last executing test programs: 2m37.814639746s ago: executing program 4 (id=131): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m37.069323018s ago: executing program 4 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 2m36.543372051s ago: executing program 4 (id=137): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0x1}], 0x1) socket(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m35.909572546s ago: executing program 4 (id=141): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m34.683517632s ago: executing program 4 (id=144): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) 2m32.607434241s ago: executing program 4 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xee00) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.332867197s ago: executing program 32 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xee00) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.048220495s ago: executing program 3 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m14.635483375s ago: executing program 3 (id=197): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x5, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xdddd0000, 0x86, &(0x7f0000000580)=""/134}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}, {0x4000, 0x88, &(0x7f0000000b40)=""/136}, {0xf000, 0x12, &(0x7f0000000180)=""/18}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m14.179222493s ago: executing program 3 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000b2a7ddbdb45325aee75805b3bab9ef5ed69068d1ecc77ef29abc29933d69009f09a64c4aa9829e4b5a4e8f923a58be5e1461923130c494db22b241e519f62f428f5d8e75a338ba40a27d8356b96ebc05550cedaaea23b42b64bb5deba607ed49e75f952b956e1cd04cc0ad4315577e37419f139c387fe13750ffa1ad495ba4ee76d4ae812abae8dcf30403d8527dafdf"], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m13.78621995s ago: executing program 3 (id=201): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x96, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1001, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m12.919378695s ago: executing program 3 (id=205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) 2m11.57608852s ago: executing program 3 (id=207): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x1, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x40, 0x10000000}, 0x0, 0x0, 0x0, 0x0) ioperm(0x7f, 0x5, 0x84) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) dup(0xffffffffffffffff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000100)={0xfffffffffffffff8, 0xffff, 0x7, 0x9, 0x4, 0x3}) 2m9.386714882s ago: executing program 33 (id=207): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x1, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x40, 0x10000000}, 0x0, 0x0, 0x0, 0x0) ioperm(0x7f, 0x5, 0x84) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) dup(0xffffffffffffffff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000100)={0xfffffffffffffff8, 0xffff, 0x7, 0x9, 0x4, 0x3}) 2m1.123506068s ago: executing program 1 (id=230): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd0, 0x248c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff}) 2m0.920533603s ago: executing program 1 (id=231): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.140522243s ago: executing program 1 (id=237): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1m58.715382075s ago: executing program 1 (id=240): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000500)=ANY=[@ANYBLOB='nodecompose,decompose,umask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c2c747970653d85f2875e2c666f7263652c00875773ec7c58d23bc33992090100cc9d85094407db8c9fdc0929d15554dff964bfaf2765672b92d95eedea8c7288114a2c58b7e820938eded710775ad90e073efb9058fffeb9c7c91c7c8bf6acf9309370b49e101c79f8eec2e13385bf9efe93fd3fe313af5c956a91e4a1ba5975464f086d5e64823c3bce3d99b5a474463b3979f9772128c30d95"], 0x3, 0x64a, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m58.194087456s ago: executing program 1 (id=242): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6169c10b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) fdatasync(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.476172487s ago: executing program 1 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="0300", 0x2, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1m56.153163236s ago: executing program 34 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="0300", 0x2, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 7.268586224s ago: executing program 2 (id=592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x2b55ecdb}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007ae}}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) getuid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x8, 0x8000c6a) 6.79939042s ago: executing program 5 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x40d, 0x70ad28, 0x1000, {0x0, 0x0, 0x0, r2, 0x48020, 0x400c}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_MTU={0x8, 0x4, 0x380}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.869192165s ago: executing program 8 (id=595): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x5, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xdddd0000, 0x86, &(0x7f0000000580)=""/134}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}, {0x4000, 0x88, &(0x7f0000000b40)=""/136}, {0xf000, 0x12, &(0x7f0000000180)=""/18}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.818326773s ago: executing program 7 (id=596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 5.539370874s ago: executing program 7 (id=598): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002000), 0x101100, 0x0) lseek(r0, 0x52, 0x1) 5.512827945s ago: executing program 8 (id=600): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @local}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 5.315418373s ago: executing program 2 (id=602): bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 5.266358302s ago: executing program 5 (id=603): r0 = syz_open_dev$loop(&(0x7f0000001140), 0x100000001, 0x22382) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 5.24337795s ago: executing program 8 (id=604): syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80082) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0xfffffffffffffffe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) syz_io_uring_setup(0x3ef0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x4892) 5.179395301s ago: executing program 7 (id=605): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 4.860684396s ago: executing program 5 (id=607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x2000000000}, 0x0, 0x0, 0x0) 4.576734609s ago: executing program 6 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.743297177s ago: executing program 0 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 3.715312018s ago: executing program 8 (id=610): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 3.184304571s ago: executing program 5 (id=611): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) llistxattr(&(0x7f00000007c0)='./file1\x00', 0x0, 0x0) 3.136050825s ago: executing program 2 (id=612): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x5, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xdddd0000, 0x86, &(0x7f0000000580)=""/134}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}, {0x4000, 0x88, &(0x7f0000000b40)=""/136}, {0xf000, 0x12, &(0x7f0000000180)=""/18}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.007104612s ago: executing program 6 (id=613): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}]}}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x12, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], 0x0, 0x4, 0xa, &(0x7f0000000a00)=""/10, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x1, 0xb, 0x3}], 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.885645014s ago: executing program 8 (id=614): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x2b55ecdb}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007ae}}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) getuid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x8, 0x8000c6a) 2.855512581s ago: executing program 0 (id=615): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$session_to_parent(0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x20}}, 0x4000854) 2.798369612s ago: executing program 2 (id=616): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010801000000000800001800000008000300", @ANYRES32=r2], 0x4c}}, 0x800) 2.751467065s ago: executing program 7 (id=617): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents64(r0, 0x0, 0x43) 2.737322183s ago: executing program 5 (id=618): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1da, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x253, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005a00)={0x2020}, 0x2020) 2.612336308s ago: executing program 6 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0xf0, r1, 0x1, 0x0, 0x8002, {}, [@WGDEVICE_A_PEERS={0xa4, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4811}, 0x40000) 1.757295927s ago: executing program 0 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x38, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0x7, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048000) 1.63130415s ago: executing program 2 (id=621): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) chdir(&(0x7f0000000380)='./file0\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x14) syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[], 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 1.529713322s ago: executing program 6 (id=622): syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80082) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0xfffffffffffffffe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) syz_io_uring_setup(0x3ef0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x4892) 1.354753409s ago: executing program 0 (id=623): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.22340736s ago: executing program 7 (id=624): bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 1.215850884s ago: executing program 5 (id=625): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{}, "3750a1d4a27ac7c9", "d425c9f935a5e2ab1356918bc33672d1", "87a6f14f", "1c795c7b801516bb"}, 0x28) msgget(0x2, 0x600) io_setup(0x4, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 1.154971784s ago: executing program 8 (id=626): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.107304543s ago: executing program 6 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 443.741401ms ago: executing program 0 (id=628): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x5, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xdddd0000, 0x86, &(0x7f0000000580)=""/134}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}, {0x4000, 0x88, &(0x7f0000000b40)=""/136}, {0xf000, 0x12, &(0x7f0000000180)=""/18}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 369.922122ms ago: executing program 6 (id=629): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x5, 0x0, 0x0) 323.189006ms ago: executing program 7 (id=630): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$eJzs3b9Pa3UUAPBzS2mLDu3gZEi8iQ5OBFhdSgwkxE6aDuqgRCAxtDGBhMQfsTK5ujj6F5iYuPlPuPgfmLiavO0xkNyX2977Wnil0BcK78fns3D43nO+99zLLYShp1+u9o/20zg8++HfaDSSqLRjJc6TaEUlSj/FJe1fAgB4mZ1nWTzKRuapSyKisbi2AIAFmvvv/58LbwkAWLBPPv3so61OZ/vjNG3ETv/n027+n33+dXR86zC+jl4cxHo04yIie2oU72RZNqimuVa81x+cdvPK/hd/F/tv/R8xrN+IZrSGS5frdzvbG+nIRP0g7+ON4vztvH4zmvHWlPPvdrY3p9RHtxbvvzvR/1o045+v4pvoxf6wiXH9jxtp+mH26+PvP8/by+uTwWm3Pswby5bu+UcDAAAAAAAAAAAAAAAAAAAAAMArbK2YnVOP4fyefKmYv7N0kX+zHGmpdXk+z6g+KTe6Mh9okMVv5Xyd9TRNsyJxXF+Nt6tRfZirBgAAAAAAAAAAAAAAAAAAgBfLybffHe31egfHdxKU0wDKt/U/7z7tiZV3YnZyfXyuShHO2DmWypwkYmYb+UXc0W25KVi5ruff/5h3w8bNOcuz7s/dBOXTdbSXTL+H9ShXGuVD8tdkTi1uea7adYdWixZut09t6qHm3Ndee3MYDGbkRDLrdfHBf6O2i5Xk6ouoNryrU8uXi2Ci/MqzMdfz/OzvisS0DgAAAAAAAAAAAAAAAAAAWKjxm36nHDybWVrJ6gtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu1fjz/+cIBkXxLZJrcXzywJcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAa+BJAAAA//9YAl9K") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x5, 0x0, 0x0, 0x7fff0000}, {0x4, 0x2, 0x5, 0x8}, {0xffea, 0x6c, 0x8, 0x3}]}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 297.75115ms ago: executing program 2 (id=631): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}]}}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x12, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], 0x0, 0x4, 0xa, &(0x7f0000000a00)=""/10, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x1, 0xb, 0x3}], 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=632): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) fanotify_init(0x0, 0x800) r1 = socket$key(0xf, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): d promiscuous mode [ 108.678428][ T5836] team0: Port device team_slave_0 added [ 108.705875][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.749530][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.756661][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.783321][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.797716][ T5836] team0: Port device team_slave_1 added [ 108.872214][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.883443][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.910387][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.925384][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.938403][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.948616][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.955813][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.982131][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.020927][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.035081][ T5844] team0: Port device team_slave_0 added [ 109.046798][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.058921][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.066422][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.093557][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.145055][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.152020][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.178568][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.192269][ T5844] team0: Port device team_slave_1 added [ 109.236340][ T5837] team0: Port device team_slave_0 added [ 109.262577][ T5841] team0: Port device team_slave_0 added [ 109.272613][ T5841] team0: Port device team_slave_1 added [ 109.279529][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.287207][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.313183][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.374867][ T5837] team0: Port device team_slave_1 added [ 109.437467][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.444737][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.471469][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.523939][ T5839] hsr_slave_0: entered promiscuous mode [ 109.530653][ T5839] hsr_slave_1: entered promiscuous mode [ 