last executing test programs: 51.741359428s ago: executing program 1 (id=35): io_setup(0x8, &(0x7f0000000280)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x548, &(0x7f0000000fc0)="$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") r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_destroy(r3) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 50.715499596s ago: executing program 1 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) 49.202661424s ago: executing program 1 (id=50): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x11, 0x800000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private=0xac141437}}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603c40b00000000000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r8, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r8, &(0x7f0000000140)=@abs, 0x6e) close(r7) 47.636524128s ago: executing program 1 (id=57): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="52bb753901dd1e0a9434d4d0f20bf76fb405"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x80d010, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_xfrm(0x10, 0x3, 0x6) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x80000004) 46.213191218s ago: executing program 1 (id=59): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000700)=';\xad~\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) 26.496045808s ago: executing program 3 (id=122): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x5, 0x0, &(0x7f0000000000)=0x8328be7a30208093) 26.081273631s ago: executing program 3 (id=124): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x45}, 0x18) bind$tipc(r0, 0x0, 0x0) 25.731807789s ago: executing program 3 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) 25.256880783s ago: executing program 3 (id=129): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e}]}, 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0086c43, &(0x7f0000000080)=0x700) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000001bc0)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) socket$inet6(0xa, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$KDENABIO(r5, 0x4b36) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000001b80)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r7, &(0x7f0000000980)='./bus\x00', 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1490, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x1228, 0x1290, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14f0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000001d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.699264743s ago: executing program 3 (id=145): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 18.681311589s ago: executing program 3 (id=157): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f", 0xa}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xffffff34) syz_emit_ethernet(0x2a, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) 11.429848016s ago: executing program 0 (id=179): socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0x40000582) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 10.792124955s ago: executing program 0 (id=184): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x5, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x3, @remote, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sysfs$3(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x2000) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) 9.475687442s ago: executing program 0 (id=191): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 7.754933024s ago: executing program 4 (id=203): r0 = socket(0x1e, 0x4, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f00000001c0)) 7.565362357s ago: executing program 4 (id=204): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007cc0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 7.565016104s ago: executing program 2 (id=205): syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@local}, {@broadcast}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 7.429873284s ago: executing program 2 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 7.227205388s ago: executing program 2 (id=208): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x3, 0xc}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000000000000008000a00fcffffff45e701a8fb695d9613ae091a5e77e3333b4c3040cbe2baf04b76947ae6c537e385d00abae05c72bb98b0dddad814f3df862ff796a5e1cdc21c392c021d475c"], 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, 0x0, 0x4000050) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) socket$rxrpc(0x21, 0x2, 0x0) 6.840874843s ago: executing program 5 (id=209): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f0000000400), 