last executing test programs: 6m13.989979805s ago: executing program 0 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) dup(0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89101) fchdir(r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 6m12.102307835s ago: executing program 0 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6m11.60845853s ago: executing program 0 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6m10.504032322s ago: executing program 0 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x8) 6m7.555326165s ago: executing program 0 (id=291): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0x2, [{0xc}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x6, 0x1, 0x5}}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="653ddd7d776189732c00"/19]) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r7, 0x0, 0x700}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6m3.583311906s ago: executing program 0 (id=298): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x2f) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000040)=""/80, 0x50, 0x0) 5m47.716642398s ago: executing program 32 (id=298): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x2f) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000040)=""/80, 0x50, 0x0) 38.876405689s ago: executing program 3 (id=897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000340)={0x20, 0x4e0e3091d1c3cc17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 34.072375001s ago: executing program 3 (id=905): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 32.837936329s ago: executing program 3 (id=908): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)=0xfffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000c40)=@x86={0x3, 0xf, 0x0, 0x0, 0x5, 0x4d, 0xfe, 0x6, 0x1, 0x4, 0x8, 0x0, 0x0, 0x5, 0x80000, 0x9, 0xff, 0x9, 0x5, '\x00', 0x5, 0xe732}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x8, 0x0, 0x0, 0xff, 0x0, 0x4, 0x6, 0x0, 0x9, 0x10, 0x0, 0x6, 0x4b4, 0x40, 0x1, 0x0, 0xfe, '\x00', 0x1, 0x20}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.450299013s ago: executing program 3 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) finit_module(r3, 0x0, 0x0) 26.992256586s ago: executing program 3 (id=916): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x38ead82ad8168db1) syz_emit_ethernet(0x2a, 0x0, 0x0) r3 = fanotify_init(0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x30000015}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20060084, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) read(r5, &(0x7f00000001c0)=""/36, 0x24) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0xfffffffd, 0xc, 0x32315241, 0x7, 0x5, [{0xa, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x8, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x1, 0x7, 0x2, 0x0, 0x1}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000044d56"]) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x0, 0x6e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 25.164940266s ago: executing program 3 (id=921): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r4}) 10.894114822s ago: executing program 4 (id=945): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x40087101, 0x2) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x2, 0x80800) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x5, 0x5, 0x0, 0x7, 0x2, 0x7, 0xdca, 0x7470, 0x9e, 0x5, 0x2, 0x40, 0x8b, 0xff, 0x5, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioperm(0x0, 0x12e, 0x8000000000008) syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket(0x26, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2062) socket(0x10, 0x3, 0x0) 10.809900138s ago: executing program 5 (id=947): r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000001440)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f000000b800)=0x3) 9.667607821s ago: executing program 33 (id=921): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r4}) 9.368297601s ago: executing program 5 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{0x0}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) 9.235535648s ago: executing program 4 (id=952): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010008000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 8.979033491s ago: executing program 5 (id=953): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0x2, [{0xc}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x6, 0x1, 0x5}}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="653ddd7d776189732c00"/19]) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.708424604s ago: executing program 2 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x40004d0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 7.176314426s ago: executing program 4 (id=955): write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 6.807603657s ago: executing program 1 (id=956): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) getpriority(0x1, 0x0) 6.550346532s ago: executing program 5 (id=957): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) setreuid(0xee01, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0xe202}, 0x1c, 0x0}, 0x24020005) write$tun(r1, 0x0, 0x46) 6.072103548s ago: executing program 1 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.07162189s ago: executing program 2 (id=959): r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000001440)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f000000b800)=0x3) 4.843813325s ago: executing program 4 (id=960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 4.827348491s ago: executing program 2 (id=961): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x40087101, 0x2) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x2, 0x80800) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x5, 0x5, 0x0, 0x7, 0x2, 0x7, 0xdca, 0x7470, 0x9e, 0x5, 0x2, 0x40, 0x8b, 0xff, 0x5, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioperm(0x0, 0x12e, 0x8000000000008) syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket(0x26, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2062) socket(0x10, 0x3, 0x0) 4.612233718s ago: executing program 1 (id=962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) 4.424274834s ago: executing program 1 (id=963): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xc1b7, 0xffffffffffffffff, 0x4}, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) socket(0x28, 0x5, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000e00)={0x1, r7, r6}) 4.356199889s ago: executing program 2 (id=964): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) 3.926627086s ago: executing program 2 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x62060200) 1.931969133s ago: executing program 1 (id=966): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0x2, [{0xc}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x6, 0x1, 0x5}}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="653ddd7d776189732c00"/19]) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.872309507s ago: executing program 5 (id=967): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0xa}}, 0x20) socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$eJzs3U1sHOUZAOB3HIcEI6WIVimKQpgEKgUpmPUaTF0OsKzH9sB619pdV4mqikbEQVYcoFDUkgtElaCtWlU99Ui5cuuNqlIr9dD2VKkceukNiVNFpf6JqkJyNbPrxH9rh+D8QJ7H8n6zs+983zvr9bw7a++3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+qVMaSaOTfXjiZDlafarfmtrl9tb/frmvWeWLduBFJ8R3798dH/+qt+9Llmw8WF8ficO/a4dhfNPvjwh0H73zsi8NDq9tvk9DVOnqFcUnE60VS504vLy++dA0SuY5+9OtPvMl/V4rLmayZd1r5XG0mS/NOK52cmKg8NDvdSafzRtY51elmc2m9ndW6rXZ6vP5AOjY5OZ5mo6daC82ZqVojW1356IPVSmUifWp0Pqu1O63mQ09Fpz6bNxp5c6aMqVa+G0XMo8UD8em8m3az2lyanl1aXhzfKdUiaGyrG/b0Hj+H77/zg1fe/+fSYvGAHNRJ0n9gVsfGqtWxiUcmH3m0UhmuVqrrV1Q2iEsRMRRRRFyTBy2fIbt7AIdPYahf/6MReTRjIU5GuuFrb0TsjXpMRTtaMVes+8veTVF9q/X/Kw/9/U/bjbu2/q9W+bsv33woyvp/pHftyKD6vymL6/31crwaF+JcnI7lWI7FeGl3+9+36xkPfdoeknXXZiKLZuTRiVbkMRe1ck3aX5PGZEzERFTimZiN6ehEGtORRyOy6MSp6EQ3svIRVY92ZFGLbrSiHWkcj3o8EGmMxWRMxnikkcVonIpWLEQzZuLBqJW9nI2l8n4f35DlwdvjV8/9+YO3iuVLQWPb7VbxZK4I+sc2QZvK/bb1f2WleL6wMUL9v9Vdg6M4XJ2V1foPAAAAfG4l5avvSfkS/z3l0nTeyL5xo9MCAAAAdlH5l//DRbO3WLonkuL8v7JF5HvXPTcAAABgdyTle+ySiBiJe3tLZ2MpXo/F2OpFAAAAAOAzqPz7/5GiGYl4rVyxOl2K838AAAD4nPjBoDn231+dY7czvy/5TTkHcHJx/uT9yflaEVc7v6e3Xb/5+qUeu9OHkgP9TspmYvjCHUlEDNezw8nq7Jcf7+u1H5aXh4YvbT5orv+k3d42gdg+gfJa/DiO9mKOnum1Z/q3JL1RRqbzRjZabzUeK6dELL67rzy/9L2IYvQfNucOJHF2aXlx9NkXls+UuVwserl4vj+B4rp5FFe+sG0uK/17IO7Zeo/3lm/E6I870hu3snb/h8qt/7dSzjM7cP+TtWO+Ecd6McdGeu3I6i29MfcXY46NPjYWtdqBoW52svvKypq972cxttOe7/BTeCPu68Xcd/y+XrNFFtV1WTy/OYvq2ix690UM7VIWbx197eR/ft9KsvGdshj/BFms7InYmAXAjXK2nPXnchW6vaxCRVEpFPV/Q929fXXLKzjW/vvyKL1nGR/3u42INbVuODZW98t9X1l1X4neEf14L+Z47/nE8KEt6kpliyP6i0sv/qF/RH/4nZ//4ptH/vjLctyrqm7vxAO9mH4Td/1uQI0t9vknG6rq28UWb285bvEcrNOoJnExYs93zr8YB19+9cKDS+dPP7f43OLz1er4ROXhSuWRauwtnyr0m20yBeDWtfNn7AyMuK3fRfLwoLPqfsW769K/FIzGs/FCLMeZOFG+2yAi7t087rvFmfiaf0M4scNZ68iaT3g5scO55eXY6ubYJAbEjq+5x778s7L56Jr8OADguji2TR3eof5femX+xA7n3etr+Yaz4xhcy7fy1Wt6bwDArSFrf5iMdN9M2u18/pmxycmxWnc2S9ut+tNpO5+aydK82c3a9dlacyZL59utbqu++sLxVNZJOwvz8612N51utdMY6uQny09+T/sf/d7J5mrNbl7vzDeyWidL661mt1bvplN5p57OLzzZyDuzWbvcuDOf1fPpvF7r5q1m2mkttOvZaJp2smxNYD6VNbv5dF4sNtP5dj5Xa1+MiMbCXJZOZZ16O5/vtnodro6VN6db7bmy29HNu/+3631/A8DN4OVXL5w7vby8+NLVLfz1SoJv9D4CAOup0gAAAAAAAAAAAAAAcPPb/Ha9Yu2neEfgJ1vYF9d8iFto4Wv9KRl7a4qlmySxG7fwrccfPzco5snX7p69sn62/k3Z6q2ubx6IuO3dn/bWPDE4+Pv937/d2dP3IuIqNl9JtolZd5i47ToflgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgS/8PAAD//9u2aZI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dmmidi(&(0x7f00000000c0), 0xb20, 0x410002) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) accept(r0, 0x0, 0x0) 1.845879038s ago: executing program 4 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x40004d0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 623.217205ms ago: executing program 2 (id=969): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r3, 0x4) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 249.197501ms ago: executing program 4 (id=970): r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000001440)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f000000b800)=0x3) 170.669916ms ago: executing program 1 (id=971): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000340)={0x20, 0x4e0e3091d1c3cc17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 5 (id=972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 89.770622][ T5819] cgroup: Unknown subsys name 'net' [ 89.903744][ T5819] cgroup: Unknown subsys name 'cpuset' [ 89.913637][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.808113][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.071517][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.080233][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.088565][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.097819][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.105480][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.112890][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.121006][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.129326][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.147328][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.157092][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.165764][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.186887][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.206652][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.235454][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.245696][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.253853][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.254064][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.263142][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.270197][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.277417][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.289815][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.292394][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.299774][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.311378][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.311711][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.320664][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.328888][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.332891][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.339814][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.354158][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.129266][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 