109.559812][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.567011][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.593377][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.608520][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.615576][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.641929][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.654721][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.661715][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.688683][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.706833][ T5840] hsr_slave_0: entered promiscuous mode [ 109.713907][ T5840] hsr_slave_1: entered promiscuous mode [ 109.720201][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.728025][ T5840] Cannot create hsr debugfs directory [ 109.753490][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.760468][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.786561][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.867474][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.874751][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.901260][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.982580][ T5841] hsr_slave_0: entered promiscuous mode [ 109.990306][ T5841] hsr_slave_1: entered promiscuous mode [ 109.997544][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.005177][ T5841] Cannot create hsr debugfs directory [ 110.045534][ T5836] hsr_slave_0: entered promiscuous mode [ 110.052038][ T5836] hsr_slave_1: entered promiscuous mode [ 110.058665][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.063102][ T5146] Bluetooth: hci0: command tx timeout [ 110.066392][ T5850] Bluetooth: hci3: command tx timeout [ 110.072348][ T5847] Bluetooth: hci1: command tx timeout [ 110.077295][ T5836] Cannot create hsr debugfs directory [ 110.143795][ T5847] Bluetooth: hci2: command tx timeout [ 110.143814][ T5850] Bluetooth: hci5: command tx timeout [ 110.143836][ T5146] Bluetooth: hci4: command tx timeout [ 110.319064][ T5837] hsr_slave_0: entered promiscuous mode [ 110.325753][ T5837] hsr_slave_1: entered promiscuous mode [ 110.332034][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.341373][ T5837] Cannot create hsr debugfs directory [ 110.372224][ T5844] hsr_slave_0: entered promiscuous mode [ 110.383501][ T5844] hsr_slave_1: entered promiscuous mode [ 110.390596][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.398275][ T5844] Cannot create hsr debugfs directory [ 111.054878][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.079374][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.109637][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.142334][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.207502][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.219035][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.235439][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.248123][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.342195][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.357781][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.370072][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.410486][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.509605][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.526368][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.541052][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.557433][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.714966][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.728028][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.768941][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.807854][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.940452][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.966692][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.980670][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.017428][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.024868][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.054373][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.086598][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.100706][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.145826][ T5847] Bluetooth: hci3: command tx timeout [ 112.151295][ T5847] Bluetooth: hci1: command tx timeout [ 112.157321][ T5146] Bluetooth: hci0: command tx timeout [ 112.177228][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.184682][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.197850][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.205022][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.223131][ T5847] Bluetooth: hci2: command tx timeout [ 112.228597][ T5847] Bluetooth: hci4: command tx timeout [ 112.234778][ T5146] Bluetooth: hci5: command tx timeout [ 112.239551][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.281532][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.301848][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.309100][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.343766][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.350955][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.426710][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.452640][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.459808][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.513625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.520816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.546799][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.605649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.612867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.699998][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.707406][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.787180][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.015075][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.027887][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.177987][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.185222][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.225418][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.232622][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.285856][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.320916][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.420623][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.427849][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.442255][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.449492][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.535371][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.681514][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.710420][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.744569][ T5836] veth0_vlan: entered promiscuous mode [ 113.807185][ T5836] veth1_vlan: entered promiscuous mode [ 114.007612][ T5837] veth0_vlan: entered promiscuous mode [ 114.075348][ T5836] veth0_macvtap: entered promiscuous mode [ 114.107664][ T5840] veth0_vlan: entered promiscuous mode [ 114.172688][ T5837] veth1_vlan: entered promiscuous mode [ 114.225359][ T5847] Bluetooth: hci3: command tx timeout [ 114.230855][ T5847] Bluetooth: hci1: command tx timeout [ 114.240654][ T5146] Bluetooth: hci0: command tx timeout [ 114.263975][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.276440][ T5836] veth1_macvtap: entered promiscuous mode [ 114.298429][ T5840] veth1_vlan: entered promiscuous mode [ 114.307088][ T5146] Bluetooth: hci5: command tx timeout [ 114.307100][ T5850] Bluetooth: hci2: command tx timeout [ 114.318192][ T5847] Bluetooth: hci4: command tx timeout [ 114.397960][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.417785][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.455091][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.466639][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.476094][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.485923][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.494860][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.510041][ T5839] veth0_vlan: entered promiscuous mode [ 114.568365][ T5837] veth0_macvtap: entered promiscuous mode [ 114.599730][ T5839] veth1_vlan: entered promiscuous mode [ 114.630228][ T5837] veth1_macvtap: entered promiscuous mode [ 114.642310][ T5840] veth0_macvtap: entered promiscuous mode [ 114.657182][ T5841] veth0_vlan: entered promiscuous mode [ 114.699578][ T5840] veth1_macvtap: entered promiscuous mode [ 114.718247][ T5841] veth1_vlan: entered promiscuous mode [ 114.800041][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.811446][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.827620][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.917478][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.928838][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.941558][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.001405][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.009609][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.010508][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.037976][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.047976][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.058609][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.071658][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.088397][ T5841] veth0_macvtap: entered promiscuous mode [ 115.110764][ T5841] veth1_macvtap: entered promiscuous mode [ 115.121835][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.132586][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.143871][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.154440][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.168030][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.190025][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.199591][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.208433][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.219103][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.254203][ T5839] veth0_macvtap: entered promiscuous mode [ 115.265392][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.274528][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.283881][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.292623][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.318310][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.320643][ T5839] veth1_macvtap: entered promiscuous mode [ 115.332655][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.415905][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.431695][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.453956][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.464634][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.474570][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.485113][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.498082][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.525660][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.530932][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.537567][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.564410][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.575299][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.591566][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.602749][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.614714][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.629019][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.638148][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.647443][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.656283][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.714067][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.732642][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.742664][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.765205][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.792724][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.809465][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.819929][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.844866][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.859014][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.876962][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.892184][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.910459][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.929543][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.940145][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.951063][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.962615][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.973569][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.987556][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.078178][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.087366][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.097228][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.107632][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.175969][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.196805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.231725][ T5844] veth0_vlan: entered promiscuous mode [ 116.269177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.292987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.345073][ T5844] veth1_vlan: entered promiscuous mode [ 116.461681][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.493959][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.511085][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.533517][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.606790][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.622913][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.835313][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.853813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.988242][ T5844] veth0_macvtap: entered promiscuous mode [ 117.013240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.021538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.030524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.039129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.351157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.425649][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.623818][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.641142][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.671981][ T5844] veth1_macvtap: entered promiscuous mode [ 117.694343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.703471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.725534][ T5900] usb 1-1: config 0 has no interfaces? [ 117.775293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.796591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.876293][ T5900] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.916040][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.918758][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.951402][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.984386][ T5900] usb 1-1: Product: syz [ 117.988591][ T5900] usb 1-1: Manufacturer: syz [ 118.064219][ T5900] usb 1-1: SerialNumber: syz [ 118.107429][ T5900] usb 1-1: config 0 descriptor?? [ 118.199152][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.206823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 118.233951][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.271933][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.287738][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.303256][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.331126][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.402904][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.430152][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.447492][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.502898][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.530561][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.681547][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.745250][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.760960][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.790095][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.822898][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.860258][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.900339][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.919400][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.933492][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.944913][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.997260][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.042795][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.101599][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.208495][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.244284][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.136274][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.189908][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.556445][ T5903] usb 1-1: USB disconnect, device number 2 [ 120.656131][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.763309][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.583596][ T6012] Zero length message leads to an empty skb [ 123.043124][ T5845] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.237325][ T5845] usb 2-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 123.248616][ T5845] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.319213][ T5845] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.401627][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.605240][ T5845] usb 2-1: Product: syz [ 123.641645][ T5845] usb 2-1: Manufacturer: syz [ 123.706750][ T5845] usb 2-1: SerialNumber: syz [ 123.920244][ T5845] usb 2-1: config 0 descriptor?? [ 124.275278][ T9] usb 2-1: USB disconnect, device number 2 [ 125.062236][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 127.300859][ T6056] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 127.328552][ T6056] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 127.345253][ T6056] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.376076][ T6056] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.153377][ T10] libceph: connect (1)[c::]:6789 error -101 [ 128.176943][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 128.573183][ T6060] ceph: No mds server is up or the cluster is laggy [ 128.993327][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 129.090293][ T6065] vxcan1: entered promiscuous mode [ 129.113108][ T6065] vxcan1: entered allmulticast mode [ 129.819698][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 132.653102][ T969] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.788646][ T5828] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.044886][ T5828] usb 3-1: config 0 has no interfaces? [ 133.093330][ T5828] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.202932][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.211019][ T5828] usb 3-1: Product: syz [ 133.253053][ T969] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 133.271661][ T5828] usb 3-1: Manufacturer: syz [ 133.315217][ T969] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 133.358637][ T969] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.362995][ T5828] usb 3-1: SerialNumber: syz [ 133.405097][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.523935][ T5828] usb 3-1: config 0 descriptor?? [ 133.663541][ T6097] CUSE: info not properly terminated [ 134.399122][ T6116] netlink: 80 bytes leftover after parsing attributes in process `syz.1.53'. [ 136.853415][ T5899] usb 3-1: USB disconnect, device number 2 [ 137.483429][ T6137] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 137.932230][ T969] usb 4-1: string descriptor 0 read error: -71 [ 137.984213][ T969] usb 4-1: USB disconnect, device number 2 [ 139.923922][ T6158] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 140.413618][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 140.706409][ T10] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 140.763805][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.851755][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 140.869741][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.910584][ T10] usb 2-1: Product: syz [ 140.925204][ T10] usb 2-1: Manufacturer: syz [ 140.949946][ T10] usb 2-1: SerialNumber: syz [ 141.006421][ T10] usb 2-1: config 0 descriptor?? [ 141.240810][ T10] usb 2-1: USB disconnect, device number 3 [ 142.122465][ T6180] netlink: 80 bytes leftover after parsing attributes in process `syz.1.74'. [ 142.485698][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.492237][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.214025][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 143.605369][ T6196] ceph: No mds server is up or the cluster is laggy [ 143.881402][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 144.700513][ T6213] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 144.723282][ T6213] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 144.737329][ T6213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 144.753206][ T6213] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 145.392935][ T5828] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 145.581977][ T5828] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 145.592731][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.693951][ T5828] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 145.735221][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.826707][ T5828] usb 4-1: Product: syz [ 145.830931][ T5828] usb 4-1: Manufacturer: syz [ 145.898621][ T5828] usb 4-1: SerialNumber: syz [ 145.960896][ T5828] usb 4-1: config 0 descriptor?? [ 146.248294][ T5828] usb 4-1: USB disconnect, device number 3 [ 150.699131][ T6251] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 151.104594][ T6239] input: syz1 as /devices/virtual/input/input5 [ 151.532887][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.766353][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 151.786790][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 151.817710][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 151.832614][ T6260] veth1_vlan: entered allmulticast mode [ 151.851209][ T10] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 151.917638][ T10] usb 2-1: config 0 has no interface number 0 [ 151.948159][ T10] usb 2-1: config 0 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.014565][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 152.068035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.123308][ T10] usb 2-1: Product: syz [ 152.135769][ T10] usb 2-1: Manufacturer: syz [ 152.154385][ T10] usb 2-1: SerialNumber: syz [ 152.195495][ T10] usb 2-1: config 0 descriptor?? [ 152.236397][ T6269] loop4: detected capacity change from 0 to 1024 [ 152.295420][ T6269] hfsplus: unable to find HFS+ superblock [ 152.593547][ T10] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 152.609251][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 152.677714][ T5899] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.727600][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 152.868683][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 152.892053][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 152.917324][ T10] [drm] Initialized udl on minor 2 [ 152.952499][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.972583][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.015161][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 153.052694][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.112884][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.149577][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.173756][ T5845] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 153.178507][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.213953][ T10] usb 2-1: USB disconnect, device number 4 [ 154.044798][ T5845] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 154.086676][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'. [ 154.156442][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.178355][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.192024][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.203217][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.212018][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.240842][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.108'. [ 154.315122][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.357316][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.383002][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.407362][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.432953][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.453051][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.462895][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.481231][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.572954][ T5899] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 155.632944][ T5899] usb 4-1: can't read configurations, error -71 [ 156.559523][ T6308] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 156.847223][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 156.877342][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.943342][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 157.065241][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.132888][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.142688][ T5899] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 157.237799][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.314206][ T5899] usb 4-1: config 0 descriptor?? [ 157.787576][ T5899] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 157.893716][ T5899] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 157.932583][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.079048][ T5899] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 158.239120][ T10] usb 2-1: config 0 has no interfaces? [ 158.274752][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.295395][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.320696][ T10] usb 2-1: Product: syz [ 158.350872][ T10] usb 2-1: Manufacturer: syz [ 158.367474][ T10] usb 2-1: SerialNumber: syz [ 158.395271][ T10] usb 2-1: config 0 descriptor?? [ 158.556683][ T5899] usb 4-1: USB disconnect, device number 5 [ 158.875615][ T5899] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 158.958895][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 159.474258][ T969] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.653043][ T969] usb 6-1: Using ep0 maxpacket: 8 [ 159.674062][ T969] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 159.723035][ T969] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.771401][ T969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.852900][ T969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.892256][ T6326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.909067][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.918677][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.235599][ T969] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.290619][ T969] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.363724][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.533074][ T5903] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.784070][ T969] usb 6-1: GET_CAPABILITIES returned 0 [ 160.789854][ T969] usbtmc 6-1:16.0: can't read capabilities [ 160.806858][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.838907][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.936771][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.296525][ T969] usb 6-1: USB disconnect, device number 2 [ 161.542868][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.552000][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.659343][ T5903] usb 4-1: config 0 descriptor?? [ 162.128958][ T5903] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 162.228022][ T5903] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 162.484285][ T6362] loop4: detected capacity change from 0 to 256 [ 162.503853][ T6362] exfat: Bad value for 'fmask' [ 164.231282][ T5828] usb 2-1: USB disconnect, device number 5 [ 164.673196][ T5903] usb 4-1: USB disconnect, device number 6 [ 165.583500][ T5828] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 165.598708][ T6389] loop0: detected capacity change from 0 to 2048 [ 165.703076][ T6389] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 165.780865][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.813932][ T5828] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 165.842987][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.884424][ T5828] usb 6-1: Product: syz [ 165.888620][ T5828] usb 6-1: Manufacturer: syz [ 165.940812][ T5828] usb 6-1: SerialNumber: syz [ 165.989517][ T5828] usb 6-1: config 0 descriptor?? [ 166.263174][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 166.275933][ T5828] usb 6-1: USB disconnect, device number 3 [ 166.298929][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 166.588540][ T6406] loop4: detected capacity change from 0 to 512 [ 166.778293][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.897813][ T6406] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.022939][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.226133][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.281072][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.286123][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 3: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 167.334566][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.363399][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 12: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 167.403909][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.472908][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.554490][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 13: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 