last executing test programs: 7.590390892s ago: executing program 4 (id=591): socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x1c4, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x18e, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e"}}}}}}, 0x0) 7.342817883s ago: executing program 4 (id=593): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.906949246s ago: executing program 2 (id=601): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a531cef5"}]}}, 0x0}, 0x0) 5.40295946s ago: executing program 4 (id=608): syz_emit_vhci(0x0, 0x9) 5.142025298s ago: executing program 4 (id=610): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_create(0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x1}, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000200), 0x0, 0xa122, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES8=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x1002, &(0x7f00000004c0)=""/4098, 0x0, 0xc}, 0x90) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioperm(0x8000000000000001, 0x2, 0x11001) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e", 0x3c, 0x0) ioctl$VT_OPENQRY(r4, 0x4b4c, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='contention_end\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x149041, 0x0) write$rfkill(r6, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) r7 = socket$rds(0x15, 0x5, 0x0) sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000037980)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1}, 0x40) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.838195902s ago: executing program 3 (id=611): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60faef2cacc01e4d7e7b27f8b0f4dbc1fde22bed4446377541a15dc8a2d0f1146c6c2ad4868908c8982f6ab02197684785", 0x50}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0) 4.274849934s ago: executing program 2 (id=613): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, 0x0) 4.157780134s ago: executing program 4 (id=614): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nodiscard}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@barrier}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x2000040, &(0x7f0000000380)=ANY=[], 0xfe, 0xc3a, &(0x7f0000000f00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.1575261s ago: executing program 0 (id=615): socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x1c5, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x18f, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e82"}}}}}}, 0x0) 4.022781419s ago: executing program 0 (id=616): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90}, 0x90) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.943205013s ago: executing program 2 (id=617): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60faef2cacc01e4d7e7b27f8b0f4dbc1fde22bed4446377541a15dc8a2d0f1146c6c2ad4868908c8982f6ab02197684785", 0x50}], 0x1}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0) 3.784368139s ago: executing program 3 (id=618): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.783410589s ago: executing program 0 (id=619): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r1, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r1}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010", @ANYBLOB, @ANYBLOB, @ANYRESHEX=r2], 0x48}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) epoll_pwait2(r8, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x15, 0x92, &(0x7f0000000180)="888c6e59fe492e21545c45ab4c546b49458e0233fb", &(0x7f0000000200)=""/146, 0x0, 0x0, 0x0, 0xe0, 0x0, &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5defe75ccc974a1e438a174d3b8a31700084d38a2999e411d22173072d8349a60d11a0be517e22f947d939b6ef3ae82493368e102bcb39bf39dedcf76fb46c4d476136c4a87303f9be09c212ece955d9c19d27558223d6741d2d4352a261c5e350f767b33dbc89f50802edc896559f28f05", 0x3}, 0x4c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x14}, {0x6}]}) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000140)) ftruncate(r10, 0x4) 3.782897584s ago: executing program 2 (id=620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 3.681421435s ago: executing program 1 (id=621): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000280)={[{@shortname_lower}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 3.54393829s ago: executing program 1 (id=622): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f00000001c0)=0x956, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) r6 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x100000}, 0x5, 0x1, 0x1, r6, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) accept4(r7, 0x0, 0x0, 0x0) 3.413116443s ago: executing program 2 (id=623): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2655, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.136161906s ago: executing program 2 (id=624): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a531cef5"}]}}, 0x0}, 0x0) 2.13507994s ago: executing program 0 (id=625): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) close(0x3) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x541b, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x40a0ae49, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000002e81c86ae13756360200000048bcaf77aebfcd84ce245e23195675bac9fe8b4955ff67e9f6e79557c5155d5dbd1d30f70fd5f7ab1c87c4f005bf68242564fddfbecd66fa63245f6364043b8f23738cd9f8d7f5549e0cdfcc40560b46cd983822"]) 2.07067847s ago: executing program 3 (id=626): socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x1c5, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x18f, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e82"}}}}}}, 0x0) 1.974495986s ago: executing program 1 (id=627): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, 0x0) 1.80390542s ago: executing program 3 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2c}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) dup2(r1, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 1.568060359s ago: executing program 0 (id=629): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x48) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c0005"], 0x398}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x6) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket(0x26, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bc000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x269, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "5adfa2", 0x233, 0x21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x2, 0x7}, @dstopts={0x6, 0x9, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}, @generic={0x8, 0x23, "43e39f62f98ee644216b8dac77ba30d888a12088a807fe31e13a4d27f29cc4b196c850"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x1a1129f5}]}, @routing={0x2c, 0x6, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast2]}, @hopopts={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x2}]}, @dstopts={0x0, 0x10, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x4, [0x3e, 0xfe85, 0xb, 0x2, 0x4, 0x6, 0x5, 0x5, 0xffff]}}]}, @hopopts={0x29, 0x6, '\x00', [@calipso={0x7, 0x30, {0x901945bd11bce63e, 0xa, 0xe, 0x5, [0xe3, 0xffff, 0x6, 0x33af6623, 0x67]}}, @ra]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x9, 0x5, "a34f52", 0x9, "845bdb"}, "baea5336428e82d44eab180e9284a6581920ad2d5298704e7e9c95ed9229559fe9652172fed0362491143cce4da8f6ef6a4f135489399a6a3cbe6969c429712e83b40139e4a0162f67f8d6c6a7c85e81c72e141acce5469835418ac786ac5a58a340f14e2aa6d0ea33ec5132199babee59878e24e50e7ef7a9e72ed28e6d567934d44a918ec071836849ff3d771ef5d5acb1b11e0333fad6df8abfb5c3ccc0fa9f506ffa10cc86bf6e0f57"}}}}}}, 0x0) 1.567622421s ago: executing program 1 (id=630): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.559233144s ago: executing program 4 (id=631): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x480000, 0x3, 0x0, 0x0, 0x4dd, 0x7, 0x762}, &(0x7f0000000100)={0x40000}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r1 = socket(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 748.427843ms ago: executing program 3 (id=632): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) r3 = fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x48001059, r5, 0x0) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r7, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e24, 0x7fff, @mcast2, 0x5}], 0x38) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x8829, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18001f7cb8480000000000000085000063013800000000003354000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r12 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) close(0x3) 556.952351ms ago: executing program 1 (id=633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 193.715634ms ago: executing program 0 (id=634): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 33.72973ms ago: executing program 1 (id=635): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r1, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r1}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010", @ANYBLOB, @ANYBLOB, @ANYRESHEX=r2], 0x48}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) epoll_pwait2(r8, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x15, 0x92, &(0x7f0000000180)="888c6e59fe492e21545c45ab4c546b49458e0233fb", &(0x7f0000000200)=""/146, 0x0, 0x0, 0x0, 0xe0, 0x0, &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5defe75ccc974a1e438a174d3b8a31700084d38a2999e411d22173072d8349a60d11a0be517e22f947d939b6ef3ae82493368e102bcb39bf39dedcf76fb46c4d476136c4a87303f9be09c212ece955d9c19d27558223d6741d2d4352a261c5e350f767b33dbc89f50802edc896559f28f05", 0x3}, 0x4c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x14}, {0x6}]}) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000140)) ftruncate(r10, 0x4) 0s ago: executing program 3 (id=636): close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 53.946403][ T5211] cgroup: Unknown subsys name 'net' [ 54.080216][ T5211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.392831][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.644746][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.653190][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.653996][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.660851][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.677232][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.685119][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.693341][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.700703][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.703791][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.710837][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.717083][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.723642][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.737024][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.739338][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.749613][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.752613][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.766121][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.774379][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.793084][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.804829][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.823761][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.832013][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.841723][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.849116][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.897770][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.906034][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.921082][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.929479][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.937752][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.945485][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.326490][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 58.337515][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 58.499094][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 58.535751][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.543127][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.550455][ T5221] bridge_slave_0: entered allmulticast mode [ 58.557931][ T5221] bridge_slave_0: entered promiscuous mode [ 58.567667][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 58.608106][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.615509][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.622661][ T5231] bridge_slave_0: entered allmulticast mode [ 58.629880][ T5231] bridge_slave_0: entered promiscuous mode [ 58.644692][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.651798][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.659391][ T5221] bridge_slave_1: entered allmulticast mode [ 58.666501][ T5221] bridge_slave_1: entered promiscuous mode [ 