96.143878][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.210278][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.400378][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.544266][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.552382][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.560112][ T5829] bridge_slave_0: entered allmulticast mode [ 96.567911][ T5829] bridge_slave_0: entered promiscuous mode [ 96.587186][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.594350][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.602038][ T5829] bridge_slave_1: entered allmulticast mode [ 96.610571][ T5829] bridge_slave_1: entered promiscuous mode [ 96.618365][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 96.638419][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.645569][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.653047][ T5830] bridge_slave_0: entered allmulticast mode [ 96.660297][ T5830] bridge_slave_0: entered promiscuous mode [ 96.742441][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.752038][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.759683][ T5830] bridge_slave_1: entered allmulticast mode [ 96.768234][ T5830] bridge_slave_1: entered promiscuous mode [ 96.796155][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.863190][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.889491][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.896955][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.904110][ T5831] bridge_slave_0: entered allmulticast mode [ 96.911675][ T5831] bridge_slave_0: entered promiscuous mode [ 96.978181][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.985589][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.993311][ T5831] bridge_slave_1: entered allmulticast mode [ 97.001182][ T5831] bridge_slave_1: entered promiscuous mode [ 97.032577][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.045555][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.108491][ T5829] team0: Port device team_slave_0 added [ 97.146749][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.153966][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.161913][ T5838] bridge_slave_0: entered allmulticast mode [ 97.169368][ T5838] bridge_slave_0: entered promiscuous mode [ 97.179206][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.186372][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.193617][ T5838] bridge_slave_1: entered allmulticast mode [ 97.201573][ T5838] bridge_slave_1: entered promiscuous mode [ 97.219445][ T5829] team0: Port device team_slave_1 added [ 97.228280][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.243072][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.327379][ T5848] Bluetooth: hci0: command tx timeout [ 97.345055][ T835] cfg80211: failed to load regulatory.db [ 97.373735][ T5830] team0: Port device team_slave_0 added [ 97.397003][ T5842] Bluetooth: hci4: command tx timeout [ 97.402630][ T5849] Bluetooth: hci2: command tx timeout [ 97.402645][ T5841] Bluetooth: hci1: command tx timeout [ 97.403839][ T5848] Bluetooth: hci3: command tx timeout [ 97.438607][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.445892][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.454190][ T5845] bridge_slave_0: entered allmulticast mode [ 97.461450][ T5845] bridge_slave_0: entered promiscuous mode [ 97.472662][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.480335][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.506438][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.520840][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.527848][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.553966][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.582351][ T5830] team0: Port device team_slave_1 added [ 97.591626][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.601663][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.609029][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.616222][ T5845] bridge_slave_1: entered allmulticast mode [ 97.623855][ T5845] bridge_slave_1: entered promiscuous mode [ 97.649707][ T5831] team0: Port device team_slave_0 added [ 97.675604][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.721352][ T5831] team0: Port device team_slave_1 added [ 97.768129][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.783123][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.810991][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.818420][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.844699][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.919381][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.926367][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.957694][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.972457][ T5838] team0: Port device team_slave_0 added [ 97.982868][ T5838] team0: Port device team_slave_1 added [ 98.023940][ T5845] team0: Port device team_slave_0 added [ 98.030865][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.038542][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.064881][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.079139][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.086181][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.112327][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.152679][ T5829] hsr_slave_0: entered promiscuous mode [ 98.159904][ T5829] hsr_slave_1: entered promiscuous mode [ 98.169977][ T5845] team0: Port device team_slave_1 added [ 98.249658][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.261440][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.288438][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.336500][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.344774][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.372529][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.385795][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.393077][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.419387][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.431371][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.438975][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.467067][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.558542][ T5830] hsr_slave_0: entered promiscuous mode [ 98.565116][ T5830] hsr_slave_1: entered promiscuous mode [ 98.572250][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.580154][ T5830] Cannot create hsr debugfs directory [ 98.606921][ T5831] hsr_slave_0: entered promiscuous mode [ 98.613656][ T5831] hsr_slave_1: entered promiscuous mode [ 98.621707][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.629443][ T5831] Cannot create hsr debugfs directory [ 98.790817][ T5838] hsr_slave_0: entered promiscuous mode [ 98.798701][ T5838] hsr_slave_1: entered promiscuous mode [ 98.804861][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.812753][ T5838] Cannot create hsr debugfs directory [ 98.838066][ T5845] hsr_slave_0: entered promiscuous mode [ 98.844421][ T5845] hsr_slave_1: entered promiscuous mode [ 98.851533][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.859293][ T5845] Cannot create hsr debugfs directory [ 99.396620][ T5848] Bluetooth: hci0: command tx timeout [ 99.462372][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.476612][ T5848] Bluetooth: hci1: command tx timeout [ 99.483208][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.490603][ T5848] Bluetooth: hci3: command tx timeout [ 99.496047][ T5848] Bluetooth: hci4: command tx timeout [ 99.501536][ T5842] Bluetooth: hci2: command tx timeout [ 99.523982][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.560453][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.610862][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.643310][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.676510][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.688938][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.754087][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.783406][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.795201][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.829071][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.920623][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.952802][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.972781][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.997256][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.125084][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.142882][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.173780][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.188855][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.202714][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.292069][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.355994][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.363295][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.428338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.435510][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.496226][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.529769][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.545945][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.612694][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.636099][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.675928][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.683147][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.721924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.729089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.742327][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.749528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.773732][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.799096][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.806268][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.838426][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.845692][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.883160][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.890493][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.076025][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.175372][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.259641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.266912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.298542][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.305707][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.470646][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.489077][ T5848] Bluetooth: hci0: command tx timeout [ 101.558485][ T5842] Bluetooth: hci2: command tx timeout [ 101.563953][ T5842] Bluetooth: hci3: command tx timeout [ 101.570938][ T5849] Bluetooth: hci1: command tx timeout [ 101.577317][ T5848] Bluetooth: hci4: command tx timeout [ 101.635867][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.851104][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.897578][ T5829] veth0_vlan: entered promiscuous mode [ 101.948129][ T5829] veth1_vlan: entered promiscuous mode [ 102.092495][ T5830] veth0_vlan: entered promiscuous mode [ 102.142113][ T5830] veth1_vlan: entered promiscuous mode [ 102.162499][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.174676][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.241679][ T5829] veth0_macvtap: entered promiscuous mode [ 102.265754][ T5829] veth1_macvtap: entered promiscuous mode [ 102.374351][ T5830] veth0_macvtap: entered promiscuous mode [ 102.403627][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.414093][ T5830] veth1_macvtap: entered promiscuous mode [ 102.461315][ T5845] veth0_vlan: entered promiscuous mode [ 102.475151][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.500224][ T5838] veth0_vlan: entered promiscuous mode [ 102.521915][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.533664][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.542632][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551479][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.578265][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.589991][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.603338][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.624422][ T5845] veth1_vlan: entered promiscuous mode [ 102.648143][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.658774][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.673373][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.687340][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.696150][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.705021][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.713882][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.765031][ T5838] veth1_vlan: entered promiscuous mode [ 102.862521][ T5831] veth0_vlan: entered promiscuous mode [ 102.914802][ T5831] veth1_vlan: entered promiscuous mode [ 102.957858][ T5838] veth0_macvtap: entered promiscuous mode [ 102.975676][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.985496][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.990070][ T5838] veth1_macvtap: entered promiscuous mode [ 103.052087][ T5845] veth0_macvtap: entered promiscuous mode [ 103.082867][ T5845] veth1_macvtap: entered promiscuous mode [ 103.122692][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.135256][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.145515][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.156266][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.169184][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.220464][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.225334][ T5831] veth0_macvtap: entered promiscuous mode [ 103.242291][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.252746][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.261649][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.271768][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.282772][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.297185][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.310356][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.321719][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.334232][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.345312][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.355175][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.365664][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.377837][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.405195][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.416710][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.429731][ T5831] veth1_macvtap: entered promiscuous mode [ 103.445225][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.454124][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.464665][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.474712][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.495913][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.513818][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.524984][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.541971][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.552092][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.567669][ T5842] Bluetooth: hci0: command tx timeout [ 103.573998][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.586044][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.612727][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.637294][ T5842] Bluetooth: hci2: command tx timeout [ 103.642752][ T5842] Bluetooth: hci3: command tx timeout [ 103.648533][ T5849] Bluetooth: hci1: command tx timeout [ 103.653971][ T5849] Bluetooth: hci4: command tx timeout [ 103.663641][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.672681][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.681433][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.690187][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.734097][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.754496][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.827115][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.865316][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.877779][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.892101][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.904615][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.918980][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.931517][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.944613][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.961651][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.090932][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.109333][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.125947][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.142725][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.155083][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.172173][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.185239][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.202381][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.222447][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.329946][ T5919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.935486][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.969151][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.047051][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.055802][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.069426][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.078384][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.175022][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.184334][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.348901][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.403290][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.422828][ T5926] loop1: detected capacity change from 0 to 512 [ 105.452059][ T5926] EXT4-fs: inline encryption not supported [ 105.609386][ T5926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.659748][ T5926] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.702764][ T5926] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 105.718300][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.726161][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.779135][ T5926] EXT4-fs error (device loop1): ext4_dirty_inode:6030: inode #2: comm syz.1.7: mark_inode_dirty error [ 105.834488][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.860363][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.879305][ T5926] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 106.327254][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.335233][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.459852][ T5936] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 106.627650][ T5936] EXT4-fs error (device loop1): ext4_dirty_inode:6030: inode #2: comm syz.1.7: mark_inode_dirty error [ 106.683823][ T5936] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 106.725627][ T5936] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.7: mark_inode_dirty error [ 106.819668][ T5936] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 106.893633][ T5936] EXT4-fs error (device loop1): ext4_dirty_inode:6030: inode #2: comm syz.1.7: mark_inode_dirty error [ 106.971358][ T5926] EXT4-fs error (device loop1): ext4_do_update_inode:5142: inode #2: comm syz.1.7: corrupted inode contents [ 107.128000][ T5946] loop0: detected capacity change from 0 to 512 [ 107.176802][ T5946] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.248231][ T5946] EXT4-fs (loop0): invalid journal inode [ 107.278905][ T5946] EXT4-fs (loop0): can't get journal size [ 107.324549][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.349631][ T5946] EXT4-fs (loop0): 1 truncate cleaned up [ 107.357664][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.381821][ T5946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.597304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.646660][ T5954] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 107.656540][ T5954] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 107.665492][ T5954] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 107.832827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.936162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.037876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.446660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.456248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.497845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.131397][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.517039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.527137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2d2!!! [ 111.537692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 112.101234][ T5993] slcan: can't register candev [ 112.108591][ T5993] Falling back ldisc for ttyS3. [ 114.251655][ T909] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.471525][ T6013] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 114.482107][ T6013] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 114.484818][ T909] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.504274][ T6013] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 114.616553][ T909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.679698][ T909] usb 4-1: Product: syz [ 114.760046][ T909] usb 4-1: Manufacturer: syz [ 114.785519][ T909] usb 4-1: SerialNumber: syz [ 115.140323][ T909] usb 4-1: config 0 descriptor?? [ 115.362821][ T909] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 115.414277][ T909] usb 4-1: USB disconnect, device number 2 [ 115.746765][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.330912][ T46] IPVS: starting estimator thread 0... [ 127.537929][ T6113] IPVS: using max 19 ests per chain, 45600 per kthread [ 129.376971][ T5912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.687492][ T6150] loop0: detected capacity change from 0 to 8 [ 131.950486][ T6149] SQUASHFS error: Failed to read block 0x106: -5 [ 131.985883][ T6149] SQUASHFS error: Failed to read block 0xc00107: -5 [ 131.992852][ T6149] SQUASHFS error: Failed to read block 0xc8f2de: -5 [ 132.002624][ T6149] SQUASHFS error: Failed to read block 0x106: -5 [ 132.017435][ T29] audit: type=1800 audit(1738924420.820:2): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 133.506688][ T6015] Bluetooth: hci5: Frame reassembly failed (-84) [ 133.552773][ T6015] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.553074][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 135.559953][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 136.024380][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.550262][ T835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.580217][ T5846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.926949][ T6197] Zero length message leads to an empty skb [ 138.763344][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.809326][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.944701][ T6221] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 140.953194][ T6221] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 140.961842][ T6221] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 141.524744][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.302739][ T6235] can0: slcan on ttyS3. [ 144.188177][ T6229] can0 (unregistered): slcan off ttyS3. [ 144.544239][ T6241] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.720678][ T6245] loop0: detected capacity change from 0 to 164 [ 147.323051][ T5912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.350361][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.900339][ T6256] tmpfs: Unknown parameter 'e' [ 151.735941][ T6275] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 151.745377][ T6275] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 151.756431][ T6275] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 152.515604][ T6284] input: syz1 as /devices/virtual/input/input5 [ 153.460594][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.686867][ T6039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.907130][ T6290] Bluetooth: MGMT ver 1.23 [ 154.627797][ T6299] tmpfs: Unknown parameter 'e' [ 155.640132][ T6300] syz.1.109: attempt to access beyond end of device [ 155.640132][ T6300] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 155.656193][ T6300] (syz.1.109,6300,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 155.663888][ T6300] (syz.1.109,6300,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 155.671180][ T6300] (syz.1.109,6300,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 155.679773][ T6300] (syz.1.109,6300,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 157.172804][ T6312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.559324][ T6318] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 157.568156][ T6318] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 157.576958][ T6318] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 