167.587368][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 14: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1, rec_len=0, size=2048 fake=0 [ 167.627008][ T5903] usb 4-1: config 0 descriptor?? [ 167.673826][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 15: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 167.814872][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 167.978959][ T5839] EXT4-fs error (device loop4): ext4_readdir:262: inode #2: block 17: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 168.080404][ T5839] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 168.124400][ T5903] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 168.163441][ T5903] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 168.178441][ T5839] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 168.219716][ T5839] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 64512 [ 168.268765][ T5839] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz-executor: Failed to acquire dquot type 0 [ 169.312347][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.495366][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.748738][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.906946][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.126587][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.224377][ T2147] usb 4-1: USB disconnect, device number 7 [ 170.687182][ T62] bridge_slave_1: left allmulticast mode [ 170.715628][ T62] bridge_slave_1: left promiscuous mode [ 170.739479][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.856907][ T62] bridge_slave_0: left allmulticast mode [ 170.875487][ T62] bridge_slave_0: left promiscuous mode [ 170.881388][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.616291][ T6469] netlink: 'syz.0.159': attribute type 4 has an invalid length. [ 173.746548][ T6004] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.964570][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.999109][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.027570][ T6004] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 174.054979][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.081296][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.093891][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.110293][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.121792][ T6004] usb 2-1: config 0 descriptor?? [ 174.136201][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.145227][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.348738][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.472905][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.486822][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.501120][ T62] bond0 (unregistering): Released all slaves [ 174.684605][ T6004] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 174.749635][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.787904][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.835560][ T6004] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 174.852953][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.906235][ T6004] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 174.953223][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.962390][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.060646][ T24] usb 6-1: config 0 descriptor?? [ 175.183535][ T6485] loop2: detected capacity change from 0 to 1024 [ 175.190796][ T6485] ======================================================= [ 175.190796][ T6485] WARNING: The mand mount option has been deprecated and [ 175.190796][ T6485] and is ignored by this kernel. Remove the mand [ 175.190796][ T6485] option from the mount to silence this warning. [ 175.190796][ T6485] ======================================================= [ 175.299275][ T30] audit: type=1326 audit(1743682623.527:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa71f8d169 code=0x7ffc0000 [ 175.408689][ T6485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.443286][ T6485] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.443787][ T30] audit: type=1326 audit(1743682623.557:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7faa71f8d169 code=0x7ffc0000 [ 175.477424][ T30] audit: type=1326 audit(1743682623.567:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa71f8d169 code=0x7ffc0000 [ 175.528802][ T6004] usb 2-1: USB disconnect, device number 6 [ 175.552332][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 175.629850][ T6004] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 175.668087][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 176.232995][ T5146] Bluetooth: hci2: command tx timeout [ 177.341206][ T6493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 177.462946][ T2147] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 177.657016][ T62] hsr_slave_0: left promiscuous mode [ 177.691658][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.763093][ T62] hsr_slave_1: left promiscuous mode [ 177.770551][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.822190][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.036480][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.072934][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.494924][ T5146] Bluetooth: hci2: command tx timeout [ 178.515413][ T24] usb 6-1: USB disconnect, device number 4 [ 178.671744][ T62] veth1_macvtap: left promiscuous mode [ 178.705271][ T62] veth0_macvtap: left promiscuous mode [ 178.741347][ T62] veth1_vlan: left promiscuous mode [ 178.763007][ T62] veth0_vlan: left promiscuous mode [ 178.868438][ T6540] netlink: 'syz.3.177': attribute type 4 has an invalid length. [ 180.547401][ T5146] Bluetooth: hci2: command tx timeout [ 181.979344][ T62] team0 (unregistering): Port device team_slave_1 removed [ 182.027773][ T62] team0 (unregistering): Port device team_slave_0 removed [ 182.315299][ T6555] loop1: detected capacity change from 0 to 512 [ 182.335324][ T6555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 182.393020][ T6555] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 182.623206][ T5847] Bluetooth: hci2: command tx timeout [ 182.993115][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 183.329814][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.695043][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.726614][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.176915][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.186695][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.227135][ T5898] usb 1-1: config 0 descriptor?? [ 184.256194][ T6576] ALSA: mixer_oss: invalid OSS volume 'TREBL' [ 184.783421][ T5898] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 184.839306][ T5898] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 184.854001][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 184.949961][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.190'. [ 185.806819][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.849123][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.881233][ T6475] bridge_slave_0: entered allmulticast mode [ 185.917340][ T6475] bridge_slave_0: entered promiscuous mode [ 185.974177][ T6594] 9pnet_fd: Insufficient options for proto=fd [ 185.978830][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.014232][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.051835][ T6475] bridge_slave_1: entered allmulticast mode [ 186.086540][ T6475] bridge_slave_1: entered promiscuous mode [ 186.278529][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.417808][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.675401][ T6475] team0: Port device team_slave_0 added [ 186.724627][ T5898] usb 1-1: USB disconnect, device number 3 [ 186.738278][ T6475] team0: Port device team_slave_1 added [ 187.070819][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.132990][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.279784][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.377296][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.408947][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.582494][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.937712][ T6475] hsr_slave_0: entered promiscuous mode [ 187.970424][ T6475] hsr_slave_1: entered promiscuous mode [ 188.442523][ T6628] loop0: detected capacity change from 0 to 1024 [ 188.507701][ T6630] loop3: detected capacity change from 0 to 256 [ 189.078488][ T5841] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 189.117386][ T5841] FAT-fs (loop3): Filesystem has been set read-only [ 189.143656][ T5841] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 189.358659][ T6475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.393546][ T6647] loop0: detected capacity change from 0 to 512 [ 189.485546][ T6475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.564708][ T6647] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 189.657268][ T6647] EXT4-fs (loop0): 1 truncate cleaned up [ 189.689552][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.747529][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 189.774037][ T2147] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.797699][ T6647] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.203: Logical block already allocated [ 190.139029][ T6637] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.309697][ T6647] EXT4-fs (loop0): Remounting filesystem read-only [ 190.321870][ T6654] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 190.346842][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.361974][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.388394][ T6475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.415681][ T2147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.472871][ T2147] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.480344][ T6475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.502257][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.544175][ T2147] usb 3-1: config 0 descriptor?? [ 190.569726][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.959447][ T2147] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 191.234228][ T2147] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 192.076188][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.184513][ T2147] usb 3-1: USB disconnect, device number 3 [ 192.311362][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.379101][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.386302][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.445187][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.452388][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.668176][ T6694] loop5: detected capacity change from 0 to 128 [ 193.804635][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.986983][ T6702] syz.5.216(6702): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 194.473020][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.481929][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.490498][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.504841][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.512693][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.661756][ T6720] loop1: detected capacity change from 0 to 512 [ 195.733497][ T6720] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 196.266476][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.289825][ T6475] veth0_vlan: entered promiscuous mode [ 196.354074][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 196.434410][ T6475] veth1_vlan: entered promiscuous mode [ 196.463254][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 196.503001][ T9] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 196.521484][ T9] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 196.555120][ T9] usb 1-1: config 0 has no interface number 0 [ 196.561259][ T9] usb 1-1: config 0 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.632900][ T5146] Bluetooth: hci4: command tx timeout [ 196.678561][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 197.517424][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.526762][ T9] usb 1-1: Product: syz [ 197.531389][ T9] usb 1-1: Manufacturer: syz [ 197.539636][ T9] usb 1-1: SerialNumber: syz [ 197.570858][ T9] usb 1-1: config 0 descriptor?? [ 197.736671][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.763339][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.772321][ T6712] bridge_slave_0: entered allmulticast mode [ 197.812683][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 197.850041][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 197.859054][ T6712] bridge_slave_0: entered promiscuous mode [ 197.884440][ T6475] veth0_macvtap: entered promiscuous mode [ 197.892359][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 197.919073][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.103160][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.110709][ T6712] bridge_slave_1: entered allmulticast mode [ 198.196784][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.203285][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.217 on minor 2 [ 198.221403][ T9] [drm] Initialized udl on minor 2 [ 198.221928][ T6712] bridge_slave_1: entered promiscuous mode [ 198.233176][ T6746] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 198.281805][ T9] udl 1-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 198.297071][ T6475] veth1_macvtap: entered promiscuous mode [ 198.317136][ T9] udl 1-1:0.217: [drm] Cannot find any crtc or sizes [ 198.325138][ T5845] udl 1-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 198.343616][ T5845] udl 1-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 198.376566][ T9] usb 1-1: USB disconnect, device number 4 [ 198.382592][ T5845] udl 1-1:0.217: [drm] Cannot find any crtc or sizes [ 198.388214][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.447972][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.639091][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.670944][ T5898] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.712574][ T5146] Bluetooth: hci4: command tx timeout [ 198.723107][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.740650][ T5898] usb 6-1: config 0 descriptor?? [ 198.789688][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.845603][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.164640][ T6712] team0: Port device team_slave_0 added [ 199.243151][ T5898] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 199.256276][ T6712] team0: Port device team_slave_1 added [ 199.293416][ T5898] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 199.343462][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.364950][ T6758] loop2: detected capacity change from 0 to 1024 [ 