58.696086][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.703530][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.710626][ T5231] bridge_slave_1: entered allmulticast mode [ 58.717674][ T5231] bridge_slave_1: entered promiscuous mode [ 58.764983][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.801241][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 58.813666][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.828429][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.861622][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.951664][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.958890][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.967228][ T5225] bridge_slave_0: entered allmulticast mode [ 58.974505][ T5225] bridge_slave_0: entered promiscuous mode [ 58.981842][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.989338][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.996877][ T5225] bridge_slave_1: entered allmulticast mode [ 59.003727][ T5225] bridge_slave_1: entered promiscuous mode [ 59.014442][ T5221] team0: Port device team_slave_0 added [ 59.031258][ T5231] team0: Port device team_slave_0 added [ 59.039842][ T5231] team0: Port device team_slave_1 added [ 59.063665][ T5221] team0: Port device team_slave_1 added [ 59.069590][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.079954][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.087158][ T5236] bridge_slave_0: entered allmulticast mode [ 59.095004][ T5236] bridge_slave_0: entered promiscuous mode [ 59.146642][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.157082][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.164322][ T5236] bridge_slave_1: entered allmulticast mode [ 59.170990][ T5236] bridge_slave_1: entered promiscuous mode [ 59.178962][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.186109][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.212539][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.235210][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.242372][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.249564][ T5229] bridge_slave_0: entered allmulticast mode [ 59.256469][ T5229] bridge_slave_0: entered promiscuous mode [ 59.266983][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.296570][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.303886][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.330064][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.349175][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.356406][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.363881][ T5229] bridge_slave_1: entered allmulticast mode [ 59.370585][ T5229] bridge_slave_1: entered promiscuous mode [ 59.384957][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.406410][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.413411][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.439392][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.452074][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.459085][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.485009][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.556435][ T5225] team0: Port device team_slave_0 added [ 59.569692][ T5225] team0: Port device team_slave_1 added [ 59.578364][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.600757][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.613805][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.634350][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.655554][ T5231] hsr_slave_0: entered promiscuous mode [ 59.661724][ T5231] hsr_slave_1: entered promiscuous mode [ 59.720682][ T5236] team0: Port device team_slave_0 added [ 59.729719][ T5236] team0: Port device team_slave_1 added [ 59.738328][ T5221] hsr_slave_0: entered promiscuous mode [ 59.744401][ T5233] Bluetooth: hci0: command tx timeout [ 59.750841][ T5221] hsr_slave_1: entered promiscuous mode [ 59.757526][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.765382][ T5221] Cannot create hsr debugfs directory [ 59.785374][ T5229] team0: Port device team_slave_0 added [ 59.791803][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.799498][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.823292][ T5233] Bluetooth: hci2: command tx timeout [ 59.825575][ T55] Bluetooth: hci1: command tx timeout [ 59.836531][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.879702][ T5229] team0: Port device team_slave_1 added [ 59.898009][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.905331][ T55] Bluetooth: hci3: command tx timeout [ 59.906304][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.937351][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.978958][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.986221][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.992984][ T55] Bluetooth: hci4: command tx timeout [ 60.013096][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.058263][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.065500][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.092726][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.105664][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.112621][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.139168][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.185050][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.191999][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.218488][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.283482][ T5225] hsr_slave_0: entered promiscuous mode [ 60.289997][ T5225] hsr_slave_1: entered promiscuous mode [ 60.296255][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.304209][ T5225] Cannot create hsr debugfs directory [ 60.377676][ T5236] hsr_slave_0: entered promiscuous mode [ 60.384710][ T5236] hsr_slave_1: entered promiscuous mode [ 60.390661][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.398311][ T5236] Cannot create hsr debugfs directory [ 60.511092][ T5229] hsr_slave_0: entered promiscuous mode [ 60.517797][ T5229] hsr_slave_1: entered promiscuous mode [ 60.526856][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.534511][ T5229] Cannot create hsr debugfs directory [ 60.727246][ T5231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.759426][ T5231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.792476][ T5231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.815692][ T5231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.870119][ T5221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.880615][ T5221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.905275][ T5221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.916232][ T5221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.979306][ T5229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.990122][ T5229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.000515][ T5229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.024825][ T5229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.103742][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.134065][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.153394][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.176974][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.235781][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.246463][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.272151][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.282110][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.321984][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.377276][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.409523][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.429551][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.447692][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.454933][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.505083][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.512367][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.532070][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.539229][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.551083][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.576703][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.583871][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.621227][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.656978][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.664139][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.730915][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.738046][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.801828][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.824057][ T55] Bluetooth: hci0: command tx timeout [ 61.834830][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.903143][ T55] Bluetooth: hci1: command tx timeout [ 61.903297][ T5233] Bluetooth: hci2: command tx timeout [ 61.934651][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.955573][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.983107][ T5233] Bluetooth: hci3: command tx timeout [ 62.001377][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.028358][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.035540][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.063727][ T5233] Bluetooth: hci4: command tx timeout [ 62.106373][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.113558][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.159494][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.172096][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.209724][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.217299][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.239752][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.266007][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.273199][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.321959][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.394775][ T5236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.405250][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.421518][ T5231] veth0_vlan: entered promiscuous mode [ 62.487264][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.511464][ T5231] veth1_vlan: entered promiscuous mode [ 62.572238][ T5221] veth0_vlan: entered promiscuous mode [ 62.626738][ T5221] veth1_vlan: entered promiscuous mode [ 62.692709][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.721779][ T5229] veth0_vlan: entered promiscuous mode [ 62.759632][ T5231] veth0_macvtap: entered promiscuous mode [ 62.806428][ T5229] veth1_vlan: entered promiscuous mode [ 62.821089][ T5221] veth0_macvtap: entered promiscuous mode [ 62.845410][ T5231] veth1_macvtap: entered promiscuous mode [ 62.868215][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.879342][ T5221] veth1_macvtap: entered promiscuous mode [ 62.941458][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.971598][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.985417][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.997666][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.009709][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.026231][ T5229] veth0_macvtap: entered promiscuous mode [ 63.052358][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.061627][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.071067][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.080078][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.096047][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.107347][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.118610][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.130985][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.139858][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.149648][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.158674][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.175574][ T5229] veth1_macvtap: entered promiscuous mode [ 63.242532][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.254153][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.265132][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.276371][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.288049][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.349180][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361398][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.372081][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.382782][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.394453][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.422720][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.442581][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.457181][ T5225] veth0_vlan: entered promiscuous mode [ 63.473661][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.482366][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.491278][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.500711][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.517131][ T5236] veth0_vlan: entered promiscuous mode [ 63.557494][ T5236] veth1_vlan: entered promiscuous mode [ 63.567970][ T5225] veth1_vlan: entered promiscuous mode [ 63.626100][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.635224][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.642895][ T5225] veth0_macvtap: entered promiscuous mode [ 63.655314][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.677264][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.695990][ T5225] veth1_macvtap: entered promiscuous mode [ 63.772380][ T5236] veth0_macvtap: entered promiscuous mode [ 63.812008][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.822624][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.835641][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.846697][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.857528][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.868386][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.880185][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.892368][ T5236] veth1_macvtap: entered promiscuous mode [ 63.904291][ T5233] Bluetooth: hci0: command tx timeout [ 63.908929][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.921376][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.938004][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.946594][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.966750][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.983448][ T5233] Bluetooth: hci2: command tx timeout [ 63.983763][ T55] Bluetooth: hci1: command tx timeout [ 63.991804][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.016440][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.032478][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.050235][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.063689][ T55] Bluetooth: hci3: command tx timeout [ 64.070688][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.082636][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.143151][ T55] Bluetooth: hci4: command tx timeout [ 64.159633][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.171970][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.187324][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198289][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.234094][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.253099][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.257246][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.292953][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.333056][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.349134][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.359894][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.371969][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.381912][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.395695][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.407563][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.427076][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.438145][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.449663][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.461105][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.482226][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.498650][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.509627][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.522133][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.534968][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.587014][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.601503][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.630293][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.646241][ T5316] process 'syz.3.7' launched '/dev/fd/9' with NULL argv: empty string added [ 64.652911][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.698007][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 64.877181][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.902973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.988635][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.010181][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.090800][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.122117][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.187135][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.208946][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.431816][ T5336] loop0: detected capacity change from 0 to 1024 [ 65.563878][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.765588][ T5229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.793956][ T5351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.893106][ T5301] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.983335][ T55] Bluetooth: hci0: command tx timeout [ 66.063276][ T55] Bluetooth: hci2: command tx timeout [ 66.074466][ T55] Bluetooth: hci1: command tx timeout [ 66.103207][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 66.115347][ T5301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.129107][ T5301] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 66.143841][ T55] Bluetooth: hci3: command tx timeout [ 66.152209][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.177793][ T5301] usb 5-1: config 0 descriptor?? [ 66.184988][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 66.202534][ T5301] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 66.216138][ T5353] kvm: emulating exchange as write [ 66.224243][ T55] Bluetooth: hci4: command tx timeout [ 66.444171][ T2630] usb 5-1: USB disconnect, device number 2 [ 66.770963][ T5346] loop2: detected capacity change from 0 to 40427 [ 66.825990][ T5346] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 66.863624][ T5346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.981027][ T5346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.204514][ T5383] loop4: detected capacity change from 0 to 1024 [ 67.247730][ T5346] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 67.262684][ T5346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.272346][ T5391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.308298][ T5383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.455655][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.521632][ T5396] dccp_invalid_packet: P.Data Offset(100) too large [ 67.743577][ T2630] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.838117][ T5404] loop4: detected capacity change from 0 to 256 [ 67.958295][ T2630] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.985789][ T2630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.029062][ T2630] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 68.061370][ T2630] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 68.092949][ T2630] usb 4-1: Manufacturer: syz [ 68.128295][ T2630] usb 4-1: config 0 descriptor?? [ 68.233049][ T5269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.313453][ T2630] rc_core: IR keymap rc-hauppauge not found [ 68.319399][ T2630] Registered IR keymap rc-empty [ 68.373551][ T2630] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 68.399486][ T2630] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 68.452990][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 68.463540][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.473015][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.481412][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.500999][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.503718][ T5269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 68.523747][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.526485][ T5269] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 68.540741][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.544727][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.600766][ T5269] usb 1-1: config 0 descriptor?? [ 68.629103][ T5269] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 68.845023][ T5272] usb 1-1: USB disconnect, device number 2 [ 68.970112][ T5428] loop4: detected capacity change from 0 to 1024 [ 69.006901][ T5428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.039005][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.085767][ T5416] chnl_net:caif_netlink_parms(): no params data found [ 69.170315][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.224864][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.465633][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.561751][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.592039][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.600014][ T5416] bridge_slave_0: entered allmulticast mode [ 69.607760][ T5416] bridge_slave_0: entered promiscuous mode [ 69.621034][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.628480][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.636054][ T5416] bridge_slave_1: entered allmulticast mode [ 69.647735][ T5416] bridge_slave_1: entered promiscuous mode [ 69.675440][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.762402][ T5416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.797981][ T5416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.893155][ T5301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.932743][ T5416] team0: Port device team_slave_0 added [ 69.960800][ T5416] team0: Port device team_slave_1 added [ 69.970998][ T5433] loop2: detected capacity change from 0 to 40427 [ 69.980010][ T5433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.988434][ T5433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.037066][ T12] bridge_slave_1: left allmulticast mode [ 70.044818][ T12] bridge_slave_1: left promiscuous mode [ 70.055434][ T5433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.072541][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.083072][ T5301] usb 1-1: device descriptor read/64, error -71 [ 70.099543][ T12] bridge_slave_0: left allmulticast mode [ 70.105776][ T12] bridge_slave_0: left promiscuous mode [ 70.111563][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.247391][ T5433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.285567][ T5433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.311339][ T5273] usb 4-1: USB disconnect, device number 2 [ 70.386213][ T5301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.556494][ T5301] usb 1-1: device descriptor read/64, error -71 [ 70.623956][ T55] Bluetooth: hci5: command tx timeout [ 70.673326][ T5301] usb usb1-port1: attempt power cycle [ 70.767491][ T5458] loop4: detected capacity change from 0 to 1024 [ 70.828040][ T5458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.865626][ T29] audit: type=1804 audit(1722007892.731:2): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.55" name="/newroot/14/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 70.929564][ T5464] loop2: detected capacity change from 0 to 256 [ 70.951154][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.037611][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.050642][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.082660][ T12] bond0 (unregistering): Released all slaves [ 71.103021][ T5301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.155206][ T5301] usb 1-1: device descriptor read/8, error -71 [ 71.206229][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.225908][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.276537][ T5416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.305523][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.338770][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.370151][ T5416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.432978][ T944] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.453789][ T5301] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.471475][ T5416] hsr_slave_0: entered promiscuous mode [ 71.481665][ T5416] hsr_slave_1: entered promiscuous mode [ 71.488709][ T5416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.493736][ T5301] usb 1-1: device descriptor read/8, error -71 [ 71.496978][ T5416] Cannot create hsr debugfs directory [ 71.591916][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.598827][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.629703][ T5301] usb usb1-port1: unable to enumerate USB device [ 71.633785][ T944] usb 5-1: Using ep0 maxpacket: 16 [ 71.644849][ T944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 71.669439][ T944] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 71.707491][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.746376][ T944] usb 5-1: config 0 descriptor?? [ 71.765973][ T944] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 71.799468][ T12] hsr_slave_0: left promiscuous mode [ 71.816647][ T12] hsr_slave_1: left promiscuous mode [ 71.824993][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.832579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.851342][ T5269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.861952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.878756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.903549][ T12] veth1_macvtap: left promiscuous mode [ 71.909659][ T12] veth0_macvtap: left promiscuous mode [ 71.915394][ T12] veth1_vlan: left promiscuous mode [ 71.921131][ T12] veth0_vlan: left promiscuous mode [ 71.980525][ T2630] usb 5-1: USB disconnect, device number 3 [ 72.070128][ T5269] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 72.090061][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.105862][ T5269] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 72.121486][ T5269] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 72.130859][ T5269] usb 3-1: Manufacturer: syz [ 72.146142][ T5269] usb 3-1: config 0 descriptor?? [ 72.247120][ T5269] rc_core: IR keymap rc-hauppauge not found [ 72.258063][ T5269] Registered IR keymap rc-empty [ 72.279307][ T5269] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 72.313530][ T5269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 72.713294][ T55] Bluetooth: hci5: command tx timeout [ 72.834654][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.946705][ T5492] loop0: detected capacity change from 0 to 1024 [ 72.961914][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.009430][ T5492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.084758][ T29] audit: type=1804 audit(1722007894.941:3): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.65" name="/newroot/12/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 73.122682][ T5229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.114743][ T5301] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.319114][ T5301] usb 4-1: Using ep0 maxpacket: 16 [ 74.373312][ T5301] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 74.408308][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.443131][ T5301] usb 4-1: Product: syz [ 74.448840][ T5301] usb 4-1: Manufacturer: syz [ 74.463882][ T5273] usb 3-1: USB disconnect, device number 2 [ 74.486583][ T5301] usb 4-1: SerialNumber: syz [ 74.533963][ T5301] usb 4-1: config 0 descriptor?? [ 74.555936][ T5416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.609785][ T5416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.639807][ T5416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.693539][ T5416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.792073][ T55] Bluetooth: hci5: command tx timeout [ 75.038742][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.108934][ T5416] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.126691][ T29] audit: type=1326 audit(1722007896.981:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.4.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71bd77299 code=0x0 [ 75.148655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.157183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.203065][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.210287][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.275728][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.282960][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.564090][ T5529] loop2: detected capacity change from 0 to 32768 [ 75.592596][ T5529] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.72 (5529) [ 75.613396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.670371][ T5529] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 75.691905][ T5529] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 75.722029][ T5529] BTRFS info (device loop2): using free-space-tree [ 75.799619][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.917674][ T5416] veth0_vlan: entered promiscuous mode [ 75.937312][ T5416] veth1_vlan: entered promiscuous mode [ 75.991339][ T5416] veth0_macvtap: entered promiscuous mode [ 76.010114][ T5416] veth1_macvtap: entered promiscuous mode [ 76.028881][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.048953][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069094][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.092630][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.124254][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.137908][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.151533][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.162284][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.180714][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.222793][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.242513][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.269942][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.302754][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.321513][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.340381][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.352578][ T5416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.364323][ T5416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.389662][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.392499][ T5231] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.427010][ T5416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.440393][ T5416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.470576][ T5416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.483217][ T5416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.658295][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.702730][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.725359][ T8] cfg80211: failed to load regulatory.db [ 76.858844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.874258][ T55] Bluetooth: hci5: command tx timeout [ 76.899141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.900677][ T5301] usb 4-1: USB disconnect, device number 3 [ 77.618020][ T5623] loop2: detected capacity change from 0 to 1024 [ 77.703697][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.761947][ T29] audit: type=1804 audit(1722007899.621:5): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.91" name="/newroot/15/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 77.890034][ T5231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.136503][ T5637] dccp_invalid_packet: P.Data Offset(100) too large [ 78.420988][ T5626] loop4: detected capacity change from 0 to 32768 [ 78.437163][ T5626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.92 (5626) [ 78.501259][ T5626] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 78.536964][ T5626] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 78.567754][ T5626] BTRFS info (device loop4): using free-space-tree [ 79.241227][ T5225] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.347851][ T5694] dccp_invalid_packet: P.Data Offset(100) too large [ 79.844934][ T5715] loop1: detected capacity change from 0 to 128 [ 79.877120][ T5715] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.954515][ T5715] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.374378][ T5741] dccp_invalid_packet: P.Data Offset(100) too large [ 80.586206][ T5747] fuse: Bad value for 'fd' [ 81.093505][ T5725] loop2: detected capacity change from 0 to 32768 [ 81.144807][ T5725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.120 (5725) [ 81.188656][ T5725] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.213074][ T5725] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 81.232965][ T5725] BTRFS info (device loop2): using free-space-tree [ 81.414263][ T5736] loop3: detected capacity change from 0 to 32768 [ 81.440310][ T5736] BTRFS: device /dev/loop3 (7:3) using temp-fsid 8792bfda-8d53-4653-b8a8-233733825247 [ 81.489830][ T5736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.123 (5736) [ 81.584302][ T5736] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.616657][ T5736] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 81.683082][ T5736] BTRFS info (device loop3): using free-space-tree [ 81.823460][ T5821] dccp_invalid_packet: P.Data Offset(100) too large [ 82.056223][ T5231] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.328429][ T5221] BTRFS info (device loop3): last unmount of filesystem 8792bfda-8d53-4653-b8a8-233733825247 [ 83.344286][ T5873] dccp_invalid_packet: P.Data Offset(100) too large [ 86.631196][ T5960] dccp_invalid_packet: P.Data Offset(100) too large [ 88.047965][ T5969] loop1: detected capacity change from 0 to 32768 [ 88.055437][ T5988] loop2: detected capacity change from 0 to 128 [ 88.066387][ T5969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.189 (5969) [ 88.089640][ T5988] FAT-fs (loop2): bogus number of reserved sectors [ 88.107837][ T5988] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.129983][ T5969] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.143774][ T5988] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.150751][ T5969] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 88.169263][ T5969] BTRFS info (device loop1): using free-space-tree [ 88.180015][ T5988] loop2: detected capacity change from 0 to 256 [ 88.695198][ T5416] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.708752][ T6008] dccp_invalid_packet: P.Data Offset(100) too large [ 89.287858][ T29] audit: type=1326 audit(1722007911.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.2.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff133577299 code=0x0 [ 89.672950][ T2630] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.834860][ T6035] loop3: detected capacity change from 0 to 256 [ 89.849408][ T6035] ======================================================= [ 89.849408][ T6035] WARNING: The mand mount option has been deprecated and [ 89.849408][ T6035] and is ignored by this kernel. Remove the mand [ 89.849408][ T6035] option from the mount to silence this warning. [ 89.849408][ T6035] ======================================================= [ 89.926130][ T2630] usb 2-1: Using ep0 maxpacket: 32 [ 89.939277][ T2630] usb 2-1: config 0 has no interfaces? [ 89.948503][ T2630] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 89.963075][ T2630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.988435][ T6035] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 90.013144][ T2630] usb 2-1: Product: syz [ 90.017331][ T2630] usb 2-1: Manufacturer: syz [ 90.035295][ T2630] usb 2-1: SerialNumber: syz [ 90.053357][ T2630] usb 2-1: config 0 descriptor?? [ 90.712842][ T6037] loop0: detected capacity change from 0 to 512 [ 90.751647][ T6050] dccp_invalid_packet: P.Data Offset(100) too large [ 90.874281][ T6037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.938915][ T6037] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.060584][ T6037] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.209: Directory hole found for htree leaf block 0 [ 91.369723][ T6037] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.209: Directory hole found for htree leaf block 0 [ 91.620762][ T6070] loop4: detected capacity change from 0 to 1024 [ 92.121380][ T29] audit: type=1800 audit(1722007913.981:7): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.216" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 92.529949][ T944] usb 2-1: USB disconnect, device number 2 [ 92.564412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.673633][ T6081] netlink: 'syz.1.220': attribute type 29 has an invalid length. [ 92.712459][ T6081] netlink: 'syz.1.220': attribute type 29 has an invalid length. [ 92.744328][ T6037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.812455][ T6081] netlink: 'syz.1.220': attribute type 29 has an invalid length. [ 92.909523][ T6085] ubi0: attaching mtd0 [ 92.928557][ T6085] ubi0: scanning is finished [ 92.943273][ T6085] ubi0: empty MTD device detected [ 93.005543][ T6089] dccp_invalid_packet: P.Data Offset(100) too large [ 93.117843][ T6085] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.153158][ T6085] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.178479][ T6085] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 93.192238][ T6085] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 93.209221][ T6085] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.218710][ T6085] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.231198][ T6085] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2056193014 [ 93.262174][ T6085] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 93.283580][ T6093] ubi0: background thread "ubi_bgt0d" started, PID 6093 [ 93.568450][ T6109] loop2: detected capacity change from 0 to 1024 [ 93.824740][ T29] audit: type=1800 audit(1722007915.691:8): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.231" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 94.364664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.634098][ T6122] netlink: 'syz.0.235': attribute type 29 has an invalid length. [ 94.701192][ T6122] netlink: 'syz.0.235': attribute type 29 has an invalid