulticast mode [ 1588.720674][ T78] bridge_slave_1: left promiscuous mode [ 1588.726532][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.741931][ T5939] usb 5-1: device descriptor read/8, error -71 [ 1588.847682][T19730] usb usb8: usbfs: process 19730 (syz.7.2365) did not claim interface 0 before use [ 1589.634437][ T78] bridge_slave_0: left allmulticast mode [ 1589.674693][ T78] bridge_slave_0: left promiscuous mode [ 1589.680550][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.781872][ T5939] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1589.891631][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2368'. [ 1591.355060][T19738] ------------[ cut here ]------------ [ 1591.361009][T19738] WARNING: CPU: 0 PID: 19738 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.372468][T19738] Modules linked in: [ 1591.376638][T19738] CPU: 0 UID: 0 PID: 19738 Comm: syz.7.2368 Not tainted syzkaller #0 PREEMPT(full) [ 1591.386157][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1591.396259][T19738] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.402731][T19738] Code: ee fb e8 fc 06 dc fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 4a b0 ee fb 90 <0f> 0b 90 eb b5 e8 6f 31 56 fc e9 dc fe ff ff e8 f5 31 56 fc e9 14 [ 1591.422549][T19738] RSP: 0018:ffffc900035077e8 EFLAGS: 00010293 [ 1591.428846][T19738] RAX: 0000000000000000 RBX: ffff888142340028 RCX: ffffffff85cc621e [ 1591.438116][T19738] RDX: ffff888044f18000 RSI: ffffffff85cc6296 RDI: 0000000000000006 [ 1591.446152][T19738] RBP: 000001728239aa7a R08: 0000000000000006 R09: 000001728239aa7a [ 1591.454196][T19738] R10: 000001728239aa7a R11: 0000000000000000 R12: ffffc90003507950 [ 1591.462487][T19738] R13: 000001728239aa7a R14: 0000000000004e20 R15: ffffffff85cc6130 [ 1591.470501][T19738] FS: 000055558a86e500(0000) GS:ffff888124e6a000(0000) knlGS:0000000000000000 [ 1591.479885][T19738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.486636][T19738] CR2: 00007fa2dacc87d0 CR3: 0000000063e17000 CR4: 0000000000350ef0 [ 1591.494717][T19738] Call Trace: [ 1591.498044][T19738] [ 1591.501023][T19738] ? drm_crtc_get_last_vbltimestamp+0x76/0x1b0 [ 1591.507222][T19738] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 1591.513353][T19738] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 1591.519996][T19738] ? drm_atomic_helper_wait_for_fences+0x1ec/0x830 [ 1591.526569][T19738] ? drm_crtc_next_vblank_start+0x1b/0x300 [ 1591.532444][T19738] drm_crtc_next_vblank_start+0x182/0x300 [ 1591.539306][T19738] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 1591.545779][T19738] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1591.552693][T19738] ? drm_atomic_helper_commit+0x1b5/0x380 [ 1591.558447][T19738] drm_atomic_helper_commit+0x1cf/0x380 [ 1591.564067][T19738] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1591.570163][T19738] drm_atomic_commit+0x234/0x300 [ 1591.575293][T19738] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1591.580837][T19738] ? __pfx___drm_printfn_info+0x10/0x10 [ 1591.586446][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1591.592159][T19738] ? drm_client_rotation+0x4da/0x6a0 [ 1591.597481][T19738] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 1591.603858][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1591.609571][T19738] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1591.616433][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1591.622172][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1591.627869][T19738] drm_client_modeset_commit_locked+0x14d/0x580 [ 1591.634215][T19738] drm_client_modeset_commit+0x4f/0x80 [ 1591.641545][T19738] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1591.648788][T19738] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1591.654973][T19738] drm_fbdev_client_restore+0x2c/0x40 [ 1591.660408][T19738] drm_client_dev_restore+0x1f6/0x2a0 [ 1591.665891][T19738] drm_release+0x2c4/0x360 [ 1591.670350][T19738] ? __pfx_drm_release+0x10/0x10 [ 1591.675353][T19738] __fput+0x402/0xb70 [ 1591.679383][T19738] task_work_run+0x150/0x240 [ 1591.684053][T19738] ? __pfx_task_work_run+0x10/0x10 [ 1591.689209][T19738] ? __pfx___do_sys_close_range+0x10/0x10 [ 1591.695029][T19738] ? xfd_validate_state+0x61/0x180 [ 1591.700181][T19738] exit_to_user_mode_loop+0xec/0x130 [ 1591.705526][T19738] do_syscall_64+0x419/0x4e0 [ 1591.710154][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.716145][T19738] RIP: 0033:0x7f3d5058eec9 [ 1591.720650][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.740475][T19738] RSP: 002b:00007ffd3b61d568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1591.750364][T19738] RAX: 0000000000000000 RBX: 00007f3d507e7da0 RCX: 00007f3d5058eec9 [ 1591.758469][T19738] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1591.766518][T19738] RBP: 00007f3d507e7da0 R08: 0000000000000a78 R09: 000000163b61d85f [ 1591.774557][T19738] R10: 00007f3d507e7cb0 R11: 0000000000000246 R12: 000000000018469a [ 1591.782593][T19738] R13: 00007f3d507e6090 R14: ffffffffffffffff R15: 00007ffd3b61d680 [ 1591.790677][T19738] [ 