199.401384][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.460739][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.486597][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.562986][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.616627][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.695912][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.770106][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.851439][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.915997][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.948227][ T6771] loop2: detected capacity change from 0 to 1024 [ 199.978807][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.992392][ T6771] EXT4-fs: Ignoring removed bh option [ 200.184478][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.517301][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.545684][ T6771] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4114: comm syz.2.228: Allocating blocks 481-513 which overlap fs metadata [ 200.580136][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.600643][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.614277][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.636289][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.668993][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.695137][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.714766][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.729837][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.745390][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.765676][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.783337][ T5146] Bluetooth: hci4: command tx timeout [ 200.791837][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.867213][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.973348][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.016917][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.043883][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.101806][ T6771] EXT4-fs (loop2): pa ffff888061319000: logic 131584, phys. 465, len 3 [ 201.110679][ T6771] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5365: group 0, free 0, pa_free 2 [ 201.171191][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.199621][ T6475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.230169][ T6475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.245654][ T6475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.246462][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.282348][ T6475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.296280][ T969] usb 6-1: USB disconnect, device number 5 [ 202.705472][ T6712] hsr_slave_0: entered promiscuous mode [ 202.713291][ T6712] hsr_slave_1: entered promiscuous mode [ 202.719796][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.727938][ T6712] Cannot create hsr debugfs directory [ 202.863317][ T5146] Bluetooth: hci4: command tx timeout [ 203.093195][ T6807] loop1: detected capacity change from 0 to 128 [ 203.119918][ T6807] vfat: Bad value for 'gid' [ 203.147322][ T6807] vfat: Bad value for 'gid' [ 203.602532][ T6816] loop1: detected capacity change from 0 to 1024 [ 203.711238][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.741087][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.833292][ T5840] hfsplus: bad catalog entry type [ 203.871003][ T6820] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 203.917417][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.926150][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.209153][ T6825] loop5: detected capacity change from 0 to 1024 [ 204.526390][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.584477][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.017998][ T6712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.088806][ T6712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.228192][ T6712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.332920][ T6712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.928018][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.036068][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.104872][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.112041][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.216786][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.224005][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.832660][ T6868] loop2: detected capacity change from 0 to 256 [ 206.930013][ T6868] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.982940][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.043048][ T6868] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 207.159331][ T6868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 207.204625][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 207.232046][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 207.271258][ T9] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 207.291326][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.316462][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.342915][ T9] usb 7-1: Product: syz [ 207.352935][ T9] usb 7-1: Manufacturer: syz [ 207.363079][ T9] usb 7-1: SerialNumber: syz [ 207.389539][ T9] usb 7-1: config 0 descriptor?? [ 207.412174][ T6863] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 207.430418][ T6863] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 207.675048][ T6863] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 207.685318][ T6863] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.653860][ T9] Error reading MAC address [ 208.671821][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.712364][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.730267][ T9] usb 7-1: USB disconnect, device number 2 [ 208.737775][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.754690][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.766410][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.584391][ T6712] veth0_vlan: entered promiscuous mode [ 210.641707][ T6712] veth1_vlan: entered promiscuous mode [ 210.888692][ T5847] Bluetooth: hci3: command tx timeout [ 212.437888][ T6927] loop6: detected capacity change from 0 to 1024 [ 212.756681][ T6712] veth0_macvtap: entered promiscuous mode [ 212.815739][ T6882] chnl_net:caif_netlink_parms(): no params data found [ 212.910449][ T6712] veth1_macvtap: entered promiscuous mode [ 212.950350][ T5847] Bluetooth: hci3: command tx timeout [ 213.712262][ T6950] netlink: 'syz.5.271': attribute type 10 has an invalid length. [ 213.777922][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.866752][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.917000][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.947929][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.000853][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.061775][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.102241][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.152892][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.182903][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.195301][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.205597][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.216407][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.229587][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.286408][ T6950] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 214.314171][ T6950] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 214.370481][ T6950] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 214.484571][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.535708][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.548998][ T6966] loop0: detected capacity change from 0 to 512 [ 214.563194][ T6966] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.583033][ T6966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.599272][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.613115][ T5845] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.635414][ T6966] EXT4-fs (loop0): 1 truncate cleaned up [ 214.642925][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.664738][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.688585][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.721413][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.754132][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.771422][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.781963][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.793707][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.804039][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.817011][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.827552][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.830485][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.849404][ T5845] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.867079][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.898999][ T5845] usb 3-1: SerialNumber: syz [ 214.902295][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.031386][ T5847] Bluetooth: hci3: command tx timeout [ 215.106771][ T6966] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 215.130043][ T6712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.158130][ T6712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.166820][ T6980] loop5: detected capacity change from 0 to 16 [ 215.176828][ T6712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.202873][ T6712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.206796][ T6980] erofs (device loop5): mounted with root inode @ nid 36. [ 215.233805][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.240208][ T6980] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 215.240950][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.251378][ T6980] erofs (device loop5): invalid de[0].nameoff 0 @ nid 36 [ 215.303845][ T6882] bridge_slave_0: entered allmulticast mode [ 215.346035][ T6882] bridge_slave_0: entered promiscuous mode [ 215.385555][ T6966] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 215.415079][ T5845] usb 3-1: 0:2 : does not exist [ 215.439530][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.464648][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.471920][ T6882] bridge_slave_1: entered allmulticast mode [ 215.497348][ T6882] bridge_slave_1: entered promiscuous mode [ 215.517048][ T5845] usb 3-1: USB disconnect, device number 4 [ 215.567077][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.737164][ T6987] loop5: detected capacity change from 0 to 4096 [ 215.816185][ T6987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.820693][ T6991] loop0: detected capacity change from 0 to 256 [ 215.856124][ T6991] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.869841][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.890276][ T6991] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 215.927423][ T30] audit: type=1800 audit(1743682664.157:5): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.277" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 215.989106][ T6991] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 216.019405][ T30] audit: type=1800 audit(1743682664.157:6): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.277" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 216.058892][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.117345][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.181870][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.229117][ T6991] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 216.248339][ T6991] exFAT-fs (loop0): Filesystem has been set read-only [ 216.282585][ T6991] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 216.293532][ T6991] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 216.446460][ T6882] team0: Port device team_slave_0 added [ 216.550711][ T6882] team0: Port device team_slave_1 added [ 216.968829][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.976153][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.010573][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.086006][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.110197][ T5847] Bluetooth: hci3: command tx timeout [ 217.159562][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.194843][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.456215][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.494741][ T7019] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 217.553454][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.721248][ T7019] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 217.838740][ T7019] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 217.873533][ T7019] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 218.073267][ T969] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.240916][ T969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.253307][ T969] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.334825][ T969] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.336291][ T6882] hsr_slave_0: entered promiscuous mode [ 218.361149][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.412882][ T969] usb 6-1: SerialNumber: syz [ 218.413479][ T6882] hsr_slave_1: entered promiscuous mode [ 218.464592][ T6882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.492505][ T6882] Cannot create hsr debugfs directory [ 218.577962][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.594620][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.679098][ T7033] loop2: detected capacity change from 0 to 256 [ 218.696368][ T7033] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 218.773099][ T969] usb 6-1: 0:2 : does not exist [ 218.932967][ T969] usb 6-1: USB disconnect, device number 6 [ 219.214097][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.700628][ T7043] loop5: detected capacity change from 0 to 512 [ 219.874081][ T7043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.231577][ T7043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.359819][ T7043] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.586477][ T6882] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 220.770070][ T6882] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 220.808241][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.862221][ T7065] warning: `syz.0.