length. [ 94.788339][ T6127] netlink: 'syz.0.235': attribute type 29 has an invalid length. [ 94.856022][ T6133] loop4: detected capacity change from 0 to 512 [ 94.864688][ T6134] dccp_invalid_packet: P.Data Offset(100) too large [ 94.893011][ T5301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.930542][ T6133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.982142][ T6133] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.103303][ T5301] usb 2-1: Using ep0 maxpacket: 16 [ 95.122156][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.160886][ T5301] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.180364][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.210741][ T5301] usb 2-1: Product: syz [ 95.233093][ T5301] usb 2-1: Manufacturer: syz [ 95.237725][ T5301] usb 2-1: SerialNumber: syz [ 95.240952][ T6152] netlink: 204 bytes leftover after parsing attributes in process `syz.3.240'. [ 95.281760][ T5301] usb 2-1: config 0 descriptor?? [ 95.294337][ T6154] loop2: detected capacity change from 0 to 512 [ 95.411744][ T6154] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.429237][ T6154] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.243: corrupted in-inode xattr: invalid ea_ino [ 95.448892][ T6154] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.243: couldn't read orphan inode 12 (err -117) [ 95.464004][ T6154] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.614091][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.902961][ T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.496254][ T5231] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 96.600778][ T6170] loop2: detected capacity change from 0 to 1024 [ 97.413045][ T29] audit: type=1800 audit(1722007918.581:9): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.247" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 97.503741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.618654][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.685750][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.729104][ T6178] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 98.294469][ T6178] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 98.313976][ T944] usb 2-1: USB disconnect, device number 3 [ 98.404794][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.414607][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.427579][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.436831][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.473185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.485806][ T47] usb 1-1: config 0 descriptor?? [ 98.540256][ T47] usb 1-1: can't set config #0, error -71 [ 98.554790][ T47] usb 1-1: USB disconnect, device number 7 [ 98.603206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.613031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.699558][ T6195] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 98.736939][ T6195] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 98.809746][ T6195] netlink: 'syz.0.252': attribute type 29 has an invalid length. [ 99.583986][ T944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.963025][ T944] usb 4-1: Using ep0 maxpacket: 16 [ 99.990971][ T944] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.087652][ T944] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.116939][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.136339][ T944] usb 4-1: Product: syz [ 100.163183][ T944] usb 4-1: Manufacturer: syz [ 100.177648][ T944] usb 4-1: SerialNumber: syz [ 100.194274][ T6227] loop2: detected capacity change from 0 to 1024 [ 100.214275][ T944] usb 4-1: config 0 descriptor?? [ 100.495106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.824544][ T29] audit: type=1800 audit(1722007922.681:10): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 101.739461][ T6247] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 101.799649][ T6247] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 101.855203][ T6247] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 102.026488][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.388313][ T5268] usb 4-1: USB disconnect, device number 4 [ 103.464547][ T6266] loop4: detected capacity change from 0 to 1024 [ 103.635665][ T6257] loop3: detected capacity change from 0 to 512 [ 103.843302][ T6257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.897449][ T6257] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.383157][ T29] audit: type=1800 audit(1722007926.231:11): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.277" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 105.023390][ T6287] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 105.049961][ T6290] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 105.145865][ T6294] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 105.166914][ T5221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.042067][ T6340] netlink: 'syz.0.303': attribute type 29 has an invalid length. [ 107.101299][ T6340] netlink: 'syz.0.303': attribute type 29 has an invalid length. [ 107.161919][ T6340] netlink: 'syz.0.303': attribute type 29 has an invalid length. [ 108.641236][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 108.934835][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 109.034321][ T6376] dccp_invalid_packet: P.Data Offset(100) too large [ 110.402155][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.413434][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.428576][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.437953][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.446731][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.459811][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.644153][ T6398] loop1: detected capacity change from 0 to 1024 [ 110.767693][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.864885][ T29] audit: type=1800 audit(1722007932.731:12): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 111.529249][ T6394] loop4: detected capacity change from 0 to 32768 [ 111.572423][ T6394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.323 (6394) [ 111.592034][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.627781][ T6394] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.657513][ T6394] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 111.712995][ T6394] BTRFS info (device loop4): using free-space-tree [ 111.857496][ T6379] loop3: detected capacity change from 0 to 32768 [ 111.867913][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.892009][ T6379] BTRFS: device /dev/loop3 (7:3) using temp-fsid 8408cb1c-516d-4024-9411-2dec9e67d450 [ 111.909433][ T6379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.318 (6379) [ 111.960274][ T6379] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.974306][ T6379] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 111.984754][ T6379] BTRFS info (device loop3): using free-space-tree [ 111.992008][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'. [ 112.266860][ T5225] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.326516][ T5221] BTRFS info (device loop3): last unmount of filesystem 8408cb1c-516d-4024-9411-2dec9e67d450 [ 112.378878][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.563936][ T55] Bluetooth: hci3: command tx timeout [ 113.460193][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 113.577686][ T6465] loop2: detected capacity change from 0 to 1024 [ 113.630603][ T6455] batman_adv: batadv1: Adding interface: netdevsim0 [ 113.759995][ T29] audit: type=1800 audit(1722007935.621:13): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.336" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 113.779579][ T6455] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.095239][ T6455] batman_adv: batadv1: Interface activated: netdevsim0 [ 114.511659][ T63] bridge_slave_1: left allmulticast mode [ 114.523686][ T63] bridge_slave_1: left promiscuous mode [ 114.539020][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.561207][ T63] bridge_slave_0: left allmulticast mode [ 114.568529][ T63] bridge_slave_0: left promiscuous mode [ 114.578608][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.623060][ T55] Bluetooth: hci3: command tx timeout [ 114.729326][ T6479] loop2: detected capacity change from 0 to 8 [ 114.750206][ T29] audit: type=1326 audit(1722007936.611:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.1.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab59f77299 code=0x0 [ 114.864196][ T6479] SQUASHFS error: Failed to read block 0x4e8: -5 [ 114.879989][ T29] audit: type=1800 audit(1722007936.741:15): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.338" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 114.957707][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.964655][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.971209][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.978400][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.985339][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.995333][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.001869][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.009041][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.018346][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.029520][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.044965][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.057716][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.067040][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.078777][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.089825][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.101403][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.123402][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.132181][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.149607][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.160312][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.171871][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.181040][ T6482] SQUASHFS error: Failed to read block 0x6e6: -5 [ 115.195478][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.207109][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.216788][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.228437][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.238821][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.251775][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.265704][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.273553][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.280532][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.287537][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.295324][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.302295][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.309242][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.317092][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.324351][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.330907][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.338838][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.346401][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.354242][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.362794][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.387729][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.391371][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.394380][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.452213][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.476889][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.487349][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.491167][ T6481] loop4: detected capacity change from 0 to 32768 [ 115.503359][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.510668][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.529127][ T63] bond0 (unregistering): Released all slaves [ 115.535482][ T6481] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.339 (6481) [ 115.543097][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.569740][ T6481] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.590540][ T6481] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 115.592888][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.599316][ T6481] BTRFS info (device loop4): using free-space-tree [ 115.612179][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.620332][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.637891][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.657529][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 115.667513][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.677996][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 115.689587][ T6482] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 115.700103][ T6482] SQUASHFS error: read_indexes: reading block [6e4:0] [ 115.712486][ T6482] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.225039][ T5225] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.736985][ T55] Bluetooth: hci3: command tx timeout [ 116.831487][ T6485] loop1: detected capacity change from 0 to 32768 [ 116.946481][ T6485] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.340 (6485) [ 117.064908][ T6485] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.135096][ T6485] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 117.171527][ T6485] BTRFS info (device loop1): using free-space-tree [ 117.309695][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.351791][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.414062][ T6538] loop2: detected capacity change from 0 to 1024 [ 117.429092][ T6389] bridge_slave_0: entered allmulticast mode [ 117.450569][ T6389] bridge_slave_0: entered promiscuous mode [ 117.703473][ T29] audit: type=1800 audit(1722007939.571:16): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 118.283006][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.301400][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.368308][ T6389] bridge_slave_1: entered allmulticast mode [ 118.379850][ T6389] bridge_slave_1: entered promiscuous mode [ 118.620265][ T29] audit: type=1326 audit(1722007940.481:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.4.