last executing test programs: 8.009424791s ago: executing program 2 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) eventfd(0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.873619715s ago: executing program 2 (id=363): socket$nl_route(0x10, 0x3, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)='fsname', 0x6, 0x1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lseek(r0, 0xa4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.752854958s ago: executing program 4 (id=365): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x0, 0x7f, {{0x4e, 0x4, 0x3, 0x5, 0x138, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x56, 0x0, [{0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0xbf, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x100000001, 0x3, 0x5}) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4}, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x1dac, 0x40, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x61, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000a58d000000000006f30000080009080200000008000b0000000000"], 0x2c}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6.003535s ago: executing program 4 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 5.471524955s ago: executing program 2 (id=368): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x1, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.470583952s ago: executing program 3 (id=369): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) dup(0xffffffffffffffff) 5.350204622s ago: executing program 4 (id=371): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpgid(0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_getres(0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0x2, 0x102}) 5.235829854s ago: executing program 3 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) fcntl$setstatus(r0, 0x4, 0x42000) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)=[@rthdr_2292={{0x18}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[], 0x56}}], 0x2, 0x0) 5.147398219s ago: executing program 0 (id=373): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714", @ANYRES8], 0x38}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x33565348}}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfffffc01, 0x2, 0x0, 0x82, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc1}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000, 0xffffffe0}}, './file0\x00'}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0xbf, 0xf8, 0x57, 0x20, 0x5ac, 0x254, 0xca76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x80, 0x2}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="50c3fcd8ce"]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000dc0), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 5.088665036s ago: executing program 3 (id=374): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='siox_set_data\x00', r2}, 0x10) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3002000010000100000000000000fc8f652b00000000000000000000000000bbff0200000000000000000000000000010f00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0100010000000000d500000000000000ff75000000000000250000000077204b9d000000000000000000000000050600000000000000436f000000000000010001000000f273000000d4010000000000000040000000000000040000000000000003000000b26b6e0001030103000000004c001400636d496328616573290000000000000000000000000000000000000000000000000004000000f4ffffff0200000000000000000000000000000000000000000000000000080004d8915f00000000"], 0x230}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 5.006714726s ago: executing program 2 (id=375): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = socket$inet(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\x8d=\xbbo\xe3\xa1\xb1_\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 4.807951411s ago: executing program 1 (id=376): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000ac0), 0x1, 0xa0d, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00'], 0x0) 4.372347023s ago: executing program 1 (id=377): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x8b, 0x0, {{0x4e, 0x4, 0x3, 0x5, 0x138, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x56, 0x0, [{0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0xbf, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x100000001, 0x3, 0x5}) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4}, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x1dac, 0x40, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x61, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000a58d000000000006f30000080009080200000008000b0000000000"], 0x2c}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 4.300532048s ago: executing program 4 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) stat(&(0x7f0000004f40)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) 3.167601171s ago: executing program 4 (id=379): socket$nl_route(0x10, 0x3, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)='fsname', 0x6, 0x1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lseek(r0, 0xa4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.141333661s ago: executing program 3 (id=380): recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 3.115692636s ago: executing program 2 (id=381): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 3.073635259s ago: executing program 0 (id=382): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) dup(0xffffffffffffffff) 2.821651689s ago: executing program 0 (id=383): syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 2.820885068s ago: executing program 1 (id=384): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000880)=""/4124, 0x101c}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f00000018c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/264, 0x108}], 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2000000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.639885187s ago: executing program 1 (id=385): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, 0xffffffffffffffff, 0x4}, 0x10) r3 = socket(0x1, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.639662438s ago: executing program 2 (id=386): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}, 0x90) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000002c0)=ANY=[]) 2.607353048s ago: executing program 3 (id=387): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000ac0), 0x1, 0xa0d, &(0x7f0000002080)="$eJzs3U1sXEcdAPB5a6/TfJRsSkJNGtqEQls+ajeOCR8RNFVzIWoqbpUqLlGalog0IFIJWvWQ5MSNVlW48iFOvVSAkOgFRT1xqUQjcempcOBAFKRKHKCQGMWeWa//2eXtOonX6/39pPHsvJndmbd++/bte29mEjC2Got/5+enq5Quvv3Gkb8/9LfNN5Y83i7RWvw72ZFqppSqnJ4Mr/fBxFJ87cNXT3SLqzS3+Lek09NX28/dmlI6l/amS6mVdl+8/Pq7c08dO3/0wr733jx05c6sPQAAjJdvXTo0v+svf7pvx0dv3X84bWovL8fnrZzelo/7D+cD/3L830gr01VH6DQVyk3m0AjlJrqU66ynGcpN9qh/Krxus0e5TTX1T3Qs67beMMrKdtxKVWNmRbrRmJlZ+k2eFn/XT1UzZ06dfv7skBoK3Hb/fCCltFcQhHEMC9uHvQcCWBKvF97kXDyzcGvarzbZX/1Xn2h0fz7cBmu9/S+pzg23/mXq///1/+q8PQ63z0bdmsp6lc/RtpyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JNW7HavVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEB61a8b24hK/nxvr6Yv6km/66a/M01+Vtq8rfW5MM4++1LP0mvVcu/8+Nv+kHPh5XzbHfn+GMDtieejxy0/njf76Butf54PzGsZ78//szJrzz37OWl+/+r9vZ/PW/ve3O6lT9bl3KBcr4wnldv3/vfWllPo0e5e0J77u5SfvHxzpXlqp3Lr5M69jM3tWN65fO29yq3Z2W5Vii3OYe7Qnvj8cmW8Lxy/FH2q+X9mgzr2wzrMRXaUfYrO3Ic2wGrUbbHXvf/l+1zOjWr50+dPvlYTpft9I8TzU03lu9f43YDt67f/j/TaWX/n23t5c1G535h+/LyqnO/0ArL53osP5DT5XvuOxObF5fPnPje6edu98rDmDv78ivfPX769MkfeOCBBx60Hwx7zwTcabMvvfj92bMvv/LoqRePv3DyhZNnDhw8eGBu7uBXD8zPLh7Xz3Ye3QMbyfKX/rBbAgAAAAAAAAAAAPTrh0ePXP7zO19+f6n//3L/v9L/v9z5W/r//zj0/4/95Es/+NIPcEeX/MUyYYDVqVCumcPHQ3t3hnp2hed9Isftefxy//9SXRzXtbTn3rA8jt9byoXhBG4aL2UqjEES5wv8dI4v5PiXCYao2tx9cY7rxrcu23oZn8K4FKOp/N/K1lDGMSn9v3uN61T2/zvWoI3cfmvRnXDY6wh09w/jfwvC2IaFBbN4AOvDsOf/LOc9S3zmD9+860Yoxa4+sXJ/GccvhVux3uefVP/Gmv+zPf9d3/u/MGNea3X1/vtnV97vqDbt7rf+uP5lHOidg9X/Ua6/rM3Dqb/6F34R6o8XhPr0n1D/lj7rv2n996yu/v/m+svb9siD/da/1OKqsbId8bxxuf4XzxsX18L6l7E9B17/VU7UeD3XD+NsVOaZHdSozP/bS7wP40s5XXaE5T6HON/JoO0v91eU74Fd4fWrmu838/+Otq/luO7zUOb/Ldtjq0u60ZFudnlvN+q+BkbVB67/CcLYhoWFhTt7QqvGUCtn6O//sH8nDLv+Yb//deL8v/EYPs7/G/Pj/L8xP87/G/Pj/HoxP87/G9/POP9vzL83vG6cH3i6Jv+TNfm7a/Lvq8nfU5P/qZr8fTX599fkP1CTf09N/oM1+Z+pyf9sTf5DNfmP1OR/riZ/oyv9UcZ1/WGcxf55Pv8wPsr1n16f/501+cDo+ulb+5989jffbi31/59qnw8p1/EO53Qz/3b+UU7H696pI30j752c/mvIX+/nO2CcxPEz4vf7wzX5wOgq93n5fMMYqrqP2NPvuFW9jvMZLZ/P8Rdy/MUcP5rjmRzP5nh/jufWqH3cGU/++neHXquWf+9vD/n93k8e+wPFcaIO9NmeeH5g0PvZ4zh+g7rV+lfZHQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBoGot/5+enq5Quvv3GkWeOnZq9seTxdonW4t/JjlSz/byUHsvxRI5/nh9c+/DVE53x9RxXaS5VqWovT09fbde0NaV0Lu1Nl1Ir7b54+fV35546dv7ohX3vvXnoyp17BwAAAGDj+18AAAD//8xlDh4=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00'], 0x0) 2.585728392s ago: executing program 0 (id=388): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpgid(0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_getres(0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0x2, 0x102}) 1.406735571s ago: executing program 1 (id=389): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) stat(&(0x7f0000004f40)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) 1.327433528s ago: executing program 3 (id=390): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='siox_set_data\x00', r2}, 0x10) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3002000010000100000000000000fc8f652b00000000000000000000000000bbff0200000000000000000000000000010f00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0100010000000000d500000000000000ff75000000000000250000000077204b9d000000000000000000000000050600000000000000436f000000000000010001000000f273000000d4010000000000000040000000000000040000000000000003000000b26b6e0001030103000000004c001400636d496328616573290000000000000000000000000000000000000000000000000004000000f4ffffff0200000000000000000000000000000000000000000000000000080004d8915f00000000"], 0x230}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 1.274439299s ago: executing program 4 (id=391): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = socket$inet(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\x8d=\xbbo\xe3\xa1\xb1_\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 281.797206ms ago: executing program 1 (id=392): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714", @ANYRES8], 0x38}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x33565348}}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfffffc01, 0x2, 0x0, 0x82, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc1}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000, 0xffffffe0}}, './file0\x00'}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0xbf, 0xf8, 0x57, 0x20, 0x5ac, 0x254, 0xca76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x80, 0x2}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="50c3fcd8ce"]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000dc0), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 158.127607ms ago: executing program 0 (id=393): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) dup(0xffffffffffffffff) 0s ago: executing program 0 (id=394): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 70.556676][ T5088] cgroup: Unknown subsys name 'net' [ 70.753249][ T5088] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.847407][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.854193][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.502481][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.906996][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.938974][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.956463][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.964829][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.972682][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.972916][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.982385][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.988868][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.995297][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.003822][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.009845][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.017428][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.031221][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.032490][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.038982][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.049953][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.055123][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.060154][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.067646][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.082433][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.090391][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.097173][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.098679][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.104762][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.121860][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.128383][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.137532][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.148102][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.157506][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.157749][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.830365][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 76.909471][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 76.938647][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 77.000086][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 77.037920][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 77.121856][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.129410][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.137641][ T5105] bridge_slave_0: entered allmulticast mode [ 77.145063][ T5105] bridge_slave_0: entered promiscuous mode [ 77.211821][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.219078][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.230521][ T5105] bridge_slave_1: entered allmulticast mode [ 77.237997][ T5105] bridge_slave_1: entered promiscuous mode [ 77.323670][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.330913][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.338244][ T5106] bridge_slave_0: entered allmulticast mode [ 77.345419][ T5106] bridge_slave_0: entered promiscuous mode [ 77.354866][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.362045][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.369471][ T5106] bridge_slave_1: entered allmulticast mode [ 77.377064][ T5106] bridge_slave_1: entered promiscuous mode [ 77.402839][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.410137][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.417427][ T5102] bridge_slave_0: entered allmulticast mode [ 77.424869][ T5102] bridge_slave_0: entered promiscuous mode [ 77.464241][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.514961][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.522205][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.530036][ T5102] bridge_slave_1: entered allmulticast mode [ 77.537840][ T5102] bridge_slave_1: entered promiscuous mode [ 77.572649][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.585055][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.602107][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.625292][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.632427][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.640482][ T5103] bridge_slave_0: entered allmulticast mode [ 77.648311][ T5103] bridge_slave_0: entered promiscuous mode [ 77.657703][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665141][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.672390][ T5103] bridge_slave_1: entered allmulticast mode [ 77.680902][ T5103] bridge_slave_1: entered promiscuous mode [ 77.700414][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.707812][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.715258][ T5097] bridge_slave_0: entered allmulticast mode [ 77.722894][ T5097] bridge_slave_0: entered promiscuous mode [ 77.803702][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.813342][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.820640][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.828615][ T5097] bridge_slave_1: entered allmulticast mode [ 77.839672][ T5097] bridge_slave_1: entered promiscuous mode [ 77.862666][ T5105] team0: Port device team_slave_0 added [ 77.886997][ T5106] team0: Port device team_slave_0 added [ 77.897110][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.909315][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.921332][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.958387][ T5105] team0: Port device team_slave_1 added [ 77.979614][ T5106] team0: Port device team_slave_1 added [ 78.034025][ T5102] team0: Port device team_slave_0 added [ 78.044255][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.069026][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.076610][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.104890][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.144643][ T5102] team0: Port device team_slave_1 added [ 78.152888][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.164313][ T54] Bluetooth: hci0: command tx timeout [ 78.170155][ T54] Bluetooth: hci4: command tx timeout [ 78.175696][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.175723][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.175752][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.177745][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.227186][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.243927][ T5107] Bluetooth: hci1: command tx timeout [ 78.254098][ T5114] Bluetooth: hci3: command tx timeout [ 78.259235][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.264951][ T54] Bluetooth: hci2: command tx timeout [ 78.285070][ T5103] team0: Port device team_slave_0 added [ 78.337231][ T5097] team0: Port device team_slave_0 added [ 78.347568][ T5097] team0: Port device team_slave_1 added [ 78.354399][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.361414][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.387988][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.402193][ T5103] team0: Port device team_slave_1 added [ 78.459166][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.466861][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.493826][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.513635][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.520657][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.547211][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.571685][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.578977][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.605120][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.627141][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.634179][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.660341][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.673205][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.680186][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.706329][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.743592][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.750932][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.777023][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.848037][ T5105] hsr_slave_0: entered promiscuous mode [ 78.854760][ T5105] hsr_slave_1: entered promiscuous mode [ 78.929773][ T5097] hsr_slave_0: entered promiscuous mode [ 78.936986][ T5097] hsr_slave_1: entered promiscuous mode [ 78.944801][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.952631][ T5097] Cannot create hsr debugfs directory [ 78.976226][ T5102] hsr_slave_0: entered promiscuous mode [ 78.983194][ T5102] hsr_slave_1: entered promiscuous mode [ 78.989665][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.997385][ T5102] Cannot create hsr debugfs directory [ 79.011743][ T5106] hsr_slave_0: entered promiscuous mode [ 79.018415][ T5106] hsr_slave_1: entered promiscuous mode [ 79.027403][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.035423][ T5106] Cannot create hsr debugfs directory [ 79.084538][ T5103] hsr_slave_0: entered promiscuous mode [ 79.091538][ T5103] hsr_slave_1: entered promiscuous mode [ 79.098055][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.105919][ T5103] Cannot create hsr debugfs directory [ 79.672252][ T5105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.689457][ T5105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.713865][ T5105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.743030][ T5105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.801704][ T5106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.824605][ T5106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.845653][ T5106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.867046][ T5106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.880149][ T5103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.926586][ T5103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.944572][ T5103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.958493][ T5103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.046598][ T5097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.080080][ T5097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.091373][ T5097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.130831][ T5097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.218531][ T5102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.231106][ T5102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.245489][ T54] Bluetooth: hci0: command tx timeout [ 80.245501][ T5114] Bluetooth: hci4: command tx timeout [ 80.274660][ T5102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.285939][ T5102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.325295][ T5114] Bluetooth: hci2: command tx timeout [ 80.328406][ T54] Bluetooth: hci3: command tx timeout [ 80.330761][ T5114] Bluetooth: hci1: command tx timeout [ 80.410309][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.528071][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.566342][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.573793][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.587577][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.594790][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.626766][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.641861][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.692376][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.707519][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.759873][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.776994][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.784306][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.805799][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.813081][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.826762][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.852672][ T5105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.864378][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.900925][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.911288][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.918564][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.941718][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.949195][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.011891][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.019203][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.052447][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.088031][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.095921][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.137939][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.145168][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.200869][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.208137][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.321680][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.392270][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.418938][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.452218][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.851076][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.995516][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.067107][ T5097] veth0_vlan: entered promiscuous mode [ 82.096761][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.120897][ T5097] veth1_vlan: entered promiscuous mode [ 82.241040][ T5106] veth0_vlan: entered promiscuous mode [ 82.281558][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.323706][ T5114] Bluetooth: hci0: command tx timeout [ 82.329194][ T5114] Bluetooth: hci4: command tx timeout [ 82.331537][ T5097] veth0_macvtap: entered promiscuous mode [ 82.363679][ T5106] veth1_vlan: entered promiscuous mode [ 82.403445][ T5114] Bluetooth: hci1: command tx timeout [ 82.407393][ T5097] veth1_macvtap: entered promiscuous mode [ 82.413341][ T5114] Bluetooth: hci3: command tx timeout [ 82.420057][ T5114] Bluetooth: hci2: command tx timeout [ 82.556106][ T5105] veth0_vlan: entered promiscuous mode [ 82.589896][ T5103] veth0_vlan: entered promiscuous mode [ 82.601772][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.618853][ T5102] veth0_vlan: entered promiscuous mode [ 82.634151][ T5106] veth0_macvtap: entered promiscuous mode [ 82.659040][ T5103] veth1_vlan: entered promiscuous mode [ 82.678174][ T5105] veth1_vlan: entered promiscuous mode [ 82.697428][ T5102] veth1_vlan: entered promiscuous mode [ 82.710076][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.719459][ T5106] veth1_macvtap: entered promiscuous mode [ 82.786981][ T5097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797621][ T5097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.807324][ T5097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.816819][ T5097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.835138][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.847026][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.859520][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.930444][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.942907][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.957289][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.986934][ T5106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001114][ T5106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010681][ T5106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019837][ T5106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056863][ T5103] veth0_macvtap: entered promiscuous mode [ 83.070024][ T5102] veth0_macvtap: entered promiscuous mode [ 83.096416][ T5103] veth1_macvtap: entered promiscuous mode [ 83.110199][ T5102] veth1_macvtap: entered promiscuous mode [ 83.180735][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.197325][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.207889][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.220847][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.234813][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.258122][ T5105] veth0_macvtap: entered promiscuous mode [ 83.282422][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.294054][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.304158][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.315112][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.327959][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.362717][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.371197][ T5105] veth1_macvtap: entered promiscuous mode [ 83.372258][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.388269][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.399588][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.410581][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.421829][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.431974][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.442483][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.454782][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.471374][ T5103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.480822][ T5103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490368][ T5103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.499602][ T5103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.529949][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.547130][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.557268][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.567963][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.577914][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.588512][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.598491][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.609596][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.622233][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.636795][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.649436][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.659744][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.670602][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.680873][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.692129][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.704569][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.714909][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.725710][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.735900][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.746488][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.756927][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.770279][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.780195][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.791002][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.802558][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.846363][ T5102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.855405][ T5102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.864626][ T5102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875771][ T5102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.949473][ T2791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.955390][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.958099][ T2791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.973033][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.982727][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993168][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020391][ T2791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.055283][ T2791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.178072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.187774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.343851][ T2791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.369752][ T2791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.393530][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.405452][ T5114] Bluetooth: hci0: command tx timeout [ 84.405620][ T5107] Bluetooth: hci4: command tx timeout [ 84.422396][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.483754][ T5107] Bluetooth: hci2: command tx timeout [ 84.483989][ T5114] Bluetooth: hci1: command tx timeout [ 84.489363][ T5107] Bluetooth: hci3: command tx timeout [ 84.537147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.552008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.610561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.663440][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.725825][ T2803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.760890][ T2803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.842730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.863189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.885097][ T5157] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.048325][ T5191] overlayfs: failed to resolve './file1': -2 [ 85.168150][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.421670][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.611121][ T5157] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 85.622053][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.636084][ T5157] usb 1-1: config 0 descriptor?? [ 86.088091][ T5201] loop1: detected capacity change from 0 to 256 [ 86.888471][ T5157] sony 0003:054C:0268.0001: unknown main item tag 0xd [ 86.912187][ T5157] sony 0003:054C:0268.0001: item fetching failed at offset 4/5 [ 86.944946][ T5157] sony 0003:054C:0268.0001: parse failed [ 86.950764][ T5157] sony 0003:054C:0268.0001: probe with driver sony failed with error -22 [ 87.101251][ T5154] usb 1-1: USB disconnect, device number 2 [ 87.211176][ T25] cfg80211: failed to load regulatory.db [ 87.333468][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.553412][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.580975][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.607940][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 87.622898][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.754207][ T8] usb 4-1: config 0 descriptor?? [ 87.906103][ T5219] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.818444][ T5219] loop0: detected capacity change from 0 to 1024 [ 88.831903][ T8] sony 0003:054C:0268.0002: unknown main item tag 0xd [ 88.849104][ T8] sony 0003:054C:0268.0002: item fetching failed at offset 4/5 [ 88.857644][ T8] sony 0003:054C:0268.0002: parse failed [ 88.866104][ T8] sony 0003:054C:0268.0002: probe with driver sony failed with error -22 [ 88.923314][ T5219] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.963660][ T5219] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 89.015959][ T5219] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.053256][ T25] usb 4-1: USB disconnect, device number 2 [ 89.090659][ T5219] JBD2: no valid journal superblock found [ 89.138461][ T5219] EXT4-fs (loop0): Could not load journal inode [ 90.094412][ T5219] loop0: detected capacity change from 0 to 512 [ 90.101113][ T5219] ======================================================= [ 90.101113][ T5219] WARNING: The mand mount option has been deprecated and [ 90.101113][ T5219] and is ignored by this kernel. Remove the mand [ 90.101113][ T5219] option from the mount to silence this warning. [ 90.101113][ T5219] ======================================================= [ 90.488540][ T5153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.783282][ T5153] usb 2-1: Using ep0 maxpacket: 16 [ 90.942808][ T5153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.083113][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.165047][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.234225][ T5107] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 91.236767][ T5153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.283263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.324686][ T5242] IPv6: Can't replace route, no match found [ 91.361829][ T5153] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.413292][ T5153] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.457156][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 91.470220][ T5153] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.503811][ T5153] usb 2-1: Manufacturer: syz [ 91.529649][ T5153] usb 2-1: config 0 descriptor?? [ 92.103152][ T5153] rc_core: IR keymap rc-hauppauge not found [ 92.112609][ T5153] Registered IR keymap rc-empty [ 92.127365][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.163333][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.207216][ T5153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 92.238165][ T5153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 92.269416][ T29] audit: type=1326 audit(1720507048.682:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 92.294072][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.353525][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.362799][ T29] audit: type=1326 audit(1720507048.692:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 92.400051][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.443360][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.493123][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.534290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 92.544703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.564758][ T29] audit: type=1326 audit(1720507048.712:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 92.604358][ T29] audit: type=1326 audit(1720507048.712:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 92.619376][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 92.870828][ T29] audit: type=1326 audit(1720507048.712:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 92.900814][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.144331][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.273633][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.283083][ T5107] Bluetooth: hci4: command tx timeout [ 93.333136][ T5153] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.381274][ T5153] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 93.407101][ T5153] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 93.493156][ T5153] usb 2-1: USB disconnect, device number 2 [ 93.540008][ T5270] loop0: detected capacity change from 0 to 1024 [ 93.565814][ T5273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 93.595644][ T5273] Zero length message leads to an empty skb [ 93.602370][ T5275] netlink: 'syz.3.28': attribute type 21 has an invalid length. [ 93.623390][ T5275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28'. [ 93.648848][ T5270] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 93.693244][ T5275] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 93.710076][ T5270] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 93.737312][ T5270] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.768728][ T5270] JBD2: no valid journal superblock found [ 93.790705][ T5270] EXT4-fs (loop0): Could not load journal inode [ 93.982798][ T5107] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 94.774669][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 94.961401][ T5270] loop0: detected capacity change from 0 to 512 [ 95.054467][ T5107] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 95.603819][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.908508][ T5277] loop1: detected capacity change from 0 to 32768 [ 96.063089][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 96.075724][ T5289] loop2: detected capacity change from 0 to 32768 [ 96.080831][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.097264][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.123126][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.133063][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.142787][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.198401][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.211085][ T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.222096][ T8] usb 5-1: Manufacturer: syz [ 96.245768][ T8] usb 5-1: config 0 descriptor?? [ 96.827324][ T5289] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.910741][ T8] rc_core: IR keymap rc-hauppauge not found [ 96.950656][ T8] Registered IR keymap rc-empty [ 96.977248][ T5277] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 96.993453][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.055452][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.064273][ T5277] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 97.084939][ T5289] XFS (loop2): Ending clean mount [ 97.100121][ T5277] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 97.100121][ T5277] running recovery passes: check_allocations [ 97.111729][ T5289] XFS (loop2): Quotacheck needed: Please wait. [ 97.128110][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 97.170778][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 97.213445][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.269355][ T5277] bcachefs (loop1): accounting_read... done [ 97.277133][ T5289] XFS (loop2): Quotacheck: Done. [ 97.281926][ T5277] bcachefs (loop1): alloc_read... done [ 97.293390][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.304175][ T5277] bcachefs (loop1): stripes_read... done [ 97.310021][ T5277] bcachefs (loop1): snapshots_read... done [ 97.317685][ T5277] bcachefs (loop1): check_allocations... [ 97.325530][ T5277] btree ptr not marked in member info btree allocated bitmap [ 97.325583][ T5277] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 97.333097][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.349785][ T5324] tipc: Started in network mode [ 97.370354][ T5277] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 10 [ 97.380706][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.388073][ T5324] tipc: Node identity fffffff9, cluster identity 4711 [ 97.395193][ T5324] tipc: Node number set to 4294967289 [ 97.400729][ T5277] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 97.430311][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.450629][ T5298] loop3: detected capacity change from 0 to 32768 [ 97.460866][ T5277] bcachefs (loop1): bch2_gc_btree(): error fsck_errors_not_fixed [ 97.493417][ T5277] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 97.513223][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.532121][ T5277] bcachefs (loop1): bch2_check_allocations(): error fsck_errors_not_fixed [ 97.561839][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.582175][ T5277] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 97.595445][ T5289] loop2: detected capacity change from 32768 to 0 [ 97.604572][ T5277] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 97.623309][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.639862][ T5277] bcachefs (loop1): shutting down [ 97.665681][ T5327] syz.2.33: attempt to access beyond end of device [ 97.665681][ T5327] loop2: rw=2049, sector=18692, nr_sectors = 4 limit=0 [ 97.733633][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 97.743793][ T5331] mmap: syz.4.41 (5331) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.809268][ T5331] MTD: Couldn't look up '': -22 [ 98.105997][ T5277] bcachefs (loop1): shutdown complete [ 98.119713][ T25] loop2: writeback error on inode 9286, offset 0, sector 18692 [ 98.317087][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 98.356103][ T5329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 98.388089][ T8] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 98.454658][ T8] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.063051][ T5103] syz-executor: attempt to access beyond end of device [ 99.063051][ T5103] loop2: rw=432129, sector=896, nr_sectors = 128 limit=0 [ 99.184760][ T5107] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 99.190756][ T5114] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 99.196311][ T5107] Bluetooth: hci2: Injecting HCI hardware error event [ 99.211963][ T5107] Bluetooth: hci2: hardware error 0x00 [ 99.226186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.234732][ T8] usb 5-1: USB disconnect, device number 2 [ 99.270007][ T10] XFS (loop2): log I/O error -5 [ 99.275609][ T10] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 99.283986][ T10] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 99.305290][ T5103] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.481154][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 100.273651][ T5350] nbd0: detected capacity change from 0 to 22 [ 100.350308][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.356886][ T5346] block nbd0: shutting down sockets [ 100.401840][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.429735][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.467615][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.503479][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.513811][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.525754][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.552127][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.560863][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.570965][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.579314][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.590543][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.598883][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.610884][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.619253][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.632094][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.640345][ T5156] ldm_validate_partition_table(): Disk read failed. [ 100.649007][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.664718][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.685543][ T5156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.707631][ T5156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.739020][ T5156] Dev nbd0: unable to read RDB block 0 [ 100.760934][ T5156] nbd0: unable to read partition table [ 100.776263][ T5156] nbd0: partition table beyond EOD, truncated [ 100.801464][ T5354] ldm_validate_partition_table(): Disk read failed. [ 100.826900][ T5354] Dev nbd0: unable to read RDB block 0 [ 100.840504][ T5354] nbd0: unable to read partition table [ 100.863387][ T5354] nbd0: partition table beyond EOD, truncated [ 100.884601][ T928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.902183][ T5156] ldm_validate_partition_table(): Disk read failed. [ 100.925099][ T5156] Dev nbd0: unable to read RDB block 0 [ 100.949980][ T5156] nbd0: unable to read partition table [ 100.968628][ T5156] nbd0: partition table beyond EOD, truncated [ 101.073022][ T928] usb 2-1: Using ep0 maxpacket: 32 [ 101.092152][ T928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.130080][ T928] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76 [ 101.161997][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.183131][ T928] usb 2-1: Product: syz [ 101.193174][ T928] usb 2-1: Manufacturer: syz [ 101.203357][ T5114] Bluetooth: hci0: command tx timeout [ 101.210574][ T928] usb 2-1: SerialNumber: syz [ 101.224166][ T928] usb 2-1: config 0 descriptor?? [ 101.243126][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.252458][ T928] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 101.284781][ T5107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 101.325707][ T5107] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 101.434668][ T4532] bcm5974 2-1:0.0: could not read from device [ 101.450274][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 101.462580][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.483911][ T4532] bcm5974 2-1:0.0: could not read from device [ 101.495165][ T928] usb 2-1: USB disconnect, device number 3 [ 101.512120][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.551836][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.591032][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.626616][ T5375] warning: `syz.3.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.638513][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.660624][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.672873][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.684054][ T25] usb 5-1: Manufacturer: syz [ 101.696318][ T25] usb 5-1: config 0 descriptor?? [ 101.750116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.774281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 102.784509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.966299][ T5107] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 103.150395][ T25] rc_core: IR keymap rc-hauppauge not found [ 103.167328][ T25] Registered IR keymap rc-empty [ 103.175702][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 103.216574][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.004134][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 104.025999][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 104.097510][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 104.132865][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.163519][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.203123][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.253254][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.313112][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.363155][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.416661][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.465380][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.473478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.523619][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.554074][ T5407] loop1: detected capacity change from 0 to 1024 [ 104.573240][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 104.624057][ T25] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 104.654244][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.671913][ T25] usb 5-1: USB disconnect, device number 3 [ 104.735805][ T5407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.043571][ T5107] Bluetooth: hci3: command tx timeout [ 105.100961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 105.409150][ T5102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.742623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.911641][ T5426] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.807559][ T5432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.857899][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'. [ 108.584274][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.783519][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 108.804377][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.826089][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.837295][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.856779][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.880810][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.911663][ T58] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.928200][ T58] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.941527][ T58] usb 3-1: Manufacturer: syz [ 108.967966][ T58] usb 3-1: config 0 descriptor?? [ 109.285063][ T5114] Bluetooth: hci4: command 0x0405 tx timeout [ 109.287666][ T58] rc_core: IR keymap rc-hauppauge not found [ 109.302845][ T58] Registered IR keymap rc-empty [ 109.310386][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.354298][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.397997][ T58] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 109.415197][ T58] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 109.446507][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.487321][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.535671][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.574552][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.623400][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.676168][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.763608][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.816602][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.873163][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 109.960985][ T58] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.016835][ T58] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 110.062590][ T58] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.101071][ T58] usb 3-1: USB disconnect, device number 2 [ 110.284884][ T5464] dccp_close: ABORT with 32 bytes unread [ 111.270249][ T928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.466612][ T928] usb 1-1: Using ep0 maxpacket: 16 [ 111.479980][ T928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.491159][ T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.502896][ T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.517121][ T928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.530948][ T928] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.568248][ T928] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.578512][ T928] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.592197][ T928] usb 1-1: Manufacturer: syz [ 111.600031][ T928] usb 1-1: config 0 descriptor?? [ 111.652830][ T5502] dccp_close: ABORT with 32 bytes unread [ 111.693230][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.895420][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 111.905798][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.916574][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.930322][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.940835][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.954438][ T928] rc_core: IR keymap rc-hauppauge not found [ 111.960409][ T928] Registered IR keymap rc-empty [ 111.966705][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.979980][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.992030][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.010724][ T25] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.020256][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.032058][ T25] usb 4-1: Manufacturer: syz [ 112.041953][ T25] usb 4-1: config 0 descriptor?? [ 112.054806][ T5488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.92'. [ 112.065321][ T928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 112.101129][ T928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 112.124333][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.173403][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.213282][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.253887][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.294831][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.347761][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.364423][ T25] rc_core: IR keymap rc-hauppauge not found [ 112.370683][ T25] Registered IR keymap rc-empty [ 112.389252][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.396852][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.443260][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.450674][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.473179][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.502162][ T25] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 112.514369][ T928] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 112.524340][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input11 [ 112.542812][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.559572][ T928] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 112.568477][ T928] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.577248][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.591198][ T928] usb 1-1: USB disconnect, device number 3 [ 112.623296][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.662884][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.699235][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.737993][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.777244][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.813283][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.850501][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.889348][ T25] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.945547][ T25] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 112.955185][ T25] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.981151][ T25] usb 4-1: USB disconnect, device number 3 [ 113.180228][ T5516] program syz.0.