1591.793725][T19738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1591.801004][T19738] CPU: 0 UID: 0 PID: 19738 Comm: syz.7.2368 Not tainted syzkaller #0 PREEMPT(full) [ 1591.810382][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1591.820441][T19738] Call Trace: [ 1591.823719][T19738] [ 1591.826648][T19738] dump_stack_lvl+0x3d/0x1f0 [ 1591.831252][T19738] vpanic+0x640/0x6f0 [ 1591.835242][T19738] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.841055][T19738] panic+0xca/0xd0 [ 1591.844788][T19738] ? __pfx_panic+0x10/0x10 [ 1591.849245][T19738] ? check_panic_on_warn+0x1f/0xb0 [ 1591.854363][T19738] check_panic_on_warn+0xab/0xb0 [ 1591.859306][T19738] __warn+0xf6/0x3c0 [ 1591.863200][T19738] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.869020][T19738] report_bug+0x3c3/0x580 [ 1591.873363][T19738] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.879190][T19738] handle_bug+0x184/0x210 [ 1591.883536][T19738] exc_invalid_op+0x17/0x50 [ 1591.888058][T19738] asm_exc_invalid_op+0x1a/0x20 [ 1591.892913][T19738] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 1591.899338][T19738] Code: ee fb e8 fc 06 dc fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 4a b0 ee fb 90 <0f> 0b 90 eb b5 e8 6f 31 56 fc e9 dc fe ff ff e8 f5 31 56 fc e9 14 [ 1591.918953][T19738] RSP: 0018:ffffc900035077e8 EFLAGS: 00010293 [ 1591.925029][T19738] RAX: 0000000000000000 RBX: ffff888142340028 RCX: ffffffff85cc621e [ 1591.933001][T19738] RDX: ffff888044f18000 RSI: ffffffff85cc6296 RDI: 0000000000000006 [ 1591.940970][T19738] RBP: 000001728239aa7a R08: 0000000000000006 R09: 000001728239aa7a [ 1591.948939][T19738] R10: 000001728239aa7a R11: 0000000000000000 R12: ffffc90003507950 [ 1591.956911][T19738] R13: 000001728239aa7a R14: 0000000000004e20 R15: ffffffff85cc6130 [ 1591.964879][T19738] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1591.971062][T19738] ? vkms_get_vblank_timestamp+0xee/0x1b0 [ 1591.976812][T19738] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 1591.982648][T19738] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 1591.988476][T19738] ? drm_crtc_get_last_vbltimestamp+0x76/0x1b0 [ 1591.994662][T19738] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 1592.000753][T19738] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 1592.007377][T19738] ? drm_atomic_helper_wait_for_fences+0x1ec/0x830 [ 1592.013898][T19738] ? drm_crtc_next_vblank_start+0x1b/0x300 [ 1592.019732][T19738] drm_crtc_next_vblank_start+0x182/0x300 [ 1592.025472][T19738] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 1592.031821][T19738] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1592.038778][T19738] ? drm_atomic_helper_commit+0x1b5/0x380 [ 1592.044512][T19738] drm_atomic_helper_commit+0x1cf/0x380 [ 1592.050092][T19738] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1592.056183][T19738] drm_atomic_commit+0x234/0x300 [ 1592.061133][T19738] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1592.066595][T19738] ? __pfx___drm_printfn_info+0x10/0x10 [ 1592.072163][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1592.077806][T19738] ? drm_client_rotation+0x4da/0x6a0 [ 1592.083104][T19738] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 1592.089364][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1592.095011][T19738] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1592.101792][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1592.107471][T19738] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1592.113140][T19738] drm_client_modeset_commit_locked+0x14d/0x580 [ 1592.119402][T19738] drm_client_modeset_commit+0x4f/0x80 [ 1592.124881][T19738] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1592.132098][T19738] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1592.138187][T19738] drm_fbdev_client_restore+0x2c/0x40 [ 1592.143589][T19738] drm_client_dev_restore+0x1f6/0x2a0 [ 1592.148984][T19738] drm_release+0x2c4/0x360 [ 1592.153415][T19738] ? __pfx_drm_release+0x10/0x10 [ 1592.158366][T19738] __fput+0x402/0xb70 [ 1592.162375][T19738] task_work_run+0x150/0x240 [ 1592.166987][T19738] ? __pfx_task_work_run+0x10/0x10 [ 1592.172119][T19738] ? __pfx___do_sys_close_range+0x10/0x10 [ 1592.177849][T19738] ? xfd_validate_state+0x61/0x180 [ 1592.182980][T19738] exit_to_user_mode_loop+0xec/0x130 [ 1592.188288][T19738] do_syscall_64+0x419/0x4e0 [ 1592.192907][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.198813][T19738] RIP: 0033:0x7f3d5058eec9 [ 1592.203233][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.222875][T19738] RSP: 002b:00007ffd3b61d568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1592.231297][T19738] RAX: 0000000000000000 RBX: 00007f3d507e7da0 RCX: 00007f3d5058eec9 [ 1592.239268][T19738] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1592.247251][T19738] RBP: 00007f3d507e7da0 R08: 0000000000000a78 R09: 000000163b61d85f [ 1592.255240][T19738] R10: 00007f3d507e7cb0 R11: 0000000000000246 R12: 000000000018469a [ 1592.263218][T19738] R13: 00007f3d507e6090 R14: ffffffffffffffff R15: 00007ffd3b61d680 [ 1592.271219][T19738] [ 1592.274533][T19738] Kernel Offset: disabled [ 1592.278868][T19738] Rebooting in 86400 seconds..