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71bd77299 code=0x0 [ 118.630787][ T5416] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.778437][ T63] hsr_slave_0: left promiscuous mode [ 118.784873][ T55] Bluetooth: hci3: command tx timeout [ 118.851352][ T63] hsr_slave_1: left promiscuous mode [ 118.918944][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.934503][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.963061][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.970905][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.030025][ T63] veth1_macvtap: left promiscuous mode [ 119.046088][ T63] veth0_macvtap: left promiscuous mode [ 119.059082][ T63] veth1_vlan: left promiscuous mode [ 119.070285][ T63] veth0_vlan: left promiscuous mode [ 120.495785][ T63] team0 (unregistering): Port device team_slave_1 removed [ 120.513948][ T6600] loop1: detected capacity change from 0 to 1024 [ 120.742355][ T29] audit: type=1800 audit(1722007942.601:18): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 121.375641][ T63] team0 (unregistering): Port device team_slave_0 removed [ 121.869458][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.951172][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 121.993735][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.156245][ T6389] team0: Port device team_slave_0 added [ 122.276020][ T6389] team0: Port device team_slave_1 added [ 122.324537][ T29] audit: type=1326 audit(1722007944.181:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.1.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab59f77299 code=0x0 [ 123.367428][ T6632] loop4: detected capacity change from 0 to 1024 [ 123.623301][ T29] audit: type=1800 audit(1722007945.431:20): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 124.591723][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.643966][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.720342][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.805052][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.828018][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.895449][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.962286][ T6657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.373'. [ 125.022661][ T6389] hsr_slave_0: entered promiscuous mode [ 125.082083][ T6389] hsr_slave_1: entered promiscuous mode [ 125.107074][ T6389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.155284][ T6389] Cannot create hsr debugfs directory [ 125.608335][ T6643] loop1: detected capacity change from 0 to 32768 [ 126.055281][ T29] audit: type=1326 audit(1722007947.921:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.3.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab24b77299 code=0x0 [ 126.098429][ T6685] loop2: detected capacity change from 0 to 2048 [ 126.208687][ T6685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.331383][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.651529][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.794715][ T6700] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.819302][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.002490][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.174802][ T6389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.185119][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.194080][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.205072][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.214837][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.222456][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.236926][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.330708][ T6389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.385527][ T6389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.433906][ T6389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.782737][ T53] bridge_slave_1: left allmulticast mode [ 127.824301][ T53] bridge_slave_1: left promiscuous mode [ 127.839752][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.877482][ T53] bridge_slave_0: left allmulticast mode [ 127.916122][ T53] bridge_slave_0: left promiscuous mode [ 127.928147][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.430324][ T6713] loop1: detected capacity change from 0 to 32768 [ 128.984701][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.054845][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.097481][ T53] bond0 (unregistering): Released all slaves [ 129.343082][ T55] Bluetooth: hci1: command tx timeout [ 129.632753][ T6708] chnl_net:caif_netlink_parms(): no params data found [ 129.745348][ T6764] dccp_invalid_packet: P.Data Offset(100) too large [ 129.990286][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.080306][ T53] hsr_slave_0: left promiscuous mode [ 130.090490][ T53] hsr_slave_1: left promiscuous mode [ 130.109051][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.130739][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.150220][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.174676][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.262725][ T53] veth1_macvtap: left promiscuous mode [ 130.316744][ T53] veth0_macvtap: left promiscuous mode [ 130.376332][ T53] veth1_vlan: left promiscuous mode [ 130.396784][ T53] veth0_vlan: left promiscuous mode [ 131.172326][ T53] team0 (unregistering): Port device team_slave_1 removed [ 131.211455][ T53] team0 (unregistering): Port device team_slave_0 removed [ 131.314327][ T6804] loop1: detected capacity change from 0 to 32768 [ 131.423043][ T55] Bluetooth: hci1: command tx timeout [ 131.629218][ T6801] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 131.642283][ T6801] batman_adv: batadv1: Removing interface: netdevsim0 [ 131.716264][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.762638][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.774557][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.781812][ T6708] bridge_slave_0: entered allmulticast mode [ 131.798436][ T6708] bridge_slave_0: entered promiscuous mode [ 131.807979][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.816868][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.824371][ T6708] bridge_slave_1: entered allmulticast mode [ 131.831707][ T6708] bridge_slave_1: entered promiscuous mode [ 131.938810][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.945998][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.976830][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.984005][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.044437][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.092741][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.269423][ T6708] team0: Port device team_slave_0 added [ 132.365007][ T6708] team0: Port device team_slave_1 added [ 132.505513][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.518061][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.577638][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.612562][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.649523][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.691387][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.808716][ T6708] hsr_slave_0: entered promiscuous mode [ 132.827697][ T6708] hsr_slave_1: entered promiscuous mode [ 132.860312][ T6708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.887005][ T6708] Cannot create hsr debugfs directory [ 133.025947][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042964][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.503112][ T55] Bluetooth: hci1: command tx timeout [ 133.567792][ T6818] loop1: detected capacity change from 0 to 32768 [ 133.636282][ T6818] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.404 (6818) [ 133.668773][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.754644][ T6818] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.773959][ T6818] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.801794][ T6818] BTRFS info (device loop1): using free-space-tree [ 134.209967][ T5416] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.408860][ T6389] veth0_vlan: entered promiscuous mode [ 134.507351][ T6389] veth1_vlan: entered promiscuous mode [ 134.783746][ T6708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.965615][ T6708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.036760][ T6708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.089101][ T6708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.197494][ T6389] veth0_macvtap: entered promiscuous mode [ 135.229699][ T6389] veth1_macvtap: entered promiscuous mode [ 135.264216][ T6886] dccp_invalid_packet: P.Data Offset(100) too large [ 135.355368][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.404664][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.433053][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.452953][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.470156][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.496790][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.524799][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.586085][ T55] Bluetooth: hci1: command tx timeout [ 135.589651][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.638515][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.682725][ T6873] loop1: detected capacity change from 0 to 32768 [ 135.683165][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.706747][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.719322][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.740179][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.781327][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.810655][ T6389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.834373][ T6389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.845205][ T6389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.887424][ T6389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.012801][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.086479][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.140297][ T5324] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.147501][ T5324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.175313][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.189290][ T5324] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.196489][ T5324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.222183][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.328249][ T6708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.342958][ T6708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.370811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.411589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.873496][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.164645][ T6939] dccp_invalid_packet: P.Data Offset(100) too large [ 137.546229][ T6919] loop3: detected capacity change from 0 to 32768 [ 137.558743][ T6919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.417 (6919) [ 137.657426][ T6919] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.773040][ T6919] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 137.863015][ T6919] BTRFS info (device loop3): using free-space-tree [ 137.913032][ T5273] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.007323][ T6708] veth0_vlan: entered promiscuous mode [ 138.065631][ T6708] veth1_vlan: entered promiscuous mode [ 138.114793][ T5273] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.131807][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.151900][ T5221] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.172366][ T5273] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.193820][ T5273] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.199630][ T6708] veth0_macvtap: entered promiscuous mode [ 138.222796][ T5273] usb 3-1: Manufacturer: syz [ 138.266930][ T5273] usb 3-1: config 0 descriptor?? [ 138.289080][ T6708] veth1_macvtap: entered promiscuous mode [ 138.408597][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.429507][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.441488][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.453091][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.471029][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.482754][ T5273] rc_core: IR keymap rc-hauppauge not found [ 138.504219][ T5273] Registered IR keymap rc-empty [ 138.511174][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.532162][ T5273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 138.556077][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.589048][ T5273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 138.612511][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.683820][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.734065][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.786472][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.832330][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.891741][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.924283][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.958744][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.976672][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.006640][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.040722][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.101469][ T6708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.132138][ T6708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.155125][ T6708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.169389][ T6708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.380635][ T6473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.409945][ T6473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.493993][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.502597][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.004202][ T6993] loop3: detected capacity change from 0 to 32768 [ 140.030759][ T6993] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.427 (6993) [ 140.095857][ T6993] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.119704][ T7005] dccp_invalid_packet: P.Data Offset(100) too large [ 140.147371][ T6993] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.188222][ T6993] BTRFS info (device loop3): using free-space-tree [ 140.364586][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 140.527147][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 140.593143][ T5270] usb 3-1: USB disconnect, device number 3 [ 140.603173][ T7023] bridge0: port 3(netdevsim0) entered blocking state [ 140.646772][ T7023] bridge0: port 3(netdevsim0) entered disabled state [ 140.680364][ T7023] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 140.741390][ T7023] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 140.780901][ T7023] bridge0: port 3(netdevsim0) entered blocking state [ 140.787966][ T7023] bridge0: port 3(netdevsim0) entered forwarding state [ 140.811066][ T7040] Zero length message leads to an empty skb [ 140.814636][ T5221] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.381414][ T7059] dccp_invalid_packet: P.Data Offset(100) too large [ 142.053019][ T944] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.264816][ T944] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 142.299334][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.330373][ T944] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.362132][ T944] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.382739][ T944] usb 2-1: Manufacturer: syz [ 142.416088][ T944] usb 2-1: config 0 descriptor?? [ 145.195164][ T944] rc_core: IR keymap rc-hauppauge not found [ 145.201072][ T944] Registered IR keymap rc-empty [ 145.289213][ T944] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 145.347939][ T944] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 145.380484][ T7097] dccp_invalid_packet: P.Data Offset(100) too large [ 145.447235][ T944] usb 2-1: USB disconnect, device number 4 [ 145.715834][ T5273] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.935052][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 145.962169][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 145.990568][ T5273] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.002058][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.016806][ T5273] usb 1-1: Product: syz [ 146.040559][ T5273] usb 1-1: Manufacturer: syz [ 146.047788][ T5273] usb 1-1: SerialNumber: syz [ 146.095024][ T5273] usb 1-1: config 0 descriptor?? [ 146.115066][ T5273] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.137994][ T5273] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 146.607417][ T7127] dccp_invalid_packet: P.Data Offset(100) too large [ 146.721796][ T5273] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 147.026510][ T7135] mmap: syz.4.467 (7135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.042383][ T5301] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.370741][ T5301] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.384619][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.404337][ T5301] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.414548][ T5301] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.422555][ T5301] usb 4-1: Manufacturer: syz [ 147.434447][ T5301] usb 4-1: config 0 descriptor?? [ 147.572935][ T5301] rc_core: IR keymap rc-hauppauge not found [ 147.578986][ T5301] Registered IR keymap rc-empty [ 147.591249][ T5301] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 147.634942][ T5301] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 147.669421][ T5273] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 147.723301][ T5273] em28xx 1-1:0.0: board has no eeprom [ 147.724500][ T7131] loop1: detected capacity change from 0 to 32768 [ 147.749012][ T7131] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.471 (7131) [ 147.851203][ T5273] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 147.882312][ T5273] em28xx 1-1:0.0: dvb set to bulk mode. [ 147.892199][ T7131] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.925677][ T5301] em28xx 1-1:0.0: Binding DVB extension [ 147.932445][ T7131] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 147.969333][ T7131] BTRFS info (device loop1): using free-space-tree [ 147.978222][ T5273] usb 1-1: USB disconnect, device number 8 [ 147.996128][ T944] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.054229][ T5273] em28xx 1-1:0.0: Disconnecting em28xx [ 148.119986][ T5301] em28xx 1-1:0.0: Registering input extension [ 148.146113][ T5273] em28xx 1-1:0.0: Closing input extension [ 148.213341][ T944] usb 5-1: Using ep0 maxpacket: 32 [ 148.215415][ T5273] em28xx 1-1:0.0: Freeing device [ 148.249516][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.317744][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.362388][ T5416] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.381844][ T944] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 148.395739][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.435065][ T944] usb 5-1: config 0 descriptor?? [ 148.901918][ T944] kye 0003:0458:5011.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 148.957827][ T944] kye 0003:0458:5011.0001: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 148.975965][ T944] kye 0003:0458:5011.0001: tablet-enabling feature report not found [ 148.985412][ T944] kye 0003:0458:5011.0001: tablet enabling failed [ 150.156150][ T5272] usb 4-1: USB disconnect, device number 5 [ 150.180581][ T5273] usb 5-1: USB disconnect, device number 4 [ 150.372450][ T7183] dccp_invalid_packet: P.Data Offset(100) too large [ 150.903102][ T5270] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.117859][ T5270] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 151.147702][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.171920][ T5270] usb 2-1: Product: syz [ 151.185259][ T5270] usb 2-1: Manufacturer: syz [ 151.213304][ T5270] usb 2-1: SerialNumber: syz [ 151.232492][ T5270] usb 2-1: config 0 descriptor?? [ 151.269272][ T5270] as10x_usb: device has been detected [ 151.280419][ T5270] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 152.393774][ T5270] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 152.484382][ T5270] as10x_usb: error during firmware upload part1 [ 152.503948][ T5270] Registered device Elgato EyeTV DTT Deluxe [ 152.521733][ T5270] usb 2-1: USB disconnect, device number 5 [ 152.598534][ T7197] loop4: detected capacity change from 0 to 32768 [ 152.642528][ T7197] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.486 (7197) [ 152.705782][ T7197] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.713682][ T5270] Unregistered device Elgato EyeTV DTT Deluxe [ 152.728170][ T5270] as10x_usb: device has been disconnected [ 152.740243][ T7197] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 152.769800][ T7197] BTRFS info (device loop4): using free-space-tree [ 152.803892][ T7222] dccp_invalid_packet: P.Data Offset(100) too large [ 153.492143][ T6708] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.803195][ T5273] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.022999][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 154.047687][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.089675][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.147371][ T5273] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 154.156695][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.185547][ T5273] usb 4-1: config 0 descriptor?? [ 154.676341][ T5273] usbhid 4-1:0.0: can't add hid device: -71 [ 154.718576][ T5273] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.797438][ T5273] usb 4-1: USB disconnect, device number 6 [ 155.234044][ T5272] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.461287][ T5272] usb 3-1: Using ep0 maxpacket: 16 [ 155.498992][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.524716][ T7277] dccp_invalid_packet: P.Data Offset(100) too large [ 155.541679][ T5272] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.568576][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.594203][ T5272] usb 3-1: Product: syz [ 155.603248][ T5272] usb 3-1: Manufacturer: syz [ 155.608101][ T5272] usb 3-1: SerialNumber: syz [ 155.621633][ T5272] usb 3-1: config 0 descriptor?? [ 155.631941][ T5272] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.651149][ T5272] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 155.803539][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 155.816240][ T7289] netlink: 176 bytes leftover after parsing attributes in process `syz.0.512'. [ 156.244964][ T5272] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 157.686255][ T5272] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.706298][ T7328] dccp_invalid_packet: P.Data Offset(100) too large [ 157.716791][ T5272] em28xx 3-1:0.0: board has no eeprom [ 157.846002][ T5272] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.885447][ T5272] em28xx 3-1:0.0: dvb set to bulk mode. [ 157.895852][ T5270] em28xx 3-1:0.0: Binding DVB extension [ 157.921200][ T5272] usb 3-1: USB disconnect, device number 4 [ 157.942766][ T5272] em28xx 3-1:0.0: Disconnecting em28xx [ 158.000811][ T5270] em28xx 3-1:0.0: Registering input extension [ 158.013713][ T5272] em28xx 3-1:0.0: Closing input extension [ 158.099387][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 158.110634][ T7336] netlink: 176 bytes leftover after parsing attributes in process `syz.3.523'. [ 158.111836][ T5272] em28xx 3-1:0.0: Freeing device [ 159.947970][ T7371] dccp_invalid_packet: P.Data Offset(100) too large [ 160.423101][ T5273] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.623281][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 160.640927][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 160.669831][ T5273] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.698499][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.740786][ T5273] usb 3-1: Product: syz [ 160.754261][ T5273] usb 3-1: Manufacturer: syz [ 160.761106][ T5273] usb 3-1: SerialNumber: syz [ 160.776169][ T5273] usb 3-1: config 0 descriptor?? [ 160.791046][ T5273] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.825665][ T5273] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 161.394658][ T5273] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 161.626276][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 161.637266][ T7398] netlink: 176 bytes leftover after parsing attributes in process `syz.0.543'. [ 161.821470][ T7406] dccp_invalid_packet: P.Data Offset(100) too large [ 162.148345][ T29] audit: type=1800 audit(1722007984.011:22): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.547" name="/" dev="fuse" ino=1 res=0 errno=0 [ 162.168126][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.223591][ T5273] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.243615][ T5273] em28xx 3-1:0.0: board has no eeprom [ 162.344600][ T5273] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 162.370216][ T5273] em28xx 3-1:0.0: dvb set to bulk mode. [ 162.381082][ T5301] em28xx 3-1:0.0: Binding DVB extension [ 162.404107][ T5273] usb 3-1: USB disconnect, device number 5 [ 162.421435][ T5273] em28xx 3-1:0.0: Disconnecting em28xx [ 162.500352][ T5301] em28xx 3-1:0.0: Registering input extension [ 162.511311][ T7424] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 162.530832][ T5273] em28xx 3-1:0.0: Closing input extension [ 162.576145][ T5273] em28xx 3-1:0.0: Freeing device [ 163.703815][ T5324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.784191][ T7440] dccp_invalid_packet: P.Data Offset(100) too large [ 163.913048][ T5324] usb 5-1: Using ep0 maxpacket: 32 [ 163.922556][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.934385][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.947614][ T5324] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 163.958126][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.970832][ T5324] usb 5-1: config 0 descriptor?? [ 164.394256][ T5324] usbhid 5-1:0.0: can't add hid device: -71 [ 164.406922][ T5324] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 164.426224][ T5324] usb 5-1: USB disconnect, device number 5 [ 164.897909][ T7463] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 165.062574][ T7468] dccp_invalid_packet: P.Data Offset(100) too large [ 165.627185][ T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.840394][ T47] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 165.902223][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.922070][ T47] usb 4-1: Product: syz [ 165.926534][ T47] usb 4-1: Manufacturer: syz [ 165.931281][ T47] usb 4-1: SerialNumber: syz [ 165.938853][ T47] usb 4-1: config 0 descriptor?? [ 165.959057][ T47] as10x_usb: device has been detected [ 165.970492][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 166.007124][ T7497] dccp_invalid_packet: P.Data Offset(100) too large [ 166.025202][ T47] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 166.049144][ T47] as10x_usb: error during firmware upload part1 [ 166.088831][ T47] Registered device Elgato EyeTV DTT Deluxe [ 166.358058][ T5268] usb 4-1: USB disconnect, device number 7 [ 166.768229][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.238894][ T5268] Unregistered device Elgato EyeTV DTT Deluxe [ 167.263865][ T5268] as10x_usb: device has been disconnected [ 167.305421][ T47] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 167.327491][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.341938][ T47] usb 5-1: config 0 descriptor?? [ 167.393564][ T47] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 167.575955][ T47] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 167.595029][ T47] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 167.627379][ T47] usb 5-1: USB disconnect, device number 6 [ 167.872813][ T7521] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 168.380025][ T7535] dccp_invalid_packet: P.Data Offset(100) too large [ 169.082995][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.120665][ T7563] dccp_invalid_packet: P.Data Offset(100) too large [ 169.263509][ T5268] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.278499][ T47] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 169.305370][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.314188][ T47] usb 4-1: Product: syz [ 169.318980][ T47] usb 4-1: Manufacturer: syz [ 169.326391][ T47] usb 4-1: SerialNumber: syz [ 169.337699][ T47] usb 4-1: config 0 descriptor?? [ 169.348950][ T47] as10x_usb: device has been detected [ 169.357184][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 169.391868][ T47] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 170.352243][ T5268] usb 3-1: Using ep0 maxpacket: 32 [ 170.393391][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.410133][ T47] as10x_usb: error during firmware upload part1 [ 170.417598][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.444946][ T47] Registered device Elgato EyeTV DTT Deluxe [ 170.458439][ T5268] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 170.461761][ T47] usb 4-1: USB disconnect, device number 8 [ 170.505117][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.525412][ T47] Unregistered device Elgato EyeTV DTT Deluxe [ 170.530413][ T47] as10x_usb: device has been disconnected [ 170.591464][ T5268] usb 3-1: config 0 descriptor?? [ 170.749887][ T7583] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 171.033582][ T5268] usbhid 3-1:0.0: can't add hid device: -71 [ 171.064201][ T5268] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.100895][ T5268] usb 3-1: USB disconnect, device number 6 [ 171.609886][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 171.808642][ T7598] dccp_invalid_packet: P.Data Offset(100) too large [ 171.921398][ T7601] overlayfs: overlapping lowerdir path [ 172.258755][ T7614] loop1: detected capacity change from 0 to 256 [ 172.412067][ T29] audit: type=1326 audit(1722007994.271:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5dbb77299 code=0x0 [ 172.521136][ T7622] snd_dummy snd_dummy.0: control 0:0:0:syz1:1048576 is already present [ 173.547320][ T7595] loop4: detected capacity change from 0 to 32768 [ 173.662227][ T7595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.614 (7595) [ 173.706206][ T7595] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.741583][ T7595] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 173.772521][ T7595] BTRFS info (device loop4): using free-space-tree [ 173.894134][ T7649] dccp_invalid_packet: P.Data Offset(100) too large [ 174.084210][ T5301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.410455][ T6708] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.593103][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 174.632248][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.714126][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.863562][ T5301] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 175.132622][ T7664] overlayfs: statfs failed on './file0' [ 175.143296][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.213889][ T5301] usb 3-1: config 0 descriptor?? [ 175.398348][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 175.469571][ T7677] batman_adv: batadv2: Adding interface: netdevsim0 [ 175.484570][ T7677] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.523669][ T7677] batman_adv: batadv2: Interface activated: netdevsim0 [ 175.651873][ T5301] usbhid 3-1:0.0: can't add hid device: -71 [ 175.680647][ T5301] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 175.715782][ T5301] usb 3-1: USB disconnect, device number 7 [ 175.992123][ T7687] ------------[ cut here ]------------ [ 175.997943][ T7687] kernel BUG at mm/page_table_check.c:157! [ 176.006034][ T7687] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 176.006068][ T7687] CPU: 1 UID: 0 PID: 7687 Comm: syz.3.636 Not tainted 6.10.0-next-20240726-syzkaller #0 [ 176.006091][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 176.006101][ T7687] RIP: 0010:__page_table_check_zero+0x274/0x350 [ 176.006138][ T7687] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 e7 c3 f4 ff e9 2c fe ff ff e8 7d 3f 8d ff 90 0f 0b e8 75 3f 8d ff 90 0f 0b e8 6d 3f 8d ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 35 44 8d [ 176.006157][ T7687] RSP: 0018:ffffc900045af938 EFLAGS: 00010287 [ 176.006175][ T7687] RAX: ffffffff82068bb3 RBX: dffffc0000000000 RCX: 0000000000040000 [ 176.006189][ T7687] RDX: ffffc90005019000 RSI: 0000000000004ed0 RDI: 0000000000004ed1 [ 176.006202][ T7687] RBP: ffff8880198b328c R08: ffff8880198b328f R09: 1ffff11003316651 [ 176.006217][ T7687] R10: dffffc0000000000 R11: ffffed1003316652 R12: ffff8880198b3240 [ 176.006231][ T7687] R13: 1ffffffff29f3b60 R14: 0000000000000002 R15: 0000000000000000 [ 176.006245][ T7687] FS: 00007fab259636c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 176.006262][ T7687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.006275][ T7687] CR2: 0000000000000000 CR3: 00000000791b0000 CR4: 00000000003506f0 [ 176.006291][ T7687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.006314][ T7687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.006326][ T7687] Call Trace: [ 176.006334][ T7687] [ 176.006341][ T7687] ? __die_body+0x88/0xe0 [ 176.006369][ T7687] ? die+0xcf/0x110 [ 176.006394][ T7687] ? do_trap+0x15a/0x3a0 [ 176.006417][ T7687] ? __page_table_check_zero+0x274/0x350 [ 176.006440][ T7687] ? do_error_trap+0x1dc/0x2c0 [ 176.006460][ T7687] ? __page_table_check_zero+0x274/0x350 [ 176.006482][ T7687] ? __pfx_do_error_trap+0x10/0x10 [ 176.006509][ T7687] ? handle_invalid_op+0x34/0x40 [ 176.006530][ T7687] ? __page_table_check_zero+0x274/0x350 [ 176.006550][ T7687] ? exc_invalid_op+0x38/0x50 [ 176.006568][ T7687] ? asm_exc_invalid_op+0x1a/0x20 [ 176.006589][ T7687] ? __page_table_check_zero+0x273/0x350 [ 176.006612][ T7687] ? __page_table_check_zero+0x274/0x350 [ 176.006633][ T7687] ? __page_table_check_zero+0x273/0x350 [ 176.006655][ T7687] free_unref_page+0xd36/0xea0 [ 176.006686][ T7687] dec_usb_memory_use_count+0x259/0x350 [ 176.006713][ T7687] ? __pfx_usbdev_vm_close+0x10/0x10 [ 176.006735][ T7687] mmap_region+0x13b4/0x2090 [ 176.006752][ T7687] ? mark_lock+0x9a/0x360 [ 176.006786][ T7687] ? __pfx_mmap_region+0x10/0x10 [ 176.006806][ T7687] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 176.006826][ T7687] ? cap_mmap_addr+0x163/0x2c0 [ 176.006849][ T7687] ? __get_unmapped_area+0x2f0/0x360 [ 176.006870][ T7687] do_mmap+0x8f9/0x1010 [ 176.006897][ T7687] ? __pfx_do_mmap+0x10/0x10 [ 176.006914][ T7687] ? __pfx_down_write_killable+0x10/0x10 [ 176.006933][ T7687] ? __pfx_ima_file_mmap+0x10/0x10 [ 176.006954][ T7687] ? security_mmap_file+0x178/0x1a0 [ 176.006976][ T7687] vm_mmap_pgoff+0x1dd/0x3d0 [ 176.006999][ T7687] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.007033][ T7687] ? __fget_files+0x29/0x470 [ 176.007052][ T7687] ? __fget_files+0x3f6/0x470 [ 176.007074][ T7687] ksys_mmap_pgoff+0x4f1/0x720 [ 176.007092][ T7687] ? __x64_sys_mmap+0x7f/0x140 [ 176.007120][ T7687] do_syscall_64+0xf3/0x230 [ 176.007146][ T7687] ? clear_bhb_loop+0x35/0x90 [ 176.007167][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.007186][ T7687] RIP: 0033:0x7fab24b77299 [ 176.007206][ T7687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.007222][ T7687] RSP: 002b:00007fab25963048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.007240][ T7687] RAX: ffffffffffffffda RBX: 00007fab24d05f80 RCX: 00007fab24b77299 [ 176.007255][ T7687] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 176.007268][ T7687] RBP: 00007fab24be48e6 R08: 0000000000000007 R09: 0000000000000000 [ 176.007280][ T7687] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 176.007292][ T7687] R13: 000000000000000b R14: 00007fab24d05f80 R15: 00007ffe922a4438 [ 176.007313][ T7687] [ 176.007320][ T7687] Modules linked in: [ 176.007358][ T7687] ---[ end trace 0000000000000000 ]--- [ 176.249337][ T29] audit: type=1326 audit(1722007998.091:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.1.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab59f77299 code=0x0 [ 176.454835][ T7687] RIP: 0010:__page_table_check_zero+0x274/0x350 [ 176.461996][ T7687] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 e7 c3 f4 ff e9 2c fe ff ff e8 7d 3f 8d ff 90 0f 0b e8 75 3f 8d ff 90 0f 0b e8 6d 3f 8d ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 35 44 8d [ 176.487446][ T7687] RSP: 0018:ffffc900045af938 EFLAGS: 00010287 [ 176.498831][ T7687] RAX: ffffffff82068bb3 RBX: dffffc0000000000 RCX: 0000000000040000 [ 176.508401][ T7687] RDX: ffffc90005019000 RSI: 0000000000004ed0 RDI: 0000000000004ed1 [ 176.516672][ T7687] RBP: ffff8880198b328c R08: ffff8880198b328f R09: 1ffff11003316651 [ 176.526191][ T7687] R10: dffffc0000000000 R11: ffffed1003316652 R12: ffff8880198b3240 [ 176.538916][ T7687] R13: 1ffffffff29f3b60 R14: 0000000000000002 R15: 0000000000000000 [ 176.549027][ T7687] FS: 00007fab259636c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 176.559713][ T7687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.567882][ T7687] CR2: 000000110c4220a2 CR3: 00000000791b0000 CR4: 00000000003506f0 [ 176.576244][ T7687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.586757][ T7687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.596225][ T7687] Kernel panic - not syncing: Fatal exception [ 176.602516][ T7687] Kernel Offset: disabled [ 176.606825][ T7687] Rebooting in 86400 seconds..