159.867173][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.867357][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.479104][ T6331] loop0: detected capacity change from 0 to 256 [ 160.509291][ T6331] exfat: Deprecated parameter 'utf8' [ 160.521145][ T6331] exfat: Deprecated parameter 'namecase' [ 160.537239][ T6331] exfat: Deprecated parameter 'namecase' [ 160.552804][ T6331] exfat: Deprecated parameter 'utf8' [ 160.632828][ T6331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 164.100214][ T6356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.014085][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.166045][ T6367] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 165.179834][ T6367] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 165.189187][ T6367] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 165.216982][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.832864][ T6369] loop4: detected capacity change from 0 to 256 [ 165.863539][ T6369] exfat: Deprecated parameter 'utf8' [ 165.892194][ T6369] exfat: Deprecated parameter 'namecase' [ 165.915181][ T6369] exfat: Deprecated parameter 'namecase' [ 165.949364][ T6369] exfat: Deprecated parameter 'utf8' [ 166.182292][ T6369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 167.524501][ T6389] loop4: detected capacity change from 0 to 8 [ 167.586054][ T6389] SQUASHFS error: Failed to read block 0x106: -5 [ 167.641680][ T6389] SQUASHFS error: Failed to read block 0xc00107: -5 [ 167.649065][ T6389] SQUASHFS error: Failed to read block 0xc8f2de: -5 [ 167.657561][ T6389] SQUASHFS error: Failed to read block 0x106: -5 [ 167.664673][ T29] audit: type=1800 audit(1738924456.470:3): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 169.779655][ T6410] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 169.793768][ T6410] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 169.803550][ T6410] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 170.133311][ T835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.928782][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.931560][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.963913][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.017546][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.156'. [ 172.593558][ T6440] loop4: detected capacity change from 0 to 164 [ 172.897426][ T46] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 173.106418][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.150327][ T46] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.196748][ T46] usb 5-1: config 1 has no interface number 1 [ 173.202953][ T46] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.243127][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.261046][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.284779][ T46] usb 5-1: Product: syz [ 173.290310][ T46] usb 5-1: Manufacturer: syz [ 173.295017][ T46] usb 5-1: SerialNumber: syz [ 175.374020][ T6464] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 175.990461][ T46] usb 5-1: USB disconnect, device number 2 [ 176.329039][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.676974][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.680182][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.206828][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 179.420883][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 179.439313][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.482118][ T9] usb 4-1: config 0 has no interface number 0 [ 179.519478][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 179.552074][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.576547][ T9] usb 4-1: Product: syz [ 179.591607][ T9] usb 4-1: Manufacturer: syz [ 179.607131][ T9] usb 4-1: SerialNumber: syz [ 179.633963][ T9] usb 4-1: config 0 descriptor?? [ 179.680896][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 182.446875][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.459245][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.507819][ T9] gspca_spca1528: reg_r err -71 [ 182.517331][ T6535] loop0: detected capacity change from 0 to 164 [ 182.525838][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 183.406648][ T9] usb 4-1: USB disconnect, device number 3 [ 183.451151][ T6538] sctp: [Deprecated]: syz.2.194 (pid 6538) Use of int in max_burst socket option deprecated. [ 183.451151][ T6538] Use struct sctp_assoc_value instead [ 186.059331][ T6566] syz.4.202 uses obsolete (PF_INET,SOCK_PACKET) [ 187.847030][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.198191][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.015753][ T6600] warning: `syz.0.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.034703][ T6602] sctp: [Deprecated]: syz.4.211 (pid 6602) Use of int in max_burst socket option deprecated. [ 190.034703][ T6602] Use struct sctp_assoc_value instead [ 191.931783][ T6625] overlay: Bad value for 'upperdir' [ 194.023967][ T6647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 194.180178][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.508628][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.687937][ T6651] sctp: [Deprecated]: syz.2.225 (pid 6651) Use of int in max_burst socket option deprecated. [ 194.687937][ T6651] Use struct sctp_assoc_value instead [ 196.167204][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.176818][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.326711][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 196.350537][ T5912] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.360009][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 196.370060][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.407019][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.416024][ T9] usb 5-1: config 0 has no interface number 0 [ 196.430513][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 196.446517][ T5912] usb 2-1: Product: syz [ 196.461017][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.469351][ T5912] usb 2-1: Manufacturer: syz [ 196.480477][ T5912] usb 2-1: SerialNumber: syz [ 196.485273][ T9] usb 5-1: Product: syz [ 196.505549][ T9] usb 5-1: Manufacturer: syz [ 196.513450][ T5912] usb 2-1: config 0 descriptor?? [ 196.518852][ T9] usb 5-1: SerialNumber: syz [ 196.539457][ T9] usb 5-1: config 0 descriptor?? [ 196.565345][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 196.736681][ T5912] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.348201][ T5912] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 197.400407][ T5912] usb 2-1: USB disconnect, device number 2 [ 198.933911][ T9] gspca_spca1528: reg_r err -110 [ 198.946792][ T9] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 199.447351][ T6706] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 199.455979][ T6706] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 199.464648][ T6706] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 199.569261][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.721558][ T6015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.721634][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.739465][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.836648][ T46] usb 5-1: USB disconnect, device number 3 [ 204.306761][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 204.477213][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 205.124519][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.133184][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.175462][ T25] usb 3-1: config 0 has no interface number 0 [ 205.207334][ T25] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 205.222936][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.245016][ T25] usb 3-1: Product: syz [ 205.254846][ T25] usb 3-1: Manufacturer: syz [ 205.269857][ T25] usb 3-1: SerialNumber: syz [ 205.303092][ T25] usb 3-1: config 0 descriptor?? [ 205.328045][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 205.483942][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.425257][ T25] gspca_spca1528: reg_r err -71 [ 207.430368][ T25] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 207.509896][ T25] usb 3-1: USB disconnect, device number 2 [ 209.284075][ T6798] tmpfs: Unknown parameter 'e' [ 210.603037][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.765543][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.357762][ T6809] can0: slcan on ttyS3. [ 212.788381][ T6800] can0 (unregistered): slcan off ttyS3. [ 216.416826][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.568969][ T6850] mmap: syz.2.289 (6850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.656843][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.080755][ T6869] tmpfs: Unknown parameter 'e' [ 222.566975][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 222.573099][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 222.579956][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 222.587334][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 222.835392][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.518505][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.061533][ T6942] tmpfs: Unknown parameter 'e' [ 229.242051][ T6412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.256934][ T6015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.344848][ T6957] overlay: Bad value for 'upperdir' [ 231.827684][ T6966] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.568764][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.582481][ T5912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.636992][ T6015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.592880][ T6998] tmpfs: Unknown parameter 'e' [ 240.710311][ T5912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.846739][ T6015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.180363][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.200062][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.219458][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.238970][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 241.251598][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.261879][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.269492][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.830979][ T7018] loop2: detected capacity change from 0 to 16 [ 241.950420][ T7018] erofs (device loop2): mounted with root inode @ nid 36. [ 242.495169][ T7023] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 242.495381][ T7023] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 242.495731][ T7023] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 242.495804][ T7023] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 242.496063][ T7023] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 242.496083][ T7023] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 242.496739][ T7023] syz.2.332: attempt to access beyond end of device [ 242.496739][ T7023] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 242.497670][ T7023] syz.2.332: attempt to access beyond end of device [ 242.497670][ T7023] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 242.498693][ T7023] syz.2.332: attempt to access beyond end of device [ 242.498693][ T7023] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 242.499186][ T7023] syz.2.332: attempt to access beyond end of device [ 242.499186][ T7023] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 242.499361][ T7023] syz.2.332: attempt to access beyond end of device [ 242.499361][ T7023] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 242.499551][ T7023] syz.2.332: attempt to access beyond end of device [ 242.499551][ T7023] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 242.499977][ T7023] syz.2.332: attempt to access beyond end of device [ 242.499977][ T7023] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 242.719283][ T7022] tty tty25: ldisc open failed (-12), clearing slot 24 [ 243.327464][ T5849] Bluetooth: hci5: command tx timeout [ 244.215028][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 245.486605][ T5849] Bluetooth: hci5: command tx timeout [ 247.197568][ T7061] tmpfs: Unknown parameter 'e' [ 248.004988][ T5849] Bluetooth: hci5: command tx timeout [ 248.184442][ T1089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.471933][ T7066] loop3: detected capacity change from 0 to 16 [ 248.518610][ T7066] erofs (device loop3): mounted with root inode @ nid 36. [ 248.625646][ T1089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.988795][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.996921][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.997155][ T7011] bridge_slave_0: entered allmulticast mode [ 249.017261][ T7069] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 249.029792][ T7069] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 249.037649][ T7069] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 249.046079][ T7069] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 249.053785][ T7069] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 249.061142][ T7069] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 249.068732][ T7069] syz.3.343: attempt to access beyond end of device [ 249.068732][ T7069] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 249.082548][ T7069] syz.3.343: attempt to access beyond end of device [ 249.082548][ T7069] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 249.096649][ T7069] syz.3.343: attempt to access beyond end of device [ 249.096649][ T7069] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 249.111700][ T7069] syz.3.343: attempt to access beyond end of device [ 249.111700][ T7069] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 249.126301][ T7069] syz.3.343: attempt to access beyond end of device [ 249.126301][ T7069] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 249.140269][ T7069] syz.3.343: attempt to access beyond end of device [ 249.140269][ T7069] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 249.155975][ T7069] syz.3.343: attempt to access beyond end of device [ 249.155975][ T7069] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 249.177188][ T7011] bridge_slave_0: entered promiscuous mode [ 249.496875][ T1089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.467870][ T5849] Bluetooth: hci5: command tx timeout [ 250.499805][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.426534][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.439234][ T7011] bridge_slave_1: entered allmulticast mode [ 251.447891][ T7011] bridge_slave_1: entered promiscuous mode [ 251.695845][ T1089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.803587][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.833626][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.354727][ T7011] team0: Port device team_slave_0 added [ 253.402485][ T7011] team0: Port device team_slave_1 added [ 253.999628][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.062650][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.220848][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.423699][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.446873][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.550180][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.255184][ T7011] hsr_slave_0: entered promiscuous mode [ 256.264408][ T7011] hsr_slave_1: entered promiscuous mode [ 256.272498][ T7011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.280745][ T7011] Cannot create hsr debugfs directory [ 257.676694][ T1089] bridge_slave_1: left allmulticast mode [ 257.773079][ T1089] bridge_slave_1: left promiscuous mode [ 258.459648][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.129180][ T1089] bridge_slave_0: left allmulticast mode [ 259.134908][ T1089] bridge_slave_0: left promiscuous mode [ 259.154583][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.247540][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.254169][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.343153][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.370682][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.419749][ T1089] bond0 (unregistering): Released all slaves [ 262.556180][ T7161] syz.1.365: attempt to access beyond end of device [ 262.556180][ T7161] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 262.570604][ T7161] (syz.1.365,7161,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 262.579017][ T7161] (syz.1.365,7161,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 262.586313][ T7161] (syz.1.365,7161,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 262.595040][ T7161] (syz.1.365,7161,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 264.078699][ T7181] loop3: detected capacity change from 0 to 8 [ 264.174206][ T7181] SQUASHFS error: Failed to read block 0x106: -5 [ 264.225288][ T7181] SQUASHFS error: Failed to read block 0xc00107: -5 [ 264.226941][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 264.232381][ T7181] SQUASHFS error: Failed to read block 0xc8f2de: -5 [ 264.247643][ T7181] SQUASHFS error: Failed to read block 0x106: -5 [ 264.258388][ T29] audit: type=1800 audit(1738924553.060:4): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.368" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 264.548631][ T5944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 264.955704][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.086412][ T5944] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 265.106835][ T5944] usb 3-1: config 1 interface 0 has no altsetting 1 [ 265.129355][ T5944] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 265.163443][ T5944] usb 3-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 265.215138][ T5944] usb 3-1: Product: syz [ 265.226525][ T5944] usb 3-1: Manufacturer: syz [ 265.236974][ T5944] usb 3-1: SerialNumber: syz [ 265.265030][ T5944] smsusb:smsusb_probe: board id=8, interface number 0 [ 265.471505][ T5944] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 265.495033][ T5944] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 265.556728][ T5944] usb 3-1: USB disconnect, device number 3 [ 268.324649][ T1089] hsr_slave_0: left promiscuous mode [ 268.362379][ T1089] hsr_slave_1: left promiscuous mode [ 268.385108][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.428460][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.471224][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.500445][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.732669][ T1089] veth1_macvtap: left promiscuous mode [ 268.766167][ T1089] veth0_macvtap: left promiscuous mode [ 268.794642][ T1089] veth1_vlan: left promiscuous mode [ 268.821524][ T1089] veth0_vlan: left promiscuous mode [ 272.575234][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 272.918095][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 277.184116][ T7011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.250300][ T7236] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 277.267481][ T7236] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 277.322580][ T7011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.348432][ T7236] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 277.410172][ T7011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.508780][ T7011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.872994][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.035175][ T7011] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.081583][ T1089] IPVS: stop unused estimator thread 0... [ 280.097072][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.104262][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.206183][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.213557][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.615557][ T7296] ptrace attach of "./syz-executor exec"[5830] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 282.916636][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 283.202569][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.930402][ T7352] ptrace attach of "./syz-executor exec"[5830] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 288.189622][ T7011] veth0_vlan: entered promiscuous mode [ 288.332328][ T7011] veth1_vlan: entered promiscuous mode [ 289.170242][ T7011] veth0_macvtap: entered promiscuous mode [ 289.243791][ T7011] veth1_macvtap: entered promiscuous mode [ 289.452165][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.545335][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.603099][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.686629][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.731761][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.826502][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.886452][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.672129][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.684394][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.862261][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.148426][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.159742][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.174060][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.184318][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.195714][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.206935][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.218773][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.825901][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.962584][ T7011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.120079][ T7011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.129512][ T7011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.139271][ T7011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.575066][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.618844][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.932086][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.051649][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.577423][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.215871][ T7425] ptrace attach of "./syz-executor exec"[5838] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 300.916768][ T7463] tmpfs: Unknown parameter 'e' [ 303.398793][ T7479] ptrace attach of "./syz-executor exec"[5830] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 308.120083][ T7528] ptrace attach of "./syz-executor exec"[7011] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 310.997890][ T7554] Cannot find del_set index 0 as target [ 313.479229][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 313.498574][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 313.984384][ T7584] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[7584] [ 315.506609][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 319.086839][ T7621] Cannot find del_set index 0 as target [ 320.681621][ T7637] ptrace attach of "./syz-executor exec"[7011] was attempted by ""[7637] [ 322.658392][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.664770][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.178836][ T7701] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[7701] [ 334.816985][ T909] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 335.097592][ T7768] loop2: detected capacity change from 0 to 16 [ 335.194441][ T7768] erofs (device loop2): mounted with root inode @ nid 36. [ 335.276384][ T909] usb 6-1: Using ep0 maxpacket: 16 [ 335.375343][ T7768] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 335.383112][ T7768] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 335.390961][ T7768] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 335.398432][ T7768] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 335.406017][ T7768] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 335.413382][ T7768] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 335.420961][ T7768] syz.2.494: attempt to access beyond end of device [ 335.420961][ T7768] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 335.434813][ T7768] syz.2.494: attempt to access beyond end of device [ 335.434813][ T7768] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 335.448951][ T7768] syz.2.494: attempt to access beyond end of device [ 335.448951][ T7768] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 335.464101][ T7768] syz.2.494: attempt to access beyond end of device [ 335.464101][ T7768] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 335.481242][ T7768] syz.2.494: attempt to access beyond end of device [ 335.481242][ T7768] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 335.494839][ T7768] syz.2.494: attempt to access beyond end of device [ 335.494839][ T7768] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 335.508678][ T7768] syz.2.494: attempt to access beyond end of device [ 335.508678][ T7768] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 335.600965][ T909] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.634855][ T909] usb 6-1: config 0 has no interface number 0 [ 335.655482][ T7774] fuse: Bad value for 'fd' [ 335.670000][ T909] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 335.804776][ T909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.853400][ T909] usb 6-1: Product: syz [ 335.868238][ T909] usb 6-1: Manufacturer: syz [ 335.913045][ T909] usb 6-1: SerialNumber: syz [ 336.181698][ T909] usb 6-1: config 0 descriptor?? [ 336.935700][ T909] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 338.234931][ T52] Bluetooth: hci4: Frame reassembly failed (-84) [ 338.960835][ T909] gspca_spca1528: reg_r err -71 [ 338.965865][ T909] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 339.356495][ T909] usb 6-1: USB disconnect, device number 2 [ 340.047667][ T5848] Bluetooth: hci4: command 0x1003 tx timeout [ 340.116483][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.966195][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 345.329387][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 346.150356][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.227442][ T46] usb 3-1: config 0 has no interface number 0 [ 346.264322][ T46] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 346.312475][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.340938][ T46] usb 3-1: Product: syz [ 346.360045][ T46] usb 3-1: Manufacturer: syz [ 346.371555][ T46] usb 3-1: SerialNumber: syz [ 346.415051][ T46] usb 3-1: config 0 descriptor?? [ 346.440466][ T46] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 347.033160][ T5848] Bluetooth: hci4: sending frame failed (-49) [ 347.043870][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 348.519769][ T46] gspca_spca1528: reg_r err -71 [ 348.524811][ T46] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 348.581293][ T46] usb 3-1: USB disconnect, device number 4 [ 353.509359][ T7947] sctp: failed to load transform for md5: -2 [ 355.087450][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.447856][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 355.517271][ T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.556450][ T46] usb 6-1: config 0 has no interface number 0 [ 355.887558][ T46] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 355.897440][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.909420][ T46] usb 6-1: Product: syz [ 355.913626][ T46] usb 6-1: Manufacturer: syz [ 355.926349][ T46] usb 6-1: SerialNumber: syz [ 355.937793][ T46] usb 6-1: config 0 descriptor?? [ 355.989602][ T46] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 357.107348][ T46] gspca_spca1528: reg_w err -110 [ 357.127705][ T46] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 359.035915][ T9] usb 6-1: USB disconnect, device number 3 [ 359.436507][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 359.616621][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 359.664468][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.972527][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.986834][ T9] usb 6-1: Product: syz [ 359.991068][ T9] usb 6-1: Manufacturer: syz [ 359.995698][ T9] usb 6-1: SerialNumber: syz [ 360.297967][ T9] usb 6-1: config 0 descriptor?? [ 360.569332][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.689031][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 361.736610][ T9] usb 6-1: USB disconnect, device number 4 [ 365.402838][ T8062] tmpfs: Unknown parameter 'e' [ 365.841013][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 370.853428][ T8095] syz.2.561: attempt to access beyond end of device [ 370.853428][ T8095] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 370.866236][ T8095] (syz.2.561,8095,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 370.873857][ T8095] (syz.2.561,8095,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 370.881205][ T8095] (syz.2.561,8095,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 370.889832][ T8095] (syz.2.561,8095,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 374.043558][ T8123] tmpfs: Unknown parameter 'e' [ 379.301822][ T8161] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 380.576421][ T8174] tmpfs: Unknown parameter 'e' [ 382.745876][ T8185] loop4: detected capacity change from 0 to 8 [ 383.768745][ T8189] tmpfs: Unknown parameter 'e' [ 383.840375][ T29] audit: type=1800 audit(1738924672.640:5): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.581" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 384.664619][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.719570][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.185888][ T8211] tmpfs: Unknown parameter 'e' [ 389.765129][ T8230] tmpfs: Unknown parameter 'e' [ 390.701568][ T8237] loop3: detected capacity change from 0 to 16 [ 390.734662][ T8237] erofs (device loop3): mounted with root inode @ nid 36. [ 391.625596][ T8243] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 391.634553][ T8243] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 391.643407][ T8243] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 391.651055][ T8243] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 391.659761][ T8243] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 391.667292][ T8243] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 391.675326][ T8243] syz.3.600: attempt to access beyond end of device [ 391.675326][ T8243] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 391.691912][ T8243] syz.3.600: attempt to access beyond end of device [ 391.691912][ T8243] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 391.707373][ T8243] syz.3.600: attempt to access beyond end of device [ 391.707373][ T8243] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 391.765326][ T8243] syz.3.600: attempt to access beyond end of device [ 391.765326][ T8243] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 391.780820][ T8243] syz.3.600: attempt to access beyond end of device [ 391.780820][ T8243] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 391.795682][ T8243] syz.3.600: attempt to access beyond end of device [ 391.795682][ T8243] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 391.810815][ T8243] syz.3.600: attempt to access beyond end of device [ 391.810815][ T8243] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 392.562917][ T8249] tmpfs: Unknown parameter 'e' [ 395.020772][ T8266] Cannot find del_set index 0 as target [ 397.918931][ T8287] loop2: detected capacity change from 0 to 16 [ 397.987323][ T8287] erofs (device loop2): mounted with root inode @ nid 36. [ 398.577614][ T8294] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 398.585563][ T8294] erofs (device loop2): readahead error at folio 10 @ nid 36 [ 398.594125][ T8294] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 398.602232][ T8294] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 398.610335][ T8294] erofs (device loop2): invalid logical cluster 0 at nid 36 [ 398.617876][ T8294] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 398.625607][ T8294] syz.2.614: attempt to access beyond end of device [ 398.625607][ T8294] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 398.640060][ T8294] syz.2.614: attempt to access beyond end of device [ 398.640060][ T8294] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 398.657671][ T8294] syz.2.614: attempt to access beyond end of device [ 398.657671][ T8294] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 398.672185][ T8294] syz.2.614: attempt to access beyond end of device [ 398.672185][ T8294] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 398.709606][ T8294] syz.2.614: attempt to access beyond end of device [ 398.709606][ T8294] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 398.723937][ T8294] syz.2.614: attempt to access beyond end of device [ 398.723937][ T8294] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 398.738577][ T8294] syz.2.614: attempt to access beyond end of device [ 398.738577][ T8294] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 399.814914][ T8304] tmpfs: Unknown parameter 'e' [ 400.682155][ T8307] Cannot find del_set index 0 as target [ 402.063425][ T8318] Invalid ELF header type: 0 != 1 [ 403.706491][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 404.976997][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 404.984551][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.992917][ T25] usb 6-1: config 0 has no interface number 0 [ 405.017487][ T25] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 405.036416][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.044609][ T25] usb 6-1: Product: syz [ 405.056334][ T25] usb 6-1: Manufacturer: syz [ 405.061004][ T25] usb 6-1: SerialNumber: syz [ 405.098224][ T25] usb 6-1: config 0 descriptor?? [ 405.149927][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.238565][ T25] gspca_spca1528: reg_r err -71 [ 407.243613][ T25] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 407.304310][ T25] usb 6-1: USB disconnect, device number 5 [ 407.378113][ T8352] tmpfs: Unknown parameter 'e' [ 408.329203][ T8354] Cannot find del_set index 0 as target [ 410.786722][ T8372] tmpfs: Unknown parameter 'e' [ 411.170352][ T8376] tmpfs: Unknown parameter 'e' [ 412.982360][ T8390] tmpfs: Unknown parameter 'e' [ 415.021360][ T8404] Invalid ELF header type: 0 != 1 [ 427.544380][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 432.893624][ T8533] slcan: can't register candev [ 432.898780][ T8533] Falling back ldisc for ttyS3. [ 436.054396][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 436.093054][ T8566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 436.549465][ T8571] can0: slcan on ttyS3. [ 437.299276][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 437.346930][ T8568] can0 (unregistered): slcan off ttyS3. [ 437.502447][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.537829][ T9] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 437.586766][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.633895][ T9] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 437.693595][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 437.719931][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 437.739765][ T9] usb 6-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 437.773365][ T9] usb 6-1: Product: syz [ 437.797151][ T9] usb 6-1: Manufacturer: syz [ 437.811840][ T9] usb 6-1: SerialNumber: syz [ 438.099445][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 438.115718][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 438.225897][ T9] usb 6-1: USB disconnect, device number 6 [ 443.135107][ T8612] loop4: detected capacity change from 0 to 256 [ 443.417386][ T8612] netlink: 72 bytes leftover after parsing attributes in process `syz.4.708'. [ 444.227364][ T8616] can0: slcan on ttyS3. [ 444.816575][ T8613] can0 (unregistered): slcan off ttyS3. [ 445.498113][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.504565][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.953488][ T8675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 455.276410][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 455.464537][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 455.534423][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 455.546933][ T9] usb 3-1: config 0 has no interface number 0 [ 455.558850][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 455.571345][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 455.581123][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.590485][ T9] usb 3-1: Product: syz [ 455.594945][ T9] usb 3-1: Manufacturer: syz [ 455.604612][ T9] usb 3-1: SerialNumber: syz [ 455.621929][ T9] usb 3-1: config 0 descriptor?? [ 456.819672][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 456.846629][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 456.860965][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 456.869538][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 456.892335][ T9] usb 3-1: USB disconnect, device number 5 [ 462.536194][ T8722] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 462.544596][ T8722] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 462.554867][ T8722] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 463.708542][ T8725] loop2: detected capacity change from 0 to 8 [ 465.274960][ T8735] process 'syz.4.743' launched './file1' with NULL argv: empty string added [ 468.127116][ T8751] can0: slcan on ttyS3. [ 468.938413][ T8742] can0 (unregistered): slcan off ttyS3. [ 469.135343][ T8757] loop4: detected capacity change from 0 to 512 [ 469.153313][ T8757] ======================================================= [ 469.153313][ T8757] WARNING: The mand mount option has been deprecated and [ 469.153313][ T8757] and is ignored by this kernel. Remove the mand [ 469.153313][ T8757] option from the mount to silence this warning. [ 469.153313][ T8757] ======================================================= [ 469.261958][ T8757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.461757][ T8757] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.750: invalid block [ 469.483591][ T8757] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.750: invalid indirect mapped block 4294967295 (level 1) [ 469.508655][ T8757] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.750: invalid indirect mapped block 4294967295 (level 1) [ 469.570672][ T8757] EXT4-fs (loop4): 2 truncates cleaned up [ 469.583980][ T8757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.584169][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.944604][ T8777] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 472.386191][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.757'. [ 475.070640][ T8803] can0: slcan on ttyS3. [ 475.897021][ T8796] can0 (unregistered): slcan off ttyS3. [ 476.964453][ T8811] loop1: detected capacity change from 0 to 164 [ 477.457345][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 477.506130][ T8815] loop3: detected capacity change from 0 to 16 [ 477.547173][ T8815] erofs (device loop3): mounted with root inode @ nid 36. [ 477.575399][ T8805] loop5: detected capacity change from 0 to 40427 [ 477.605279][ T8805] F2FS-fs (loop5): heap/no_heap options were deprecated [ 477.649473][ T8805] F2FS-fs (loop5): invalid crc value [ 477.674250][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.733411][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.779812][ T8805] F2FS-fs (loop5): Found nat_bits in checkpoint [ 477.789379][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 477.854951][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.896621][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.946091][ T9] usb 2-1: Product: syz [ 477.973885][ T9] usb 2-1: Manufacturer: syz [ 477.983579][ T9] usb 2-1: SerialNumber: syz [ 478.288663][ T8823] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 478.296425][ T8823] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 478.304228][ T8823] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 478.311745][ T8823] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 478.320354][ T8823] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 478.327829][ T8823] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 478.335377][ T8823] syz.3.768: attempt to access beyond end of device [ 478.335377][ T8823] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 478.349257][ T8823] syz.3.768: attempt to access beyond end of device [ 478.349257][ T8823] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 478.363391][ T8823] syz.3.768: attempt to access beyond end of device [ 478.363391][ T8823] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 478.377458][ T8823] syz.3.768: attempt to access beyond end of device [ 478.377458][ T8823] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 478.391980][ T8823] syz.3.768: attempt to access beyond end of device [ 478.391980][ T8823] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 478.405595][ T8823] syz.3.768: attempt to access beyond end of device [ 478.405595][ T8823] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 478.430890][ T8823] syz.3.768: attempt to access beyond end of device [ 478.430890][ T8823] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 479.530086][ T8805] F2FS-fs (loop5): Start checkpoint disabled! [ 480.444213][ T8835] tmpfs: Unknown parameter 'e' [ 482.298277][ T9] usb 2-1: can't set config #1, error -71 [ 482.532519][ T9] usb 2-1: USB disconnect, device number 3 [ 483.075281][ T8848] loop4: detected capacity change from 0 to 128 [ 483.141680][ T8848] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.299034][ T8848] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.356651][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 483.440922][ T8857] loop5: detected capacity change from 0 to 16 [ 483.580506][ T8857] erofs (device loop5): mounted with root inode @ nid 36. [ 483.601207][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.641462][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.126761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.171039][ T9] usb 4-1: Product: syz [ 484.180474][ T9] usb 4-1: Manufacturer: syz [ 484.185271][ T9] usb 4-1: SerialNumber: syz [ 484.601796][ T8865] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 484.602356][ T8865] erofs (device loop5): readahead error at folio 10 @ nid 36 [ 484.603424][ T8865] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 484.603618][ T8865] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 484.604558][ T8865] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 484.604600][ T8865] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 484.605153][ T8865] syz.5.781: attempt to access beyond end of device [ 484.605153][ T8865] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 484.606034][ T8865] syz.5.781: attempt to access beyond end of device [ 484.606034][ T8865] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 484.606947][ T8865] syz.5.781: attempt to access beyond end of device [ 484.606947][ T8865] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 484.608131][ T8865] syz.5.781: attempt to access beyond end of device [ 484.608131][ T8865] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 484.609021][ T8865] syz.5.781: attempt to access beyond end of device [ 484.609021][ T8865] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 484.609784][ T8865] syz.5.781: attempt to access beyond end of device [ 484.609784][ T8865] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 484.610625][ T8865] syz.5.781: attempt to access beyond end of device [ 484.610625][ T8865] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 485.196608][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.355177][ T8864] tty tty31: ldisc open failed (-12), clearing slot 30 [ 485.739715][ T8861] loop1: detected capacity change from 0 to 2048 [ 486.087518][ T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 486.095567][ T9] cdc_ncm 4-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 486.167416][ T9] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 490.609010][ T9] cdc_ncm 4-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 490.733794][ T8893] tmpfs: Unknown parameter 'e' [ 492.897995][ T9] usb 4-1: USB disconnect, device number 4 [ 492.918385][ T9] cdc_ncm 4-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 493.660064][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 494.125032][ T8910] loop1: detected capacity change from 0 to 16 [ 494.172057][ T8910] erofs (device loop1): mounted with root inode @ nid 36. [ 494.182957][ T8913] loop2: detected capacity change from 0 to 64 [ 495.431723][ T8923] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 495.432539][ T8923] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 495.434351][ T8923] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 495.434540][ T8923] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 495.435965][ T8923] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 495.436008][ T8923] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 495.436828][ T8923] syz.1.793: attempt to access beyond end of device [ 495.436828][ T8923] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 495.438105][ T8923] syz.1.793: attempt to access beyond end of device [ 495.438105][ T8923] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 495.439137][ T8923] syz.1.793: attempt to access beyond end of device [ 495.439137][ T8923] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 495.440421][ T8923] syz.1.793: attempt to access beyond end of device [ 495.440421][ T8923] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 495.441503][ T8923] syz.1.793: attempt to access beyond end of device [ 495.441503][ T8923] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 495.442536][ T8923] syz.1.793: attempt to access beyond end of device [ 495.442536][ T8923] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 495.443796][ T8923] syz.1.793: attempt to access beyond end of device [ 495.443796][ T8923] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 496.006459][ T8922] tty tty23: ldisc open failed (-12), clearing slot 22 [ 496.531937][ T8916] loop5: detected capacity change from 0 to 2048 [ 496.541123][ T8915] veth1_macvtap: left promiscuous mode [ 496.560583][ T8915] macsec0: entered promiscuous mode [ 498.604118][ T9] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 498.635812][ T9] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 498.669753][ T9] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 501.082821][ T8953] tmpfs: Unknown parameter 'e' [ 504.109104][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 505.469179][ T8975] loop2: detected capacity change from 0 to 64 [ 506.428242][ T8980] loop5: detected capacity change from 0 to 256 [ 507.110775][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.117210][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.015735][ T8989] loop4: detected capacity change from 0 to 512 [ 508.092009][ T8989] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 508.215770][ T8989] EXT4-fs (loop4): mount failed [ 508.414825][ T8994] loop3: detected capacity change from 0 to 2048 [ 508.869638][ T5203] loop3: p1 < > p4 [ 509.998446][ T5203] loop3: p4 size 8388608 extends beyond EOD, truncated [ 511.170359][ T5203] loop3: p1 < > p4 [ 512.045713][ T5203] loop3: p4 size 8388608 extends beyond EOD, truncated [ 512.484392][ T9008] loop2: detected capacity change from 0 to 512 [ 512.556742][ T9008] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 512.620189][ T9008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 512.843812][ T9008] EXT4-fs (loop2): 1 truncate cleaned up [ 512.906713][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.300445][ T9021] tmpfs: Unknown parameter 'e' [ 513.319992][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 513.419729][ T9019] udevd[9019]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 513.449067][ T9022] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 513.457501][ T9022] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 513.465975][ T9022] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 513.520281][ T9007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.942322][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 514.981664][ T9030] udevd[9030]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 516.304476][ T9045] tmpfs: Unknown parameter 'e' [ 518.361990][ T9063] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 518.389319][ T9063] CIFS: Unable to determine destination address [ 519.367099][ T9069] tmpfs: Unknown parameter 'e' [ 519.714748][ T9075] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 519.723215][ T9075] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 519.741247][ T9073] loop3: detected capacity change from 0 to 256 [ 519.776625][ T9075] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 519.859262][ T9073] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 523.021486][ T9093] tmpfs: Unknown parameter 'e' [ 524.460450][ T9104] loop3: detected capacity change from 0 to 256 [ 524.775173][ T9108] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 525.130838][ T9109] syz.3.843: attempt to access beyond end of device [ 525.130838][ T9109] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 525.753067][ T9120] tmpfs: Unknown parameter 'e' [ 526.565131][ T9132] loop3: detected capacity change from 0 to 512 [ 526.608362][ T9132] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.853: casefold flag without casefold feature [ 526.674014][ T9132] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.853: couldn't read orphan inode 15 (err -117) [ 526.730283][ T9132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.537639][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.557068][ T9152] loop5: detected capacity change from 0 to 764 [ 529.576009][ T9153] tmpfs: Unknown parameter 'e' [ 530.883932][ T9160] rock: directory entry would overflow storage [ 530.890484][ T9160] rock: sig=0x4f50, size=4, remaining=3 [ 530.896091][ T9160] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 531.228862][ T9164] tmpfs: Unknown parameter 'e' [ 531.278367][ T9168] loop4: detected capacity change from 0 to 512 [ 531.353425][ T9168] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.863: casefold flag without casefold feature [ 531.411310][ T9168] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.863: couldn't read orphan