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.190247][ T5516] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.132829][ T5522] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 115.485378][ T5545] process 'syz.2.108' launched './file0' with NULL argv: empty string added [ 115.533453][ T5520] loop3: detected capacity change from 0 to 40427 [ 115.632222][ T5520] F2FS-fs (loop3): invalid crc value [ 115.719905][ T5520] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.033101][ T928] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.233163][ T928] usb 3-1: Using ep0 maxpacket: 32 [ 116.409486][ T928] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.638138][ T928] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 116.649316][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.659902][ T928] usb 3-1: config 0 descriptor?? [ 116.675900][ T928] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.687332][ T5520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.031927][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.273425][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 117.312023][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.323084][ T928] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.345644][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.364943][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.390890][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.410967][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.466121][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.490589][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.510849][ T8] usb 2-1: Manufacturer: syz [ 117.527530][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.549365][ T8] usb 2-1: config 0 descriptor?? [ 117.553856][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.565198][ T928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.579242][ T928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.590124][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.593311][ T5152] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.602896][ T928] usb 5-1: config 0 descriptor?? [ 117.867711][ T5152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.891130][ T5152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.903651][ T8] rc_core: IR keymap rc-hauppauge not found [ 117.914754][ T8] Registered IR keymap rc-empty [ 117.919938][ T5152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.943658][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.980113][ T25] IPVS: starting estimator thread 0... [ 117.987692][ T5152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.998466][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.018792][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.033056][ T5152] usb 1-1: Product: syz [ 118.039234][ T5152] usb 1-1: Manufacturer: syz [ 118.044864][ T5152] usb 1-1: SerialNumber: syz [ 118.057825][ T928] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.061443][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.095422][ T5572] IPVS: using max 18 ests per chain, 43200 per kthread [ 118.095436][ T928] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 118.117458][ T5152] usb 1-1: selecting invalid altsetting 1 [ 118.132497][ T928] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.148527][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 118.218496][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.335383][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.353125][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.424120][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.437341][ T46] usb 3-1: USB disconnect, device number 3 [ 118.524521][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.603320][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.649337][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.680572][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.691946][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.711524][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.720886][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.753494][ T25] usb 4-1: config 0 descriptor?? [ 118.773915][ T5575] kvm: pic: non byte write [ 118.960226][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.023186][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.292971][ C1] hrtimer: interrupt took 58689 ns [ 119.953170][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 120.266246][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 120.296959][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 120.386202][ T25] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 121.017883][ T58] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 121.028586][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.196501][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.249149][ T5587] dccp_close: ABORT with 32 bytes unread [ 121.315098][ T8] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 121.456934][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.575607][ T8] usb 2-1: USB disconnect, device number 4 [ 121.765589][ T5152] cdc_ncm 1-1:1.0: bind() failure [ 121.804538][ T5152] cdc_ncm 1-1:1.1: skipping garbage [ 121.830425][ T5152] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 121.859388][ T5152] cdc_ncm 1-1:1.1: bind() failure [ 121.897869][ T5152] usb 1-1: USB disconnect, device number 4 [ 122.014261][ T5153] usb 5-1: USB disconnect, device number 4 [ 122.863907][ T5153] usb 4-1: USB disconnect, device number 4 [ 123.054078][ T5625] loop4: detected capacity change from 0 to 256 [ 123.153416][ T5154] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.327033][ T5613] loop4: detected capacity change from 0 to 512 [ 123.353549][ T5154] usb 2-1: Using ep0 maxpacket: 16 [ 123.370752][ T5154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.389406][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.408192][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.432135][ T5154] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.497154][ T5154] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.524032][ T5154] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.533379][ T5154] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.541746][ T5154] usb 2-1: Manufacturer: syz [ 123.576737][ T5154] usb 2-1: config 0 descriptor?? [ 124.748161][ T46] IPVS: starting estimator thread 0... [ 124.915144][ T5661] IPVS: using max 17 ests per chain, 40800 per kthread [ 126.931995][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.260663][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.346325][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.389494][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.463989][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.495519][ T5154] rc_core: IR keymap rc-hauppauge not found [ 127.501455][ T5154] Registered IR keymap rc-empty [ 127.542383][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.548262][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.588949][ T25] usb 5-1: config 0 descriptor?? [ 127.597398][ T5672] dccp_close: ABORT with 32 bytes unread [ 127.632719][ T25] usb 5-1: can't set config #0, error -71 [ 127.645389][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.663694][ T25] usb 5-1: USB disconnect, device number 5 [ 127.711865][ T5154] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 127.770605][ T5154] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 127.832252][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.893298][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.953297][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.993397][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.053100][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.095643][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.143149][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.183304][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.219516][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.253589][ T5154] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.291315][ T5154] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 128.310346][ T5154] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.342831][ T5154] usb 2-1: USB disconnect, device number 5 [ 128.613096][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.753262][ T5154] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.789457][ T5703] loop4: detected capacity change from 0 to 32768 [ 128.825128][ T5703] XFS: ikeep mount option is deprecated. [ 128.830861][ T5703] XFS: noikeep mount option is deprecated. [ 128.838989][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.853054][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.869098][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.883277][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.899771][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.919591][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.928181][ T25] usb 3-1: Product: syz [ 128.934312][ T25] usb 3-1: Manufacturer: syz [ 128.938985][ T25] usb 3-1: SerialNumber: syz [ 128.958280][ T5703] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 128.997991][ T5154] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 129.000909][ T25] cdc_ncm 3-1:1.0: skipping garbage [ 129.050957][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.081266][ T5154] usb 2-1: config 0 descriptor?? [ 129.111274][ T5703] XFS (loop4): Ending clean mount [ 129.130962][ T5703] XFS (loop4): Quotacheck needed: Please wait. [ 129.211758][ T5703] XFS (loop4): Quotacheck: Done. [ 129.319622][ T58] IPVS: starting estimator thread 0... [ 129.382237][ T5105] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 129.433139][ T5723] IPVS: using max 24 ests per chain, 57600 per kthread [ 129.535013][ T5154] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 129.673267][ T25] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 129.689649][ T25] cdc_ncm 3-1:1.0: bind() failure [ 129.716962][ T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 129.743252][ T25] cdc_ncm 3-1:1.1: bind() failure [ 129.792287][ T25] usb 3-1: USB disconnect, device number 4 [ 129.845928][ T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.910036][ T5719] loop3: detected capacity change from 0 to 32768 [ 129.946621][ T5719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.159 (5719) [ 130.053146][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 130.058538][ T5154] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 130.086026][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.100863][ T5154] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 130.111068][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.118278][ T5719] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.140370][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.153976][ T5154] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 130.175891][ T5154] usb 2-1: USB disconnect, device number 6 [ 130.176518][ T5719] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 130.189093][ T58] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.222515][ T58] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.236461][ T5719] BTRFS info (device loop3): using free-space-tree [ 130.268270][ T58] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.281380][ T58] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.305922][ T58] usb 1-1: Manufacturer: syz [ 130.356036][ T58] usb 1-1: config 0 descriptor?? [ 130.374010][ T5734] loop4: detected capacity change from 0 to 2048 [ 130.698390][ T5734] syz.4.165 (5734) used greatest stack depth: 18000 bytes left [ 131.468002][ T5106] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.822126][ T5778] netlink: 'syz.4.174': attribute type 7 has an invalid length. [ 131.834197][ T5778] netlink: 256 bytes leftover after parsing attributes in process `syz.4.174'. [ 132.741262][ T5790] team0: Device gtp0 is of different type [ 132.743511][ T5793] loop0: detected capacity change from 0 to 2048 [ 132.748641][ T58] rc_core: IR keymap rc-hauppauge not found [ 132.799120][ T58] Registered IR keymap rc-empty [ 132.835353][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.893373][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.934219][ T58] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 132.987841][ T58] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 133.043202][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.091241][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.111268][ T5152] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.159081][ T5776] loop1: detected capacity change from 0 to 32768 [ 133.169304][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.194966][ T5107] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 133.215602][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.260999][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 133.278476][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.292033][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.299271][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324466][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 133.346600][ T5152] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 133.370643][ T5152] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 133.394450][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.410309][ T5152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 133.594029][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.617985][ T5152] usb 3-1: config 1 has no interface number 0 [ 133.625555][ T5152] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.636879][ T5152] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.654597][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.664902][ T5152] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 133.674237][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.730269][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.749274][ T5152] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 133.780237][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'. [ 133.804196][ T58] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 133.898390][ T58] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 133.960528][ T58] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.002774][ T5811] bridge0: port 3(macvlan2) entered blocking state [ 134.023521][ T58] usb 1-1: USB disconnect, device number 5 [ 134.075508][ T5811] bridge0: port 3(macvlan2) entered disabled state [ 134.103428][ T5811] macvlan2: entered allmulticast mode [ 134.138956][ T5811] macvlan2: entered promiscuous mode [ 134.224219][ T5814] macvlan2 (unregistering): left allmulticast mode [ 134.241285][ T5814] macvlan2 (unregistering): left promiscuous mode [ 134.261846][ T5814] bridge0: port 3(macvlan2) entered disabled state [ 134.299945][ T5152] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 134.853090][ T5820] syzkaller0: entered promiscuous mode [ 134.883186][ T5820] syzkaller0: entered allmulticast mode [ 134.922543][ T5802] loop3: detected capacity change from 0 to 32768 [ 134.963154][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.183 (5802) [ 134.978507][ T5152] IPVS: starting estimator thread 0... [ 135.016146][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.046365][ T5802] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.077244][ T5802] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 135.098024][ T5833] IPVS: using max 20 ests per chain, 48000 per kthread [ 135.106589][ T5802] BTRFS info (device loop3): using free-space-tree [ 135.203905][ T5107] Bluetooth: hci0: command tx timeout [ 135.260376][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 