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.927906][ T6882] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 220.990737][ T6882] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 221.650459][ T7082] capability: warning: `syz.0.306' uses deprecated v2 capabilities in a way that may be insecure [ 221.770881][ T7084] loop2: detected capacity change from 0 to 512 [ 221.790516][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.878898][ T7084] EXT4-fs error (device loop2): ext4_iget_extra_inode:4691: inode #15: comm syz.2.305: corrupted in-inode xattr: invalid ea_ino [ 221.903808][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.914130][ T7084] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.305: couldn't read orphan inode 15 (err -117) [ 221.927960][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.935146][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.025505][ T7084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.028286][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.045242][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.330715][ T7084] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.305: deleted inode referenced: 15 [ 223.180301][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.312'. [ 223.687011][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.865492][ T7112] bond0: (slave bond_slave_0): Releasing backup interface [ 225.518154][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.558467][ T7139] loop0: detected capacity change from 0 to 4096 [ 226.117200][ T7139] EXT4-fs: Ignoring removed orlov option [ 226.157655][ T7139] EXT4-fs (loop0): Test dummy encryption mode enabled [ 226.270007][ T7139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.658782][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.792968][ T969] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 226.978792][ T969] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 227.047195][ T969] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.149448][ T969] usb 8-1: config 0 has no interface number 0 [ 227.235561][ T969] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 227.299971][ T969] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.351753][ T6882] veth0_vlan: entered promiscuous mode [ 227.432895][ T969] usb 8-1: config 0 interface 52 has no altsetting 0 [ 227.485272][ T6882] veth1_vlan: entered promiscuous mode [ 227.492260][ T969] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 227.527014][ T969] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 227.556289][ T969] usb 8-1: Product: syz [ 227.560509][ T969] usb 8-1: SerialNumber: syz [ 227.604448][ T969] usb 8-1: config 0 descriptor?? [ 227.647562][ T7187] loop2: detected capacity change from 0 to 1024 [ 227.657026][ T6882] veth0_macvtap: entered promiscuous mode [ 227.695572][ T6882] veth1_macvtap: entered promiscuous mode [ 227.791856][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.825748][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.889712][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.924058][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.959716][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.975780][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.001093][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.020437][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.031644][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.052957][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.070384][ T9] usb 8-1: USB disconnect, device number 2 [ 228.098081][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.125521][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.141158][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.191120][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.222581][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.319531][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.400133][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.438617][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.467453][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.505263][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.566162][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.607324][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.639100][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.670137][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.708860][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.747224][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.786672][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.837126][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.881361][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.927118][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.091775][ T6882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.126825][ T6882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.183576][ T6882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.192322][ T6882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.365620][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.391279][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.340885][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 232.346998][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 232.353193][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 232.994775][ T7252] netlink: 'syz.0.346': attribute type 10 has an invalid length. [ 233.089577][ T6004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 233.101355][ T7252] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 233.194136][ T7252] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.276361][ T7252] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 233.305395][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 233.317444][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.422743][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.461720][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.469694][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.640206][ T6004] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 233.726562][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.824734][ T6004] usb 3-1: config 0 descriptor?? [ 233.881252][ T6004] usb 3-1: can't set config #0, error -71 [ 233.938169][ T6004] usb 3-1: USB disconnect, device number 5 [ 234.406149][ T7271] loop8: detected capacity change from 0 to 1024 [ 234.543545][ T7271] hfsplus: keylen 65060 too large [ 234.556250][ T7271] hfsplus: xattr searching failed [ 239.103507][ T6004] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 239.323069][ T6004] usb 8-1: device descriptor read/64, error -71 [ 239.573041][ T6004] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 239.759896][ T6004] usb 8-1: device descriptor read/64, error -71 [ 239.913938][ T6004] usb usb8-port1: attempt power cycle [ 241.099128][ T6004] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 241.229635][ T6004] usb 8-1: device descriptor read/8, error -71 [ 241.553804][ T6004] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 241.838283][ T6004] usb 8-1: device descriptor read/8, error -71 [ 241.982965][ T6004] usb usb8-port1: unable to enumerate USB device [ 242.090282][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.5.374'. [ 242.602171][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.375'. [ 242.873199][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.168449][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.293126][ T5898] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 247.512836][ T5898] usb 8-1: Using ep0 maxpacket: 8 [ 247.723602][ T5898] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 247.756172][ T5898] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.825296][ T5898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.870119][ T5898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.909216][ T5898] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.969254][ T5898] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.990123][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.186754][ T6004] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 248.230303][ T5898] usb 8-1: GET_CAPABILITIES returned 0 [ 248.246577][ T5898] usbtmc 8-1:16.0: can't read capabilities [ 248.602288][ T5903] usb 8-1: USB disconnect, device number 7 [ 248.645352][ T6004] usb 9-1: config 0 has an invalid interface number: 4 but max is 0 [ 248.848097][ T6004] usb 9-1: config 0 has no interface number 0 [ 248.963289][ T6004] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 249.013036][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.132444][ T6004] usb 9-1: config 0 descriptor?? [ 249.197953][ T6004] ums-realtek 9-1:0.4: USB Mass Storage device detected [ 249.689115][ T6004] usb 9-1: USB disconnect, device number 2 [ 251.579864][ T5903] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 251.846879][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 251.901543][ T5903] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 251.931483][ T7478] loop2: detected capacity change from 0 to 1024 [ 251.971430][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.111762][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.128512][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.224389][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.266961][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.342850][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.450685][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.605654][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.711802][ T5903] usb 1-1: GET_CAPABILITIES returned 0 [ 252.735895][ T5903] usbtmc 1-1:16.0: can't read capabilities [ 252.777674][ T7495] netlink: 68 bytes leftover after parsing attributes in process `syz.7.404'. [ 253.211901][ T5903] usb 1-1: USB disconnect, device number 5 [ 254.846549][ T7508] loop2: detected capacity change from 0 to 1024 [ 255.595894][ T7519] loop8: detected capacity change from 0 to 512 [ 255.709751][ T7519] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.775069][ T7519] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 255.837982][ T7519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 255.892968][ T7519] System zones: 0-2, 18-18, 34-34 [ 255.954346][ T7519] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 257.073097][ T7519] EXT4-fs (loop8): 1 truncate cleaned up [ 257.218358][ T7519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.418893][ T7536] loop7: detected capacity change from 0 to 512 [ 257.577726][ T7536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.732114][ T7542] loop0: detected capacity change from 0 to 2048 [ 257.821117][ T30] audit: type=1800 audit(1743682706.047:7): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.415" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 257.897826][ T7542] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.104389][ T30] audit: type=1800 audit(1743682706.337:8): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.410" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 258.152864][ T5845] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 258.161195][ T6712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.223791][ T30] audit: type=1800 audit(1743682706.337:9): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.410" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 258.394091][ T30] audit: type=1800 audit(1743682706.387:10): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.410" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 258.424836][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 258.503891][ T5845] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 258.512113][ T5845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.582857][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.592648][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.013712][ T5845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.102086][ T6882] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.110594][ T5845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.162808][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.566130][ T5845] usb 3-1: GET_CAPABILITIES returned 0 [ 259.593529][ T5845] usbtmc 3-1:16.0: can't read capabilities [ 260.052099][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 260.253097][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 260.271832][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 260.309440][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.372988][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.420302][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.498282][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.742935][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.755980][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.781245][ T9] usb 3-1: USB disconnect, device number 6 [ 260.978324][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 260.984014][ T24] usbtmc 9-1:16.0: can't read capabilities [ 261.300226][ T24] usb 9-1: USB disconnect, device number 3 [ 264.333315][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 264.515058][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 264.549722][ T5903] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 264.583828][ T5903] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 264.616863][ T5903] usb 1-1: config 0 has no interface number 0 [ 264.635577][ T5903] usb 1-1: config 0 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.702450][ T30] audit: type=1326 audit(1743682712.937:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.8.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdff8d169 code=0x7fc00000 [ 264.765612][ T5903] usb 1-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 264.795144][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.815586][ T5903] usb 1-1: Product: syz [ 264.819785][ T5903] usb 1-1: Manufacturer: syz [ 264.852935][ T5903] usb 1-1: SerialNumber: syz [ 264.880362][ T5903] usb 1-1: config 0 descriptor?? [ 265.135137][ T7622] loop7: detected capacity change from 0 to 1024 [ 265.157083][ T5903] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 265.187764][ T5903] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 265.201440][ T7622] hfsplus: Bad value for 'session' [ 265.357107][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.363524][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.459462][ T5903] [drm:udl_init] *ERROR* Selecting channel failed [ 265.509766][ T5903] [drm] Initialized udl 0.0.1 for 1-1:0.217 on minor 2 [ 265.573560][ T5903] [drm] Initialized udl on minor 2 [ 266.199272][ T5903] udl 1-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 266.458529][ T5903] udl 1-1:0.217: [drm] Cannot find any crtc or sizes [ 266.524296][ T969] udl 1-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 266.649357][ T5903] usb 1-1: USB disconnect, device number 6 [ 266.673024][ T969] udl 1-1:0.217: [drm] Cannot find any crtc or sizes [ 267.001293][ T7643] loop7: detected capacity change from 0 to 1024 [ 267.182059][ T7643] EXT4-fs: Ignoring removed bh option [ 268.308499][ T7643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.578755][ T7657] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4114: comm syz.7.436: Allocating blocks 481-513 which overlap fs metadata [ 268.966375][ T7662] loop0: detected capacity change from 0 to 128 [ 269.819565][ T7643] EXT4-fs (loop7): pa ffff88807d684910: logic 131584, phys. 465, len 3 [ 269.828368][ T7643] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5365: group 0, free 0, pa_free 2 [ 270.874477][ T6712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.358409][ T7679] loop0: detected capacity change from 0 to 512 [ 271.380884][ T7678] netlink: 'syz.7.445': attribute type 4 has an invalid length. [ 271.441926][ T7679] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 