inode 15 (err -117) [ 531.678525][ T9176] loop5: detected capacity change from 0 to 512 [ 532.518887][ T9168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.075255][ T9176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.088757][ T9176] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.595304][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.060863][ T7011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.600457][ T9215] overlay: Bad value for 'upperdir' [ 538.901877][ T9221] tmpfs: Unknown parameter 'e' [ 538.953336][ T9226] tmpfs: Unknown parameter 'e' [ 539.584563][ T9230] loop5: detected capacity change from 0 to 16 [ 539.616729][ T9232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 539.649933][ T9230] erofs (device loop5): mounted with root inode @ nid 36. [ 539.694756][ T9230] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 539.731621][ T9233] erofs (device loop5): readahead error at folio 3604 @ nid 36 [ 539.797277][ T9233] erofs (device loop5): readahead error at folio 3603 @ nid 36 [ 539.804914][ T9233] erofs (device loop5): readahead error at folio 3602 @ nid 36 [ 539.817878][ T9230] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 539.878337][ T9233] erofs (device loop5): readahead error at folio 3601 @ nid 36 [ 539.886162][ T9233] erofs (device loop5): readahead error at folio 3600 @ nid 36 [ 539.917481][ T9230] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 539.985972][ T9233] erofs (device loop5): readahead error at folio 3599 @ nid 36 [ 540.206546][ T9238] loop4: detected capacity change from 0 to 512 [ 540.695730][ T9238] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.883: corrupted in-inode xattr: invalid ea_ino [ 540.721126][ T9238] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.883: couldn't read orphan inode 15 (err -117) [ 540.811329][ T9238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.706197][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.927125][ T9248] tmpfs: Unknown parameter 'e' [ 543.310183][ T9255] loop4: detected capacity change from 0 to 512 [ 543.377019][ T9257] overlay: Bad value for 'upperdir' [ 543.542916][ T9255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.622819][ T9255] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.761195][ T9263] wg2: entered promiscuous mode [ 543.789519][ T9263] wg2: entered allmulticast mode [ 543.912878][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.043053][ T9266] loop3: detected capacity change from 0 to 16 [ 544.070405][ T9266] erofs (device loop3): mounted with root inode @ nid 36. [ 544.147804][ T9266] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 544.187377][ T9268] erofs (device loop3): readahead error at folio 3604 @ nid 36 [ 544.195018][ T9268] erofs (device loop3): readahead error at folio 3603 @ nid 36 [ 544.258495][ T9266] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 544.293382][ T9268] erofs (device loop3): readahead error at folio 3602 @ nid 36 [ 544.335395][ T9272] loop4: detected capacity change from 0 to 64 [ 544.343808][ T9268] erofs (device loop3): readahead error at folio 3601 @ nid 36 [ 544.384619][ T9266] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 544.391856][ T9268] erofs (device loop3): readahead error at folio 3600 @ nid 36 [ 544.391887][ T9268] erofs (device loop3): readahead error at folio 3599 @ nid 36 [ 546.922182][ T9295] overlay: Bad value for 'upperdir' [ 547.126693][ T5912] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 547.556572][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 547.568924][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.593689][ T5912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.615321][ T5912] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.641017][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.680125][ T5912] usb 4-1: Product: syz [ 547.692520][ T5912] usb 4-1: Manufacturer: syz [ 547.712646][ T5912] usb 4-1: SerialNumber: syz [ 547.753914][ T5912] usb 4-1: config 0 descriptor?? [ 549.286549][ T9306] tmpfs: Unknown parameter 'e' [ 550.104556][ T5912] usb 4-1: USB disconnect, device number 5 [ 553.386641][ T9331] tmpfs: Unknown parameter 'e' [ 555.477684][ T9347] overlay: Bad value for 'upperdir' [ 560.978493][ T9370] loop5: detected capacity change from 0 to 16 [ 561.186866][ T9370] erofs (device loop5): mounted with root inode @ nid 36. [ 562.394029][ T9379] tmpfs: Unknown parameter 'e' [ 563.876705][ T9394] overlay: Bad value for 'upperdir' [ 565.037893][ T29] audit: type=1326 audit(1738924853.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 565.342419][ T29] audit: type=1326 audit(1738924853.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 565.408201][ T29] audit: type=1326 audit(1738924853.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 565.755712][ T29] audit: type=1326 audit(1738924853.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 565.896745][ T29] audit: type=1326 audit(1738924853.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 565.998310][ T29] audit: type=1326 audit(1738924853.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 566.076533][ T29] audit: type=1326 audit(1738924853.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 566.226573][ T29] audit: type=1326 audit(1738924853.840:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 566.305589][ T29] audit: type=1326 audit(1738924853.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 566.343007][ T29] audit: type=1326 audit(1738924853.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c7d8cde9 code=0x7ffc0000 [ 567.315069][ T9424] loop4: detected capacity change from 0 to 512 [ 567.711342][ T9424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.725463][ T9424] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.213379][ T9424] syz.4.936 (9424) used greatest stack depth: 18424 bytes left [ 568.380341][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.389034][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.548136][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.602606][ T9441] tmpfs: Unknown parameter 'e' [ 574.598240][ T9462] loop4: detected capacity change from 0 to 2048 [ 574.934263][ T5203] loop4: p1 < > p4 [ 574.963993][ T5203] loop4: p4 size 8388608 extends beyond EOD, truncated [ 575.322023][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 575.375697][ T9030] udevd[9030]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 576.624898][ T9479] wg2: entered promiscuous mode [ 576.650814][ T9479] wg2: entered allmulticast mode [ 576.986721][ T9482] tmpfs: Unknown parameter 'e' [ 577.901273][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 577.916693][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 577.929838][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 577.939587][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 577.954059][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 577.962252][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 579.154694][ T9502] tty tty29: ldisc open failed (-12), clearing slot 28 [ 580.046774][ T5848] Bluetooth: hci4: command tx timeout [ 580.432567][ T6950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.584385][ T6950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.116318][ T5848] Bluetooth: hci4: command tx timeout [ 582.434703][ T6950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.811334][ T9530] loop5: detected capacity change from 0 to 764 [ 582.815715][ T9533] tmpfs: Unknown parameter 'e' [ 583.852807][ T6950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.990435][ T9530] rock: directory entry would overflow storage [ 583.999696][ T9530] rock: sig=0x4f50, size=4, remaining=3 [ 584.005400][ T9530] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 584.196393][ T5848] Bluetooth: hci4: command tx timeout [ 584.642873][ T9546] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 584.655616][ T9546] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 584.664068][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.2.969 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 584.674156][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 584.684247][ T9546] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 584.690172][ T9546] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 584.709813][ T9546] RSP: 0018:ffffc90005307958 EFLAGS: 00010206 [ 584.715914][ T9546] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 584.723903][ T9546] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880275f6390 [ 584.731893][ T9546] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 584.739885][ T9546] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff8880275f6380 [ 584.747881][ T9546] R13: ffff8880275f63a0 R14: 1ffff1100680db30 R15: ffff88803406d980 [ 584.755875][ T9546] FS: 00007f0d3d7f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 584.764828][ T9546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.771433][ T9546] CR2: 0000001b30416ff8 CR3: 000000007ca54000 CR4: 00000000003526f0 [ 584.779425][ T9546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 584.787415][ T9546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 584.795402][ T9546] Call Trace: [ 584.798703][ T9546] [ 584.801650][ T9546] ? __die_body+0x5f/0xb0 [ 584.806012][ T9546] ? die_addr+0xb0/0xe0 [ 584.810204][ T9546] ? exc_general_protection+0x3dd/0x5d0 [ 584.815907][ T9546] ? asm_exc_general_protection+0x26/0x30 [ 584.821673][ T9546] ? clone_private_mount+0x184/0x3e0 [ 584.827000][ T9546] ? clone_private_mount+0x83/0x3e0 [ 584.832228][ T9546] ? _raw_spin_unlock+0x3e/0x50 [ 584.837105][ T9546] ovl_fill_super+0xe4c/0x3560 [ 584.841902][ T9546] ? __pfx___schedule+0x10/0x10 [ 584.846778][ T9546] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.852793][ T9546] ? __pfx_ovl_fill_super+0x10/0x10 [ 584.858029][ T9546] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.864073][ T9546] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.870457][ T9546] ? __pfx_ovl_fill_super+0x10/0x10 [ 584.875700][ T9546] ? __pfx_ovl_fill_super+0x10/0x10 [ 584.881030][ T9546] ? shrinker_register+0x160/0x230 [ 584.886190][ T9546] ? __pfx_ovl_fill_super+0x10/0x10 [ 584.891438][ T9546] get_tree_nodev+0xb7/0x140 [ 584.896082][ T9546] vfs_get_tree+0x90/0x2b0 [ 584.900540][ T9546] do_new_mount+0x2be/0xb40 [ 584.905058][ T9546] ? __pfx_do_new_mount+0x10/0x10 [ 584.910098][ T9546] __se_sys_mount+0x2d6/0x3c0 [ 584.914871][ T9546] ? __pfx___se_sys_mount+0x10/0x10 [ 584.920078][ T9546] ? do_syscall_64+0x100/0x230 [ 584.924850][ T9546] ? __x64_sys_mount+0x20/0xc0 [ 584.929619][ T9546] do_syscall_64+0xf3/0x230 [ 584.934156][ T9546] ? clear_bhb_loop+0x35/0x90 [ 584.938843][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.944742][ T9546] RIP: 0033:0x7f0d3f98cde9 [ 584.949227][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.968834][ T9546] RSP: 002b:00007f0d3d7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.977268][ T9546] RAX: ffffffffffffffda RBX: 00007f0d3fba6160 RCX: 00007f0d3f98cde9 [ 584.985243][ T9546] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 584.993212][ T9546] RBP: 00007f0d3fa0e2a0 R08: 0000200000000180 R09: 0000000000000000 [ 585.001184][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.009152][ T9546] R13: 0000000000000000 R14: 00007f0d3fba6160 R15: 00007fffb5baaed8 [ 585.017132][ T9546] [ 585.020147][ T9546] Modules linked in: [ 585.025000][ T9546] ---[ end trace 0000000000000000 ]--- [ 585.031093][ T9546] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 585.037063][ T9546] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 585.056750][ T9546] RSP: 0018:ffffc90005307958 EFLAGS: 00010206 [ 585.062865][ T9546] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 585.070902][ T9546] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880275f6390 [ 585.079098][ T9546] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 585.087114][ T9546] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff8880275f6380 [ 585.095088][ T9546] R13: ffff8880275f63a0 R14: 1ffff1100680db30 R15: ffff88803406d980 [ 585.103290][ T9546] FS: 00007f0d3d7f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 585.112432][ T9546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.119961][ T9546] CR2: 0000001b30416ff8 CR3: 000000007ca54000 CR4: 00000000003526f0 [ 585.127976][ T9546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.135950][ T9546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.143975][ T9546] Kernel panic - not syncing: Fatal exception [ 585.150217][ T9546] Kernel Offset: disabled [ 585.154543][ T9546] Rebooting in 86400 seconds..