135.292877][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.341410][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.365999][ T8] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 135.483068][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.519464][ T29] audit: type=1804 audit(1720507091.932:7): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.183" name="/newroot/38/file1/bus" dev="loop3" ino=264 res=1 errno=0 [ 135.551551][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.598673][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.640367][ T46] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.680046][ T46] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.721707][ T5106] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.727941][ T46] usb 1-1: Manufacturer: syz [ 135.796580][ T46] usb 1-1: config 0 descriptor?? [ 136.350045][ T5858] loop3: detected capacity change from 0 to 2048 [ 136.662445][ T25] usb 3-1: USB disconnect, device number 5 [ 136.672053][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 136.937805][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 137.614880][ T5860] loop2: detected capacity change from 0 to 32768 [ 137.673134][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.026852][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 138.048684][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.082344][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 138.101574][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.133257][ T46] rc_core: IR keymap rc-hauppauge not found [ 138.146743][ T46] Registered IR keymap rc-empty [ 138.167381][ T25] usb 4-1: config 0 descriptor?? [ 138.176848][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.332755][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 138.397171][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.438352][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 138.479494][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 138.563253][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.613409][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.655092][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.708017][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.769163][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.838411][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.883856][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 138.945930][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.004914][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.074985][ T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.150396][ T46] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 139.181853][ T46] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.235808][ T46] usb 1-1: USB disconnect, device number 6 [ 139.797153][ T5872] loop0: detected capacity change from 0 to 32768 [ 140.206040][ T8] usb 4-1: USB disconnect, device number 5 [ 140.732962][ C0] DEBUG: waiting rtnl_mutex for 511 jiffies. [ 140.742476][ C0] task:syz.1.193 state:D stack:23800 pid:5854 tgid:5853 ppid:5102 flags:0x00000004 [ 140.752750][ C0] Call Trace: [ 140.756100][ C0] [ 140.759068][ C0] __schedule+0x1800/0x4a60 [ 140.763707][ C0] ? __pfx___schedule+0x10/0x10 [ 140.768607][ C0] ? __pfx_lock_release+0x10/0x10 [ 140.773707][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 140.779224][ C0] ? schedule+0x90/0x320 [ 140.783551][ C0] schedule+0x14b/0x320 [ 140.787770][ C0] schedule_preempt_disabled+0x13/0x30 [ 140.793328][ C0] __mutex_lock+0x6a4/0xd70 [ 140.797896][ C0] ? __mutex_lock+0x527/0xd70 [ 140.802649][ C0] ? tcx_prog_attach+0x11d/0x7a0 [ 140.807703][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 140.812794][ C0] ? __fget_files+0x29/0x470 [ 140.817662][ C0] ? get_rtnl_holder+0x144/0x190 [ 140.819883][ T5895] loop0: detected capacity change from 0 to 2048 [ 140.822637][ C0] tcx_prog_attach+0x11d/0x7a0 [ 140.822717][ C0] ? __fget_files+0x29/0x470 [ 140.822749][ C0] ? __pfx_tcx_prog_attach+0x10/0x10 [ 140.822789][ C0] ? bpf_prog_attach_check_attach_type+0x1d6/0x4b0 [ 140.822832][ C0] bpf_prog_attach+0x4e9/0x6e0 [ 140.822870][ C0] __sys_bpf+0x325/0x810 [ 140.822949][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 140.822998][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.823032][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.823064][ C0] ? do_syscall_64+0x100/0x230 [ 140.823093][ C0] __x64_sys_bpf+0x7c/0x90 [ 140.823124][ C0] do_syscall_64+0xf3/0x230 [ 140.823148][ C0] ? clear_bhb_loop+0x35/0x90 [ 140.895953][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.901929][ C0] RIP: 0033:0x7fb2a4775bd9 [ 140.906447][ C0] RSP: 002b:00007fb2a5498048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.915049][ C0] RAX: ffffffffffffffda RBX: 00007fb2a4903f60 RCX: 00007fb2a4775bd9 [ 140.923109][ C0] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000008 [ 140.931157][ C0] RBP: 00007fb2a47e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 140.939186][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.947227][ C0] R13: 000000000000000b R14: 00007fb2a4903f60 R15: 00007fffa6fb1878 [ 140.955320][ C0] [ 140.958372][ C0] DEBUG: waiting rtnl_mutex for 527 jiffies. [ 140.964442][ C0] task:syz.1.193 state:D stack:27424 pid:5855 tgid:5853 ppid:5102 flags:0x00000004 [ 140.974709][ C0] Call Trace: [ 140.978026][ C0] [ 140.980989][ C0] __schedule+0x1800/0x4a60 [ 140.985620][ C0] ? __pfx___schedule+0x10/0x10 [ 140.990526][ C0] ? __pfx_lock_release+0x10/0x10 [ 140.995634][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 141.001198][ C0] ? schedule+0x90/0x320 [ 141.005543][ C0] schedule+0x14b/0x320 [ 141.009771][ C0] schedule_preempt_disabled+0x13/0x30 [ 141.015336][ C0] __mutex_lock+0x6a4/0xd70 [ 141.020002][ C0] ? __mutex_lock+0x527/0xd70 [ 141.024812][ C0] ? tcx_prog_query+0x8a/0x140 [ 141.029647][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 141.034869][ C0] ? apparmor_capable+0x138/0x1b0 [ 141.039966][ C0] ? get_rtnl_holder+0x144/0x190 [ 141.045006][ C0] tcx_prog_query+0x8a/0x140 [ 141.049650][ C0] __sys_bpf+0x69b/0x810 [ 141.053970][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 141.058789][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.064928][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.071300][ C0] ? exc_page_fault+0x590/0x8c0 [ 141.076269][ C0] __x64_sys_bpf+0x7c/0x90 [ 141.080727][ C0] do_syscall_64+0xf3/0x230 [ 141.085357][ C0] ? clear_bhb_loop+0x35/0x90 [ 141.090077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.096051][ C0] RIP: 0033:0x7fb2a4775bd9 [ 141.100503][ C0] RSP: 002b:00007fb2a5477048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.108990][ C0] RAX: ffffffffffffffda RBX: 00007fb2a4904038 RCX: 00007fb2a4775bd9 [ 141.117066][ C0] RDX: 0000000000000040 RSI: 00000000200001c0 RDI: 0000000000000010 [ 141.125139][ C0] RBP: 00007fb2a47e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 141.133177][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.141176][ C0] R13: 000000000000006e R14: 00007fb2a4904038 R15: 00007fffa6fb1878 [ 141.149260][ C0] [ 141.152331][ C0] DEBUG: waiting rtnl_mutex for 542 jiffies. [ 141.158389][ C0] task:syz.1.193 state:D stack:26992 pid:5856 tgid:5853 ppid:5102 flags:0x00000004 [ 141.168665][ C0] Call Trace: [ 141.171996][ C0] [ 141.175028][ C0] __schedule+0x1800/0x4a60 [ 141.179599][ C0] ? __pfx___schedule+0x10/0x10 [ 141.184540][ C0] ? __pfx_lock_release+0x10/0x10 [ 141.189622][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 141.195171][ C0] ? schedule+0x90/0x320 [ 141.199466][ C0] schedule+0x14b/0x320 [ 141.203729][ C0] schedule_preempt_disabled+0x13/0x30 [ 141.209260][ C0] __mutex_lock+0x6a4/0xd70 [ 141.213862][ C0] ? __mutex_lock+0x527/0xd70 [ 141.218589][ C0] ? tcx_prog_detach+0x10f/0x6c0 [ 141.223577][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 141.228627][ C0] ? __pfx_lock_release+0x10/0x10 [ 141.233809][ C0] ? get_rtnl_holder+0x144/0x190 [ 141.238795][ C0] tcx_prog_detach+0x10f/0x6c0 [ 141.243617][ C0] ? __pfx_tcx_prog_detach+0x10/0x10 [ 141.248934][ C0] bpf_prog_detach+0x488/0x600 [ 141.253773][ C0] __sys_bpf+0x701/0x810 [ 141.258057][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 141.262848][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.268872][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.275266][ C0] ? exc_page_fault+0x590/0x8c0 [ 141.280176][ C0] __x64_sys_bpf+0x7c/0x90 [ 141.284762][ C0] do_syscall_64+0xf3/0x230 [ 141.289323][ C0] ? clear_bhb_loop+0x35/0x90 [ 141.294085][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.300032][ C0] RIP: 0033:0x7fb2a4775bd9 [ 141.304517][ C0] RSP: 002b:00007fb2a41ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.313026][ C0] RAX: ffffffffffffffda RBX: 00007fb2a4904110 RCX: 00007fb2a4775bd9 [ 141.321019][ C0] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000009 [ 141.329061][ C0] RBP: 00007fb2a47e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 141.337123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.345154][ C0] R13: 000000000000006e R14: 00007fb2a4904110 R15: 00007fffa6fb1878 [ 141.353237][ C0] [ 141.356267][ C0] DEBUG: holding rtnl_mutex for 621 jiffies. [ 141.362250][ C0] task:syz.4.189 state:D stack:24112 pid:5817 tgid:5817 ppid:5105 flags:0x00004006 [ 141.372488][ C0] Call Trace: [ 141.375829][ C0] [ 141.378775][ C0] __schedule+0x1800/0x4a60 [ 141.383400][ C0] ? __pfx___schedule+0x10/0x10 [ 141.388292][ C0] ? __pfx_lock_release+0x10/0x10 [ 141.393375][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.399317][ C0] ? schedule+0x90/0x320 [ 141.403645][ C0] schedule+0x14b/0x320 [ 141.407854][ C0] synchronize_rcu_expedited+0x684/0x830 [ 141.413569][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 141.419779][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 141.425131][ C0] ? __pfx___might_resched+0x10/0x10 [ 141.430452][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.436500][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 141.442610][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.449027][ C0] synchronize_rcu+0x11b/0x360 [ 141.453894][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 141.459274][ C0] lockdep_unregister_key+0x556/0x610 [ 141.464727][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 141.470669][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 141.475950][ C0] ? __qdisc_destroy+0x150/0x410 [ 141.480927][ C0] ? kfree+0x149/0x360 [ 141.485060][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 141.490768][ C0] __qdisc_destroy+0x165/0x410 [ 141.495779][ C0] dev_shutdown+0x9b/0x440 [ 141.500235][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 141.506640][ C0] ? rcu_is_watching+0x15/0xb0 [ 141.511452][ C0] ? __mod_timer+0xb89/0xeb0 [ 141.516114][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 141.522994][ C0] ? mark_lock+0x9a/0x360 [ 141.527388][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.533468][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.539855][ C0] ? queue_delayed_work_on+0x1eb/0x390 [ 141.545408][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 141.550663][ C0] unregister_netdevice_queue+0x303/0x370 [ 141.556453][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 141.562750][ C0] __tun_detach+0x6b6/0x1600 [ 141.567427][ C0] tun_chr_close+0x108/0x1b0 [ 141.572056][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 141.577234][ C0] __fput+0x24a/0x8a0 [ 141.581273][ C0] task_work_run+0x24f/0x310 [ 141.585939][ C0] ? __pfx_task_work_run+0x10/0x10 [ 141.591108][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 141.596906][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 141.602585][ C0] do_syscall_64+0x100/0x230 [ 141.607251][ C0] ? clear_bhb_loop+0x35/0x90 [ 141.611973][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.617928][ C0] RIP: 0033:0x7f3f8f175bd9 [ 141.622374][ C0] RSP: 002b:00007ffec485ad18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 141.630843][ C0] RAX: 0000000000000000 RBX: 00007f3f8f305a60 RCX: 00007f3f8f175bd9 [ 141.638872][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 141.646898][ C0] RBP: 00007f3f8f305a60 R08: 00007f3f8e001000 R09: 0000000cc485b03f [ 141.654987][ C0] R10: 00000000005f096c R11: 0000000000000246 R12: 0000000000020f13 [ 141.663027][ C0] R13: 0000000000000032 R14: 00007f3f8f305a60 R15: 00007f3f8f303f60 [ 141.671059][ C0] [ 141.674172][ C0] DEBUG: waiting rtnl_mutex for 648 jiffies. [ 141.680179][ C0] task:kworker/0:3 state:D stack:22128 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 141.690415][ C0] Workqueue: events linkwatch_event [ 141.695736][ C0] Call Trace: [ 141.699018][ C0] [ 141.701951][ C0] __schedule+0x1800/0x4a60 [ 141.706554][ C0] ? __pfx___schedule+0x10/0x10 [ 141.711445][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.717492][ C0] ? __pfx_lock_release+0x10/0x10 [ 141.722559][ C0] ? kick_pool+0x45c/0x620 [ 141.727044][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.732276][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 141.737566][ C0] ? schedule+0x90/0x320 [ 141.741849][ C0] schedule+0x14b/0x320 [ 141.746070][ C0] schedule_preempt_disabled+0x13/0x30 [ 141.751564][ C0] __mutex_lock+0x6a4/0xd70 [ 141.756140][ C0] ? __mutex_lock+0x527/0xd70 [ 141.760929][ C0] ? linkwatch_event+0xe/0x60 [ 141.765681][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 141.770755][ C0] ? get_rtnl_holder+0x144/0x190 [ 141.775775][ C0] ? process_scheduled_works+0x945/0x1830 [ 141.781550][ C0] linkwatch_event+0xe/0x60 [ 141.786142][ C0] process_scheduled_works+0xa2c/0x1830 [ 141.791756][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.797850][ C0] ? assign_work+0x364/0x3d0 [ 141.802499][ C0] worker_thread+0x86d/0xd40 [ 141.807223][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.813222][ C0] ? __kthread_parkme+0x169/0x1d0 [ 141.818321][ C0] ? __pfx_worker_thread+0x10/0x10 [ 141.823503][ C0] kthread+0x2f0/0x390 [ 141.827625][ C0] ? __pfx_worker_thread+0x10/0x10 [ 141.832756][ C0] ? __pfx_kthread+0x10/0x10 [ 141.837408][ C0] ret_from_fork+0x4b/0x80 [ 141.841880][ C0] ? __pfx_kthread+0x10/0x10 [ 141.846602][ C0] ret_from_fork_asm+0x1a/0x30 [ 141.851443][ C0] [ 141.854526][ C0] [ 141.854526][ C0] Showing all locks held in the system: [ 141.862270][ C0] 4 locks held by kworker/0:0/8: [ 