271.959747][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.493285][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 273.803765][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 273.823717][ T969] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 273.858562][ T969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.877263][ T969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.899872][ T969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.912432][ T969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.426947][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 275.817243][ T969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.834200][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.854933][ T969] usb 1-1: can't set config #16, error -71 [ 275.862643][ T969] usb 1-1: USB disconnect, device number 7 [ 276.434397][ T7729] netlink: 'syz.2.463': attribute type 4 has an invalid length. [ 277.970916][ T7747] loop0: detected capacity change from 0 to 1024 [ 277.994221][ T7747] hfsplus: Unknown parameter 'crF…`@bcOêˆÿ3`yY:eator' [ 280.435349][ T7747] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 280.448874][ T7747] Error validating options; rc = [-22] [ 280.695334][ T7758] loop2: detected capacity change from 0 to 256 [ 281.632932][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 281.891163][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.957676][ T5903] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.002933][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.063131][ T5903] usb 6-1: Product: syz [ 282.067345][ T5903] usb 6-1: Manufacturer: syz [ 282.111019][ T5903] usb 6-1: SerialNumber: syz [ 282.996619][ T5903] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 283.011023][ T5903] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 283.062534][ T5903] cdc_ncm 6-1:1.0: bind() failure [ 283.072818][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 283.104069][ T5903] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 283.153029][ T5903] cdc_ncm 6-1:1.1: bind() failure [ 283.162241][ T5898] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 283.184342][ T5903] usb 6-1: USB disconnect, device number 7 [ 283.319863][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.344383][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.355171][ T5898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.373068][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.383886][ T5898] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.394365][ T7778] netlink: 'syz.6.480': attribute type 4 has an invalid length. [ 283.409045][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.416944][ T5898] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.452853][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.522383][ T5898] usb 9-1: SerialNumber: syz [ 283.730903][ T9] usb 3-1: config 0 descriptor?? [ 284.326850][ T5898] usb 9-1: 0:2 : does not exist [ 284.553022][ T5898] usb 9-1: USB disconnect, device number 4 [ 284.852853][ T2147] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 284.917612][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.034130][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 285.046523][ T2147] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 285.355037][ T2147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.367189][ T2147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.377408][ T2147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.388352][ T2147] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.401759][ T2147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.411153][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.433180][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 286.463438][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 286.519878][ T5845] usb 3-1: USB disconnect, device number 7 [ 286.533322][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 286.612908][ T2147] usb 1-1: GET_CAPABILITIES returned 0 [ 286.618473][ T2147] usbtmc 1-1:16.0: can't read capabilities [ 286.635824][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.421665][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.450377][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 287.461920][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 287.474423][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 287.484227][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.546173][ T9] usb 8-1: config 0 descriptor?? [ 287.552560][ T7804] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 287.579912][ T5845] usb 1-1: USB disconnect, device number 8 [ 287.848080][ T7831] netlink: 'syz.8.493': attribute type 4 has an invalid length. [ 287.861045][ T9] usb 8-1: USB disconnect, device number 8 [ 287.861772][ T5146] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 288.471001][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 292.562897][ T6004] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 292.787572][ T6004] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.818333][ T7870] loop8: detected capacity change from 0 to 512 [ 292.843149][ T6004] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 292.928369][ T7870] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.932864][ T6004] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.018227][ T7872] netlink: 'syz.7.507': attribute type 4 has an invalid length. [ 293.032894][ T7870] EXT4-fs (loop8): blocks per group (64) and clusters per group (32768) inconsistent [ 293.033144][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.134004][ T6004] usb 1-1: config 0 descriptor?? [ 293.165670][ T6004] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 294.265150][ T7891] loop2: detected capacity change from 0 to 1024 [ 294.272057][ T7892] loop7: detected capacity change from 0 to 512 [ 294.293582][ T7892] EXT4-fs: Ignoring removed oldalloc option [ 294.331632][ T7892] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 294.382043][ T7892] EXT4-fs (loop7): 1 truncate cleaned up [ 294.404769][ T7892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.471749][ T7894] loop8: detected capacity change from 0 to 1764 [ 294.551490][ T6712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.080938][ T7909] netlink: 44 bytes leftover after parsing attributes in process `syz.7.520'. [ 295.445069][ T9] usb 1-1: USB disconnect, device number 9 [ 295.538348][ T7914] netlink: 'syz.7.522': attribute type 4 has an invalid length. [ 295.990136][ T7925] loop2: detected capacity change from 0 to 512 [ 296.073526][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.090046][ T7925] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.726164][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.143298][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 300.077790][ T7960] loop2: detected capacity change from 0 to 1024 [ 300.916693][ T7960] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.954285][ T7960] EXT4-fs error (device loop2): ext4_map_blocks:708: inode #3: block 2: comm syz.2.533: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.971362][ T7960] Quota error (device loop2): write_blk: dquota write failed [ 300.978850][ T7960] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 300.988263][ T7960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 301.001253][ T7960] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.533: Failed to acquire dquot type 0 [ 301.056548][ T7960] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.533: lblock 2 mapped to illegal pblock 2 (length 1) [ 301.073037][ T7960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 301.083083][ T7960] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.533: Failed to acquire dquot type 0 [ 301.130115][ T7960] EXT4-fs error (device loop2): ext4_free_blocks:6588: comm syz.2.533: Freeing blocks not in datazone - block = 0, count = 4096 [ 301.199190][ T7960] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.533: lblock 2 mapped to illegal pblock 2 (length 1) [ 301.225083][ T7960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 301.235142][ T7960] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.533: Failed to acquire dquot type 0 [ 301.249414][ T7960] EXT4-fs (loop2): 1 orphan inode deleted [ 301.256992][ T7960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.639181][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.036631][ T7971] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 303.782915][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 304.746393][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 304.774110][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 304.793272][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.873255][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.914828][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.957797][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.048861][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.084668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.403008][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 305.423172][ T10] usbtmc 1-1:16.0: can't read capabilities [ 305.513499][ T5903] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 305.666823][ T8008] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 305.672000][ T8009] loop7: detected capacity change from 0 to 16 [ 305.697955][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.735464][ T8008] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 305.773872][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.818398][ T5898] usb 1-1: USB disconnect, device number 10 [ 305.822924][ T5903] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.892957][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.948943][ T5903] usb 9-1: config 0 descriptor?? [ 305.972262][ T8015] loop5: detected capacity change from 0 to 1024 [ 306.022284][ T8015] EXT4-fs: Ignoring removed bh option [ 306.092408][ T8015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.094300][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.7.555'. [ 306.127388][ T8015] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4114: comm syz.5.554: Allocating blocks 481-513 which overlap fs metadata [ 306.237513][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.397797][ T5903] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 306.481831][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.000B/input/input7 [ 306.813890][ T5903] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 306.847706][ T5903] usb 9-1: USB disconnect, device number 5 [ 308.616068][ T8049] loop8: detected capacity change from 0 to 512 [ 309.635539][ T8049] EXT4-fs: Ignoring removed orlov option [ 309.692045][ T8049] EXT4-fs error (device loop8): ext4_orphan_get:1390: inode #15: comm syz.8.564: casefold flag without casefold feature [ 310.014672][ T8049] EXT4-fs (loop8): Remounting filesystem read-only [ 310.079356][ T8049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.258135][ T8063] netlink: 'syz.7.568': attribute type 4 has an invalid length. [ 311.309203][ T8063] netlink: 'syz.7.568': attribute type 4 has an invalid length. [ 311.406176][ T6882] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.955215][ T8075] loop8: detected capacity change from 0 to 1024 [ 311.999377][ T8075] EXT4-fs: Ignoring removed bh option [ 312.068471][ T8075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.676316][ T5903] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 312.705555][ T8075] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4114: comm syz.8.571: Allocating blocks 481-513 which overlap fs metadata [ 312.892893][ T5903] usb 8-1: Using ep0 maxpacket: 8 [ 312.957666][ T5903] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 313.010432][ T5903] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.050452][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.077059][ T6882] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.099546][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.153150][ T5903] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.218278][ T5903] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.239683][ T8099] loop5: detected capacity change from 0 to 1024 [ 313.247850][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.258665][ T8100] loop0: detected capacity change from 0 to 1024 [ 313.272694][ T8099] ext4: Bad value for 'barrier' [ 313.321289][ T8100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.488847][ T30] audit: type=1800 audit(1743682761.727:12): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.582" name="file1" dev="loop0" ino=839 res=0 errno=0 [ 313.556221][ T5903] usb 8-1: GET_CAPABILITIES returned 0 [ 313.561778][ T5903] usbtmc 8-1:16.0: can't read capabilities [ 313.830233][ T8110] netlink: 'syz.6.586': attribute type 4 has an invalid length. [ 313.875008][ T5898] usb 8-1: USB disconnect, device number 9 [ 313.901695][ T8110] netlink: 'syz.6.586': attribute type 4 has an invalid length. [ 314.960419][ T8125] loop2: detected capacity change from 0 to 1024 [ 314.971368][ T8125] EXT4-fs: Ignoring removed bh option [ 316.134175][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.193883][ T8125] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4114: comm syz.2.592: Allocating blocks 481-513 which overlap fs metadata [ 316.370368][ T8135] bridge_slave_0: left allmulticast mode [ 316.395651][ T8135] bridge_slave_0: left promiscuous mode [ 316.415100][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.497908][ T8135] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 316.749446][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.160644][ T8158] loop7: detected capacity change from 0 to 512 [ 317.434119][ T8158] EXT4-fs: Ignoring removed oldalloc option [ 317.870626][ T8158] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 318.348000][ T8158] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2847: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 318.497235][ T8158] EXT4-fs (loop7): 1 truncate cleaned up [ 318.590944][ T8158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.629510][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 319.373936][ T6712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.670838][ T8188] netlink: 48 bytes leftover after parsing attributes in process `syz.2.616'. [ 319.909213][ T8187] loop8: detected capacity change from 0 to 1024 [ 320.234727][ T8187] EXT4-fs: Ignoring removed bh option [ 320.246582][ T8192] loop5: detected capacity change from 0 to 16 [ 320.298400][ T8192] erofs (device loop5): mounted with root inode @ nid 36. [ 320.380510][ T8187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.421052][ T8198] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.449464][ T8192] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 320.459184][ T8198] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 320.513291][ T8198] bridge_slave_0: default FDB implementation only supports local addresses [ 320.519615][ T5850] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192] [ 320.532224][ T8192] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192] [ 320.555700][ T8192] erofs (device loop5): read error -117 @ 0 of nid 89 [ 320.596038][ T8187] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4114: comm syz.8.614: Allocating blocks 481-513 which overlap fs metadata [ 320.643487][ T30] audit: type=1800 audit(1743682768.887:13): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 320.760049][ T8204] loop2: detected capacity change from 0 to 2048 [ 320.941199][ T6882] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.953064][ T8204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.517312][ T8213] loop5: detected capacity change from 0 to 2048 [ 321.639650][ T8213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.847811][ T8221] loop7: detected capacity change from 0 to 256 [ 322.024692][ T2147] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 322.330588][ T2147] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 322.353682][ T2147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.371565][ T2147] usb 9-1: config 0 descriptor?? [ 322.446904][ T8225] ------------[ cut here ]------------ [ 322.452630][ T8225] WARNING: CPU: 1 PID: 8225 at fs/udf/inode.c:2080 __udf_add_aext+0x6b3/0x820 [ 322.462334][ T8225] Modules linked in: [ 322.466874][ T8225] CPU: 1 UID: 0 PID: 8225 Comm: syz.5.625 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 322.478501][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.488732][ T8225] RIP: 0010:__udf_add_aext+0x6b3/0x820 [ 322.498064][ T8225] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 70 01 00 00 49 8b 7c 24 28 be 18 00 00 00 e8 b8 be 02 00 e9 f0 fd ff ff e8 4e b5 81 fe 90 <0f> 0b 90 e9 fb fa ff ff e8 40 b5 81 fe 90 0f 0b 90 e9 5c fb ff ff [ 322.517836][ T8225] RSP: 0018:ffffc90015636cd0 EFLAGS: 00010246 [ 322.524045][ T8225] RAX: 0000000000080000 RBX: ffffc90015637088 RCX: ffffc9000e5da000 [ 322.532064][ T8225] RDX: 0000000000080000 RSI: ffffffff83398a62 RDI: 0000000000000006 [ 322.540418][ T8225] RBP: ffff888056550e18 R08: 0000000000000006 R09: 0000000000000004 [ 322.548591][ T8225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 322.556686][ T8225] R13: 0000000000000010 R14: 0000000000000018 R15: ffffc90015637090 [ 322.564791][ T8225] FS: 00007fede63e46c0(0000) GS:ffff888124abf000(0000) knlGS:0000000000000000 [ 322.573860][ T8225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.580506][ T8225] CR2: 00007f35f4c4aea2 CR3: 000000004bc7a000 CR4: 0000000000350ef0 [ 322.588633][ T8225] Call Trace: [ 322.591944][ T8225] [ 322.595016][ T8225] udf_add_aext+0x23a/0x2e0 [ 322.601855][ T8225] ? __pfx_udf_add_aext+0x10/0x10 [ 322.608895][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.614750][ T8225] ? udf_next_aext+0x33b/0x4c0 [ 322.619592][ T8225] inode_getblk+0x2a6e/0x4100 [ 322.624455][ T8225] ? __pfx_inode_getblk+0x10/0x10 [ 322.629543][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.635313][ T8225] ? __lock_acquire+0x5ca/0x1ba0 [ 322.640305][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.646112][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.651805][ T8225] ? rwsem_spin_on_owner+0x69/0x2a0 [ 322.657127][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.662891][ T8225] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 322.669167][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.674958][ T8225] udf_map_block+0x2dd/0x5b0 [ 322.679623][ T8225] ? __pfx_udf_map_block+0x10/0x10 [ 322.684886][ T8225] __udf_get_block+0x98/0x330 [ 322.689620][ T8225] ? __pfx___udf_get_block+0x10/0x10 [ 322.695041][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.703045][ T8225] ? rcu_is_watching+0x12/0xc0 [ 322.707877][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.715611][ T8225] ? __mark_inode_dirty+0x2a7/0xe50 [ 322.720894][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.726682][ T8225] ? __pfx_udf_get_block+0x10/0x10 [ 322.731855][ T8225] __block_write_begin_int+0x4f4/0x16d0 [ 322.737560][ T8225] ? __pfx_udf_get_block+0x10/0x10 [ 322.742815][ T8225] ? __pfx___block_write_begin_int+0x10/0x10 [ 322.748865][ T8225] ? __pfx___might_resched+0x10/0x10 [ 322.754307][ T8225] udf_page_mkwrite+0x479/0xa00 [ 322.759222][ T8225] do_page_mkwrite+0x174/0x380 [ 322.764097][ T8225] do_wp_page+0xb9e/0x59f0 [ 322.768579][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.774349][ T8225] ? __pfx_do_wp_page+0x10/0x10 [ 322.779266][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.785065][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.790753][ T8225] ? do_raw_spin_lock+0x12c/0x2b0 [ 322.795883][ T8225] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.803777][ T8225] ? ___pte_offset_map+0x1bc/0x540 [ 322.809025][ T8225] __handle_mm_fault+0x1ada/0x2a40 [ 322.816152][ T8225] ? __pfx___handle_mm_fault+0x10/0x10 [ 322.821712][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.827579][ T8225] ? find_vma+0xbf/0x140 [ 322.831877][ T8225] ? __pfx_find_vma+0x10/0x10 [ 322.836685][ T8225] handle_mm_fault+0x3fe/0xad0 [ 322.841527][ T8225] do_user_addr_fault+0x7a6/0x1370 [ 322.846776][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.852470][ T8225] ? rcu_is_watching+0x12/0xc0 [ 322.857356][ T8225] exc_page_fault+0x5c/0xc0 [ 322.861912][ T8225] asm_exc_page_fault+0x26/0x30 [ 322.866879][ T8225] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 322.872657][ T8225] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 72 7c a1 f5 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 4c 7c a1 f5 90 90 90 90 90 90 90 90 90 90 [ 322.892441][ T8225] RSP: 0018:ffffc900156379f8 EFLAGS: 00050246 [ 322.898629][ T8225] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000128030 [ 322.908959][ T8225] RDX: 0000000000080000 RSI: ffffffff893c1363 RDI: 0000000000000005 [ 322.918895][ T8225] RBP: ffffc90015637d98 R08: 0000000000000005 R09: 0000000000000000 [ 322.927010][ T8225] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 322.935120][ T8225] R13: 0000200000128000 R14: ffffc90015637ddc R15: 0000000000000002 [ 322.943220][ T8225] ? ____sys_recvmsg+0x2e3/0x6b0 [ 322.948229][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.953963][ T8225] ____sys_recvmsg+0x2ee/0x6b0 [ 322.958814][ T8225] ? __pfx_____sys_recvmsg+0x10/0x10 [ 322.964335][ T8225] ? kfree+0x252/0x4d0 [ 322.968466][ T8225] ___sys_recvmsg+0x114/0x1a0 [ 322.973226][ T8225] ? __pfx____sys_recvmsg+0x10/0x10 [ 322.978500][ T8225] ? __pfx___might_resched+0x10/0x10 [ 322.983896][ T8225] do_recvmmsg+0x2fe/0x740 [ 322.988902][ T8225] ? __pfx_do_recvmmsg+0x10/0x10 [ 322.993988][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.999692][ T8225] ? lock_acquire+0x179/0x350 [ 323.004545][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.012060][ T8225] ? do_futex+0x122/0x350 [ 323.018452][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.024233][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.029940][ T8225] __x64_sys_recvmmsg+0x22a/0x280 [ 323.035080][ T8225] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.040686][ T8225] ? rcu_is_watching+0x12/0xc0 [ 323.045570][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.051285][ T8225] do_syscall_64+0xcd/0x260 [ 323.055932][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.061895][ T8225] RIP: 0033:0x7fede558d169 [ 323.066412][ T8225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.086191][ T8225] RSP: 002b:00007fede63e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.094723][ T8225] RAX: ffffffffffffffda RBX: 00007fede57a6080 RCX: 00007fede558d169 [ 323.102860][ T8225] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 323.113270][ T8225] RBP: 00007fede560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 323.121330][ T8225] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 323.131335][ T8225] R13: 0000000000000000 R14: 00007fede57a6080 R15: 00007fff3b2acd68 [ 323.139431][ T8225] [ 323.142467][ T8225] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.149771][ T8225] CPU: 1 UID: 0 PID: 8225 Comm: syz.5.625 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 323.161403][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.171478][ T8225] Call Trace: [ 323.174782][ T8225] [ 323.177729][ T8225] dump_stack_lvl+0x3d/0x1f0 [ 323.182353][ T8225] panic+0x71c/0x800 [ 323.186272][ T8225] ? __pfx_panic+0x10/0x10 [ 323.190746][ T8225] ? show_trace_log_lvl+0x29b/0x3e0 [ 323.196060][ T8225] ? __udf_add_aext+0x6b3/0x820 [ 323.200964][ T8225] check_panic_on_warn+0xab/0xb0 [ 323.205951][ T8225] __warn+0xf6/0x3c0 [ 323.209879][ T8225] ? __udf_add_aext+0x6b3/0x820 [ 323.214791][ T8225] report_bug+0x3c3/0x580 [ 323.219283][ T8225] ? __udf_add_aext+0x6b3/0x820 [ 323.224212][ T8225] handle_bug+0x184/0x210 [ 323.228575][ T8225] exc_invalid_op+0x17/0x50 [ 323.233111][ T8225] asm_exc_invalid_op+0x1a/0x20 [ 323.237980][ T8225] RIP: 0010:__udf_add_aext+0x6b3/0x820 [ 323.243472][ T8225] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 70 01 00 00 49 8b 7c 24 28 be 18 00 00 00 e8 b8 be 02 00 e9 f0 fd ff ff e8 4e b5 81 fe 90 <0f> 0b 90 e9 fb fa ff ff e8 40 b5 81 fe 90 0f 0b 90 e9 5c fb ff ff [ 323.263137][ T8225] RSP: 0018:ffffc90015636cd0 EFLAGS: 00010246 [ 323.269238][ T8225] RAX: 0000000000080000 RBX: ffffc90015637088 RCX: ffffc9000e5da000 [ 323.277233][ T8225] RDX: 0000000000080000 RSI: ffffffff83398a62 RDI: 0000000000000006 [ 323.285226][ T8225] RBP: ffff888056550e18 R08: 0000000000000006 R09: 0000000000000004 [ 323.293311][ T8225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 323.301320][ T8225] R13: 0000000000000010 R14: 0000000000000018 R15: ffffc90015637090 [ 323.309335][ T8225] ? __udf_add_aext+0x6b2/0x820 [ 323.314418][ T8225] udf_add_aext+0x23a/0x2e0 [ 323.319052][ T8225] ? __pfx_udf_add_aext+0x10/0x10 [ 323.324108][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.329783][ T8225] ? udf_next_aext+0x33b/0x4c0 [ 323.334590][ T8225] inode_getblk+0x2a6e/0x4100 [ 323.339321][ T8225] ? __pfx_inode_getblk+0x10/0x10 [ 323.344380][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.350159][ T8225] ? __lock_acquire+0x5ca/0x1ba0 [ 323.355213][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.360981][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.366649][ T8225] ? rwsem_spin_on_owner+0x69/0x2a0 [ 323.371884][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.377567][ T8225] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 323.383818][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.389495][ T8225] udf_map_block+0x2dd/0x5b0 [ 323.394241][ T8225] ? __pfx_udf_map_block+0x10/0x10 [ 323.399448][ T8225] __udf_get_block+0x98/0x330 [ 323.404168][ T8225] ? __pfx___udf_get_block+0x10/0x10 [ 323.409531][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.415296][ T8225] ? rcu_is_watching+0x12/0xc0 [ 323.420114][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.425790][ T8225] ? __mark_inode_dirty+0x2a7/0xe50 [ 323.431023][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.436704][ T8225] ? __pfx_udf_get_block+0x10/0x10 [ 323.442156][ T8225] __block_write_begin_int+0x4f4/0x16d0 [ 323.447751][ T8225] ? __pfx_udf_get_block+0x10/0x10 [ 323.452916][ T8225] ? __pfx___block_write_begin_int+0x10/0x10 [ 323.458938][ T8225] ? __pfx___might_resched+0x10/0x10 [ 323.464283][ T8225] udf_page_mkwrite+0x479/0xa00 [ 323.469175][ T8225] do_page_mkwrite+0x174/0x380 [ 323.473973][ T8225] do_wp_page+0xb9e/0x59f0 [ 323.478433][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.484106][ T8225] ? __pfx_do_wp_page+0x10/0x10 [ 323.488985][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.494748][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.500420][ T8225] ? do_raw_spin_lock+0x12c/0x2b0 [ 323.505495][ T8225] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.510910][ T8225] ? ___pte_offset_map+0x1bc/0x540 [ 323.516157][ T8225] __handle_mm_fault+0x1ada/0x2a40 [ 323.521376][ T8225] ? __pfx___handle_mm_fault+0x10/0x10 [ 323.526915][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.532584][ T8225] ? find_vma+0xbf/0x140 [ 323.536889][ T8225] ? __pfx_find_vma+0x10/0x10 [ 323.541804][ T8225] handle_mm_fault+0x3fe/0xad0 [ 323.546625][ T8225] do_user_addr_fault+0x7a6/0x1370 [ 323.551785][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.557455][ T8225] ? rcu_is_watching+0x12/0xc0 [ 323.562263][ T8225] exc_page_fault+0x5c/0xc0 [ 323.566810][ T8225] asm_exc_page_fault+0x26/0x30 [ 323.571697][ T8225] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 323.577464][ T8225] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 72 7c a1 f5 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 4c 7c a1 f5 90 90 90 90 90 90 90 90 90 90 [ 323.597108][ T8225] RSP: 0018:ffffc900156379f8 EFLAGS: 00050246 [ 323.603206][ T8225] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000128030 [ 323.611195][ T8225] RDX: 0000000000080000 RSI: ffffffff893c1363 RDI: 0000000000000005 [ 323.619189][ T8225] RBP: ffffc90015637d98 R08: 0000000000000005 R09: 0000000000000000 [ 323.627184][ T8225] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 323.635188][ T8225] R13: 0000200000128000 R14: ffffc90015637ddc R15: 0000000000000002 [ 323.643198][ T8225] ? ____sys_recvmsg+0x2e3/0x6b0 [ 323.648201][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.653871][ T8225] ____sys_recvmsg+0x2ee/0x6b0 [ 323.658696][ T8225] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.664050][ T8225] ? kfree+0x252/0x4d0 [ 323.668170][ T8225] ___sys_recvmsg+0x114/0x1a0 [ 323.672886][ T8225] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.678146][ T8225] ? __pfx___might_resched+0x10/0x10 [ 323.683485][ T8225] do_recvmmsg+0x2fe/0x740 [ 323.687946][ T8225] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.692923][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.698600][ T8225] ? lock_acquire+0x179/0x350 [ 323.703313][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.708979][ T8225] ? do_futex+0x122/0x350 [ 323.713371][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.719038][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.724716][ T8225] __x64_sys_recvmmsg+0x22a/0x280 [ 323.729793][ T8225] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.735374][ T8225] ? rcu_is_watching+0x12/0xc0 [ 323.740174][ T8225] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.745888][ T8225] do_syscall_64+0xcd/0x260 [ 323.750434][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.756356][ T8225] RIP: 0033:0x7fede558d169 [ 323.760796][ T8225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.780444][ T8225] RSP: 002b:00007fede63e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.788893][ T8225] RAX: ffffffffffffffda RBX: 00007fede57a6080 RCX: 00007fede558d169 [ 323.796898][ T8225] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 323.804890][ T8225] RBP: 00007fede560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 323.812881][ T8225] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 323.820869][ T8225] R13: 0000000000000000 R14: 00007fede57a6080 R15: 00007fff3b2acd68 [ 323.828897][ T8225] [ 323.832173][ T8225] Kernel Offset: disabled [ 323.836510][ T8225] Rebooting in 86400 seconds..