141.867536][ C0] #0: ffff888015082948 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 141.878611][ C0] #1: ffffc900000d7d00 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 141.892016][ C0] #2: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 141.902243][ C0] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 141.912265][ C0] 5 locks held by kworker/u8:0/11: [ 141.917448][ C0] 2 locks held by kworker/u8:1/12: [ 141.922600][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 141.934382][ C0] #1: ffffc90000117d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 141.945221][ C0] 2 locks held by kworker/u8:5/1272: [ 141.950517][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 141.962303][ C0] #1: ffffc9000457fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 141.973389][ C0] 2 locks held by getty/4853: [ 141.978071][ C0] #0: ffff88802a9240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 141.987948][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 141.998184][ C0] 1 lock held by syz-executor/5097: [ 142.003480][ C0] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 142.014485][ C0] 3 locks held by kworker/0:3/5152: [ 142.019688][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 142.030748][ C0] #1: ffffc90003c07d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 142.041860][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 142.050977][ C0] 2 locks held by syz.4.189/5817: [ 142.056053][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 142.065138][ C0] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 142.076185][ C0] 1 lock held by syz.1.193/5854: [ 142.081153][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_attach+0x11d/0x7a0 [ 142.090493][ C0] 1 lock held by syz.1.193/5855: [ 142.095499][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_query+0x8a/0x140 [ 142.104681][ C0] 1 lock held by syz.1.193/5856: [ 142.109776][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_detach+0x10f/0x6c0 [ 142.119097][ C0] 1 lock held by syz.2.201/5879: [ 142.124115][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 142.133734][ C0] 1 lock held by syz.2.201/5880: [ 142.138697][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 142.148280][ C0] 1 lock held by syz.2.201/5881: [ 142.153310][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 142.162880][ C0] 1 lock held by syz.3.204/5887: [ 142.167897][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 142.176815][ C0] [ 142.179167][ C0] ============================================= [ 142.179167][ C0] [ 142.263778][ T5107] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 142.380731][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 142.493369][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 142.669847][ T5880] bridge0: port 3(macvlan2) entered blocking state [ 142.688827][ T5880] bridge0: port 3(macvlan2) entered disabled state [ 142.696972][ T5880] macvlan2: entered allmulticast mode [ 142.704960][ T5880] macvlan2: entered promiscuous mode [ 142.928846][ T29] audit: type=1326 audit(1720507099.332:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.012729][ T5910] loop3: detected capacity change from 0 to 1024 [ 143.021325][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.046582][ T29] audit: type=1326 audit(1720507099.332:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.064950][ T5910] EXT4-fs: Ignoring removed orlov option [ 143.117961][ T29] audit: type=1326 audit(1720507099.342:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.140647][ T5910] EXT4-fs: Ignoring removed oldalloc option [ 143.169179][ T5910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.195673][ T29] audit: type=1326 audit(1720507099.342:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.249249][ T5910] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.273909][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.314267][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.325954][ T5910] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 143.353274][ T29] audit: type=1326 audit(1720507099.352:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.388034][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.403766][ T5910] EXT4-fs (loop3): invalid journal inode [ 143.430214][ T5910] EXT4-fs (loop3): can't get journal size [ 143.453319][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.477150][ T29] audit: type=1326 audit(1720507099.352:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.478197][ T5910] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.211: blocks 6-6 from inode overlap system zone [ 143.553913][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.589079][ T5910] EXT4-fs (loop3): failed to initialize system zone (-117) [ 143.613531][ T46] usb 2-1: config 0 descriptor?? [ 143.634665][ T29] audit: type=1326 audit(1720507099.352:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.688663][ T5910] EXT4-fs (loop3): mount failed [ 143.774090][ T29] audit: type=1326 audit(1720507099.362:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 143.904548][ T29] audit: type=1326 audit(1720507099.362:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 144.033045][ T29] audit: type=1326 audit(1720507099.362:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dca775bd9 code=0x7ffc0000 [ 144.136993][ T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 144.167647][ T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 144.235473][ T46] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.329965][ T5107] Bluetooth: hci0: command tx timeout [ 144.394500][ T5107] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 144.459318][ T5912] loop2: detected capacity change from 0 to 32768 [ 144.603185][ T5152] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.611162][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 144.682633][ T5935] team0: entered promiscuous mode [ 144.701141][ T5935] team_slave_0: entered promiscuous mode [ 144.716520][ T5935] team_slave_1: entered promiscuous mode [ 144.833031][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 144.841783][ T5152] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.892698][ T5152] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.925309][ T5152] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.968531][ T5152] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 145.020037][ T5152] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 145.078627][ T5152] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.121078][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.174093][ T5152] usb 4-1: Product: syz [ 145.190229][ T5152] usb 4-1: Manufacturer: syz [ 145.230790][ T5152] usb 4-1: SerialNumber: syz [ 145.351011][ T5934] team0: left promiscuous mode [ 145.379342][ T5934] team_slave_0: left promiscuous mode [ 145.407001][ T5934] team_slave_1: left promiscuous mode [ 145.500081][ T5152] cdc_ncm 4-1:1.0: bind() failure [ 145.544388][ T5152] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 145.581254][ T5152] cdc_ncm 4-1:1.1: bind() failure [ 145.634183][ T5152] usb 4-1: USB disconnect, device number 6 [ 145.823176][ T5158] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 145.886066][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.004299][ T5158] usb 2-1: device descriptor read/64, error -32 [ 146.054039][ T928] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.075630][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 146.105654][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.166868][ T8] usb 1-1: config 0 descriptor?? [ 146.284450][ T5158] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 146.302072][ T928] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.321581][ T928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.377818][ T928] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.407696][ T5107] Bluetooth: hci0: command tx timeout [ 146.436437][ T928] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.454472][ T928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.464387][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.473488][ T928] usb 3-1: Product: syz [ 146.490797][ T928] usb 3-1: Manufacturer: syz [ 146.505468][ T928] usb 3-1: SerialNumber: syz [ 146.513099][ T5158] usb 2-1: device descriptor read/64, error -32 [ 146.545919][ T928] cdc_ncm 3-1:1.0: skipping garbage [ 146.792252][ T8] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 147.501342][ T5158] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 147.524383][ T8] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 147.568302][ T8] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 147.594448][ T5158] usb 2-1: device descriptor read/8, error -71 [ 147.642186][ T8] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 147.701774][ T928] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 147.717539][ T8] usb 1-1: USB disconnect, device number 7 [ 147.723622][ T928] cdc_ncm 3-1:1.0: bind() failure [ 147.737885][ T928] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 147.758251][ T928] cdc_ncm 3-1:1.1: bind() failure [ 147.806010][ T928] usb 3-1: USB disconnect, device number 6 [ 148.088063][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 148.383250][ T928] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.585681][ T46] usb 2-1: USB disconnect, device number 7 [ 148.619019][ T928] usb 5-1: Using ep0 maxpacket: 32 [ 148.678845][ T928] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.750798][ T928] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 148.793026][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.810083][ T928] usb 5-1: config 0 descriptor?? [ 148.834269][ T928] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 148.951373][ T5977] loop1: detected capacity change from 0 to 32768 [ 149.364182][ T5997] 9pnet_fd: Insufficient options for proto=fd [ 149.459912][ T5997] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 149.505296][ T5997] bond0: (slave bond_slave_0): Releasing backup interface [ 151.089125][ T58] usb 5-1: USB disconnect, device number 6 [ 151.226520][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 151.369318][ T6028] bridge0: port 3(macvlan2) entered blocking state [ 151.397782][ T6028] bridge0: port 3(macvlan2) entered disabled state [ 151.422235][ T6028] macvlan2: entered allmulticast mode [ 151.442393][ T6028] macvlan2: entered promiscuous mode [ 151.464241][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.655887][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.674249][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.707832][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.729221][ T8] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.744421][ T6036] 9pnet_fd: Insufficient options for proto=fd [ 151.760421][ T6036] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 151.773448][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.788854][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.798998][ T8] usb 3-1: Product: syz [ 151.809769][ T6036] bond0: (slave bond_slave_0): Releasing backup interface [ 151.819516][ T8] usb 3-1: Manufacturer: syz [ 151.832414][ T8] usb 3-1: SerialNumber: syz [ 151.862186][ T8] cdc_ncm 3-1:1.0: skipping garbage [ 152.884704][ T6030] loop0: detected capacity change from 0 to 32768 [ 153.133361][ T8] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 153.139502][ T8] cdc_ncm 3-1:1.0: bind() failure [ 153.151767][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 153.163208][ T8] cdc_ncm 3-1:1.1: bind() failure [ 153.183925][ T8] usb 3-1: USB disconnect, device number 7 [ 154.723476][ T5107] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 154.732220][ T5107] Bluetooth: hci0: Injecting HCI hardware error event [ 154.740777][ T5107] Bluetooth: hci0: hardware error 0x00 [ 156.241742][ T6082] loop3: detected capacity change from 0 to 32768 [ 156.803548][ T5107] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 157.164907][ T6104] loop1: detected capacity change from 0 to 32768 [ 157.937335][ T6117] loop4: detected capacity change from 0 to 32768 [ 158.005259][ T6117] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.276 (6117) [ 158.142399][ T6117] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 158.196054][ T6117] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.238829][ T6117] BTRFS info (device loop4): using free-space-tree [ 158.773069][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.817126][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 158.817147][ T29] audit: type=1804 audit(1720507115.232:39): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.276" name="/newroot/66/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 158.959151][ T928] IPVS: starting estimator thread 0... [ 158.964997][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 158.978746][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.999778][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.025254][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.046969][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.064647][ T6168] IPVS: using max 18 ests per chain, 43200 per kthread [ 159.070408][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 159.098984][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.119923][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.144416][ T58] usb 2-1: Product: syz [ 159.148663][ T58] usb 2-1: Manufacturer: syz [ 159.170349][ T58] usb 2-1: SerialNumber: syz [ 159.296054][ T6172] loop2: detected capacity change from 0 to 1024 [ 159.324444][ T6172] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 159.346168][ T6172] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 159.357430][ T6172] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 159.371693][ T6172] JBD2: no valid journal superblock found [ 159.386456][ T6172] EXT4-fs (loop2): Could not load journal inode [ 159.418742][ T58] cdc_ncm 2-1:1.0: bind() failure [ 159.446240][ T58] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 159.461014][ T58] cdc_ncm 2-1:1.1: bind() failure [ 159.485594][ T58] usb 2-1: USB disconnect, device number 8 [ 160.609776][ T5105] BTRFS info (device loop4): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 161.476242][ T928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.196712][ T6213] loop0: detected capacity change from 0 to 1024 [ 162.278401][ T6213] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 162.292605][ T6185] loop1: detected capacity change from 0 to 32768 [ 162.301653][ T6213] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 162.320608][ T6213] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 162.337910][ T928] usb 3-1: device descriptor read/64, error -71 [ 162.337980][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 162.493608][ T6213] JBD2: no valid journal superblock found [ 162.519724][ T6213] EXT4-fs (loop0): Could not load journal inode [ 162.532370][ T6218] bridge0: port 3(macvlan2) entered blocking state [ 162.561784][ T6218] bridge0: port 3(macvlan2) entered disabled state [ 162.613073][ T6218] macvlan2: entered allmulticast mode [ 162.623795][ T6218] macvlan2: entered promiscuous mode [ 162.773520][ T928] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.043539][ T928] usb 3-1: device descriptor read/64, error -71 [ 163.193534][ T928] usb usb3-port1: attempt power cycle [ 163.690276][ T928] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.763987][ T928] usb 3-1: device descriptor read/8, error -71 [ 163.846389][ T6221] loop3: detected capacity change from 0 to 32768 [ 163.867754][ T6221] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.303 (6221) [ 163.939661][ T6221] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 164.006765][ T6221] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 164.044141][ T6221] BTRFS info (device loop3): using free-space-tree [ 164.053405][ T928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.103697][ T928] usb 3-1: device descriptor read/8, error -71 [ 164.224092][ T928] usb usb3-port1: unable to enumerate USB device [ 164.468239][ T29] audit: type=1804 audit(1720507120.882:40): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.303" name="/newroot/60/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 164.908084][ T6228] loop0: detected capacity change from 0 to 32768 [ 166.457928][ T5106] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 166.472262][ T6278] loop1: detected capacity change from 0 to 1024 [ 166.503142][ T6278] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 166.533484][ T6278] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 166.563816][ T6278] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 166.576455][ T6278] JBD2: no valid journal superblock found [ 166.583378][ T6278] EXT4-fs (loop1): Could not load journal inode [ 166.798275][ T928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.975715][ T928] usb 1-1: device descriptor read/64, error -71 [ 167.274006][ T928] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.458056][ T6274] loop2: detected capacity change from 0 to 32768 [ 167.484560][ T928] usb 1-1: device descriptor read/64, error -71 [ 167.808151][ T928] usb usb1-port1: attempt power cycle [ 168.390806][ T6301] netlink: 'syz.3.321': attribute type 7 has an invalid length. [ 168.421880][ T6301] netlink: 256 bytes leftover after parsing attributes in process `syz.3.321'. [ 168.523417][ T928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.584083][ T928] usb 1-1: device descriptor read/8, error -71 [ 168.873072][ T928] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.946522][ T928] usb 1-1: device descriptor read/8, error -71 [ 169.093620][ T928] usb usb1-port1: unable to enumerate USB device [ 169.308739][ T6322] loop4: detected capacity change from 0 to 2048 [ 169.507256][ T6322] syz.4.325 (6322) used greatest stack depth: 17624 bytes left [ 170.784211][ T6308] loop3: detected capacity change from 0 to 32768 [ 171.035243][ T6347] netlink: 'syz.4.333': attribute type 7 has an invalid length. [ 171.043572][ T6347] netlink: 256 bytes leftover after parsing attributes in process `syz.4.333'. [ 171.952071][ T6365] loop0: detected capacity change from 0 to 2048 [ 172.089570][ T6333] loop1: detected capacity change from 0 to 32768 [ 172.515492][ T58] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.924170][ T58] usb 4-1: device descriptor read/64, error -71 [ 173.323314][ T58] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.503109][ T58] usb 4-1: device descriptor read/64, error -71 [ 174.394450][ T58] usb usb4-port1: attempt power cycle [ 174.698237][ T6399] netlink: 'syz.2.347': attribute type 7 has an invalid length. [ 174.723498][ T6399] netlink: 256 bytes leftover after parsing attributes in process `syz.2.347'. [ 174.813397][ T58] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.814951][ T6402] kvm: emulating exchange as write [ 174.884326][ T58] usb 4-1: device descriptor read/8, error -71 [ 175.446916][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 175.688016][ T6421] loop0: detected capacity change from 0 to 2048 [ 175.913379][ T58] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.974779][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 176.001519][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.027567][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76 [ 176.082431][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.104845][ T58] usb 4-1: Product: syz [ 176.109092][ T58] usb 4-1: Manufacturer: syz [ 176.143662][ T58] usb 4-1: SerialNumber: syz [ 176.151834][ T58] usb 4-1: config 0 descriptor?? [ 176.178486][ T58] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 176.333332][ T5158] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.389145][ T4532] bcm5974 4-1:0.0: could not read from device [ 176.421231][ T4532] bcm5974 4-1:0.0: could not read from device [ 176.472206][ T4532] bcm5974 4-1:0.0: could not read from device [ 176.479734][ T58] usb 4-1: USB disconnect, device number 10 [ 176.524153][ T5158] usb 2-1: device descriptor read/64, error -71 [ 176.823259][ T5158] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.993393][ T5158] usb 2-1: device descriptor read/64, error -71 [ 177.154979][ T5158] usb usb2-port1: attempt power cycle [ 177.161778][ T6458] loop2: detected capacity change from 0 to 512 [ 177.237206][ T6461] loop0: detected capacity change from 0 to 2048 [ 177.254269][ T6456] netlink: 'syz.3.362': attribute type 7 has an invalid length. [ 177.281462][ T6458] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 177.283111][ T6456] netlink: 256 bytes leftover after parsing attributes in process `syz.3.362'. [ 177.405972][ T6458] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.363: invalid indirect mapped block 8 (level 2) [ 177.537490][ T6458] EXT4-fs (loop2): Remounting filesystem read-only [ 177.545262][ T6458] EXT4-fs (loop2): 1 truncate cleaned up [ 177.580752][ T6458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.614892][ T5158] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.664058][ T5158] usb 2-1: device descriptor read/8, error -71 [ 178.470318][ T5103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.533077][ T5158] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.614264][ T5158] usb 2-1: device descriptor read/8, error -71 [ 178.743373][ T5158] usb usb2-port1: unable to enumerate USB device [ 178.841349][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'. [ 179.153012][ T5158] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 179.351243][ T6510] loop1: detected capacity change from 0 to 2048 [ 179.363818][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 179.381890][ T5158] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.431882][ T5158] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76 [ 179.483995][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.518847][ T5158] usb 1-1: Product: syz [ 179.540555][ T5158] usb 1-1: Manufacturer: syz [ 179.556256][ T5158] usb 1-1: SerialNumber: syz [ 179.580143][ T5158] usb 1-1: config 0 descriptor?? [ 179.612606][ T5158] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 179.971291][ T4532] bcm5974 1-1:0.0: could not read from device [ 180.011098][ T4532] bcm5974 1-1:0.0: could not read from device [ 180.751698][ T5158] usb 1-1: USB disconnect, device number 12 [ 180.939052][ T6521] loop4: detected capacity change from 0 to 512 [ 180.987306][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 181.094293][ T6521] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 181.157783][ T6521] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.379: invalid indirect mapped block 8 (level 2) [ 181.190736][ T6521] EXT4-fs (loop4): Remounting filesystem read-only [ 181.205671][ T6521] EXT4-fs (loop4): 1 truncate cleaned up [ 181.233737][ T6521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.544748][ T6552] loop3: detected capacity change from 0 to 2048 [ 181.644049][ T58] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.686157][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.843910][ T58] usb 3-1: device descriptor read/64, error -71 [ 183.803151][ T58] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.842602][ T6570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 183.963402][ T58] usb 3-1: device descriptor read/64, error -71 [ 183.988734][ T6577] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 183.988755][ T6577] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 183.988773][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.0.394 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 183.988792][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 183.988801][ T6577] RIP: 0010:xdp_do_generic_redirect+0x7e/0x8f0 [ 183.988831][ T6577] Code: 3c 01 00 74 12 48 89 df e8 9f 26 90 f8 48 b8 00 00 00 00 00 fc ff df 48 89 5c 24 48 48 8b 1b 4c 8d 73 38 4d 89 f7 49 c1 ef 03 <41> 0f b6 04 07 84 c0 0f 85 37 06 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 183.988844][ T6577] RSP: 0018:ffffc90003e277f8 EFLAGS: 00010202 [ 183.988858][ T6577] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100cd97300 [ 183.988870][ T6577] RDX: ffffc90008e09000 RSI: 0000000000001b6f RDI: 0000000000001b70 [ 183.988880][ T6577] RBP: ffffc90003e279b0 R08: 0000000000000005 R09: ffffffff89601c5e [ 183.988891][ T6577] R10: 0000000000000003 R11: ffff888066cb8000 R12: ffffc90003e27b60 [ 183.988902][ T6577] R13: 1ffff920007c4f1c R14: 0000000000000038 R15: 0000000000000007 [ 183.988913][ T6577] FS: 00007f524f7296c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 183.988927][ T6577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.988938][ T6577] CR2: 000000002000f000 CR3: 000000007856a000 CR4: 00000000003506f0 [ 183.988951][ T6577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.988961][ T6577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.988971][ T6577] Call Trace: [ 183.988977][ T6577] [ 183.988983][ T6577] ? __die_body+0x88/0xe0 [ 183.989007][ T6577] ? die_addr+0x108/0x140 [ 183.989032][ T6577] ? exc_general_protection+0x3dd/0x5d0 [ 183.989062][ T6577] ? asm_exc_general_protection+0x26/0x30 [ 183.989084][ T6577] ? do_xdp_generic+0x7ee/0xb90 [ 183.989106][ T6577] ? xdp_do_generic_redirect+0x7e/0x8f0 [ 183.989130][ T6577] ? xdp_do_generic_redirect+0x34/0x8f0 [ 183.989158][ T6577] do_xdp_generic+0x884/0xb90 [ 183.989183][ T6577] ? __pfx_do_xdp_generic+0x10/0x10 [ 183.989202][ T6577] ? tun_get_user+0x26c8/0x4560 [ 183.989225][ T6577] ? tun_get_user+0x26c8/0x4560 [ 183.989240][ T6577] tun_get_user+0x2805/0x4560 [ 183.989270][ T6577] ? __pfx_tun_get_user+0x10/0x10 [ 183.989289][ T6577] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.989305][ T6577] ? tun_get+0x1e/0x2f0 [ 183.989328][ T6577] ? tun_get+0x1e/0x2f0 [ 183.989342][ T6577] ? tun_get+0x27d/0x2f0 [ 183.989358][ T6577] tun_chr_write_iter+0x113/0x1f0 [ 183.989375][ T6577] vfs_write+0xa72/0xc90 [ 183.989392][ T6577] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 183.989408][ T6577] ? __pfx_vfs_write+0x10/0x10 [ 183.989421][ T6577] ? do_futex+0x392/0x560 [ 183.989457][ T6577] ksys_write+0x1a0/0x2c0 [ 183.989475][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 183.989490][ T6577] ? do_syscall_64+0x100/0x230 [ 183.989506][ T6577] ? do_syscall_64+0xb6/0x230 [ 183.989522][ T6577] do_syscall_64+0xf3/0x230 [ 183.989536][ T6577] ? clear_bhb_loop+0x35/0x90 [ 183.989557][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.989576][ T6577] RIP: 0033:0x7f524e97475f [ 183.989589][ T6577] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 183.989601][ T6577] RSP: 002b:00007f524f729010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.989616][ T6577] RAX: ffffffffffffffda RBX: 00007f524eb03f60 RCX: 00007f524e97475f [ 183.989628][ T6577] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 00000000000000c8 [ 183.989638][ T6577] RBP: 00007f524e9e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 183.989648][ T6577] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 183.989657][ T6577] R13: 000000000000000b R14: 00007f524eb03f60 R15: 00007ffcd4ed95e8 [ 183.989676][ T6577] [ 183.989681][ T6577] Modules linked in: [ 183.989708][ T6577] ---[ end trace 0000000000000000 ]--- [ 184.373999][ T6577] RIP: 0010:xdp_do_generic_redirect+0x7e/0x8f0 [ 184.380175][ T6577] Code: 3c 01 00 74 12 48 89 df e8 9f 26 90 f8 48 b8 00 00 00 00 00 fc ff df 48 89 5c 24 48 48 8b 1b 4c 8d 73 38 4d 89 f7 49 c1 ef 03 <41> 0f b6 04 07 84 c0 0f 85 37 06 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 184.399841][ T6577] RSP: 0018:ffffc90003e277f8 EFLAGS: 00010202 [ 184.405954][ T6577] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100cd97300 [ 184.413970][ T6577] RDX: ffffc90008e09000 RSI: 0000000000001b6f RDI: 0000000000001b70 [ 184.421967][ T6577] RBP: ffffc90003e279b0 R08: 0000000000000005 R09: ffffffff89601c5e [ 184.429999][ T6577] R10: 0000000000000003 R11: ffff888066cb8000 R12: ffffc90003e27b60 [ 184.438012][ T6577] R13: 1ffff920007c4f1c R14: 0000000000000038 R15: 0000000000000007 [ 184.446041][ T6577] FS: 00007f524f7296c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 184.455009][ T6577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.461615][ T6577] CR2: 000000002000f000 CR3: 000000007856a000 CR4: 00000000003506f0 [ 184.469609][ T6577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.477604][ T6577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.485618][ T6577] Kernel panic - not syncing: Fatal exception in interrupt [ 184.493099][ T6577] Kernel Offset: disabled [ 184.497444][ T6577] Rebooting in 86400 seconds..