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x3d9, &(0x7f0000000a40)="$eJzs3M9rHFUcAPDvTH42re4KgqKXgIdGpEk2VTQgqBdPKgU9eA35RTVtJFnBtnuoKAgeBEEv3rz7H3ioB/8BL/4DXqRYNJdGvKzM7sx282Pjptl1mvbzgce+NzPb97470+E7L7svgEfWdES8HhEjEbEQEZV8e5qXuNku2XG7O43lv3cay0k0m+/+mUQSEXd3GsvFv5Xkr2fzxkwakX4e8ezNg/1uX7v+4dLGxupW3p6rX/lobvva9QuXryytr66vXr348vwrC4sLk7X5gcW6PlId373xzmdfLX5766kL/8xk4z2X7+uOY1CmY7rzmez30qA7K9l42QMAAKAvaZ77j7by/0qMtGptlZhrlDo4AAAAYCCar+WvHZNNAAAA4GGTRNkjAAAAAIar+B7A3Z3GclFK/DrC/+7OGxFRbce/m5f2ntGYzI8ZG+LvW6cj4tKNrz/ISgzpd8gAAN1+yvKf+cPyvzSe7jpuIqKVD50ZcP/T+9oH85/09oC73CPL/17N17bZm/+lxSHVkbz1WCtVHEvWLm+szkfE4xExE2MTWbt2RB/VN3/5q9e+7vwvK1n/RS6Yj+P26MTe96ws1ZdOEnO3O59GPDN6WPxJJ/9NImLqBH3U/nj/Vq99/x3/cDW/jzh/6Pm/t3JPcsT6RIu1+bnW9TBXXBUH/Xjpy+1e/Zcdf3b+p46Ov5p0r9fUM5Le3n7+i7Ve++73+h9P3mvVi+eyT5bq9a1axHjy1sHtC/feW7SL47P4Z547/P9/cf9L8jWtzuX3gOM6/92vP9x//MOVxb9yrPN//MrU1m8/9+q/v/P/Yqs2k2/p5/7X7wBP8tkBAADAaZG25jWSdLZTT9PZ2fZ8x5MxlW5sbtdfWNv8+OpKe/6jGmNpMdNV6ZoPrbX/jN5pL+xrX4yIJyLim8qZVnt2eXNjpezgAQAA4BFxtsfzf+b3StmjAwAAAAamWvYAAAAAgKHr6/k/Hf44AAAAgKE4ybp+Kg9cpTkR8QAMQ+X0V8q+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxu/wYAAP//ClnRQg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0xe, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, 0x0}}], 0x0, 0x0, 0x0}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x8ec00}], 0x12, 0x1400, 0x0, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 5.827320948s ago: executing program 5 (id=210): sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCFLSH(r0, 0x8924, 0x20001116) 5.249364656s ago: executing program 4 (id=211): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000000180)="9c", 0xfffffc24, 0x6}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, r1, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) 4.969921887s ago: executing program 4 (id=212): socket(0x10, 0x80002, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x400442c8, &(0x7f0000000080)={'macsec0\x00', @dev}) 4.754425193s ago: executing program 4 (id=213): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x5}}], 0x18}, 0x0) 4.524308424s ago: executing program 4 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f85b039d5430b3c6643e9146d2478ce31344b554aca78a"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x17, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00'}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e16c3b42a1"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x38}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8020, 0x7800, 0x8, 0x2, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x7}]}}}}}) 4.482108225s ago: executing program 5 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00220500000008aacec498"], 0x0}, 0x0) 4.041423995s ago: executing program 0 (id=216): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x3) 3.822651604s ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000054000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.612811888s ago: executing program 0 (id=218): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) unshare(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000080)) 3.421290209s ago: executing program 2 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r1, &(0x7f00000008c0), 0x12) 2.539611774s ago: executing program 2 (id=220): r0 = syz_usb_connect$cdc_ecm(0x0, 0x143, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x131, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0xa}, @mdlm_detail={0xf0, 0x24, 0x13, 0xf7, "77992cef8419b8774b71e839ceb014d77e8b78e1d002d048336155bb5db7e16a2d415a9e1080fdfb840ed95e4e688965eb361aabde768e43d17ff65f91c480ab8a62707dda68d24afdc1b4aa4c64c624a3f4cf4ed8f75e1c7a0b3b5a867dcb8e2832aad0b19b53fa0ed88969350535c7e66d5f21e71e441cf81afdab8ad3930233d9c69de1133a7b451e04f0ebc2303bdad74849b19119f50539c76ad331678304b6e5a7f5daebb8cb3605652cc60a7545c8bf613a76d475e3fe2429f711ce62de9f3b98f3c4f9c108671d3413c96e20199d058b622d4242bdf071a6a21f5de9265c325b99ea37cbea953e08"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c96af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf7af8ea5b4bd9593f73c6c95dd6d59483763debf02ea36803976b6cc145338e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0xfffffed5, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000006400031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0xb, {0xb, 0x0, "a7b04634daddb23dc2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f000000affb)=[{}], 0x1, 0x7fff) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000007}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x2, 0x1f, 0x1, {0x22, 0xdeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x0, 0xa9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x40, 0x7f, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x40, 0xd2, 0x80, 0x8, 0x9}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0x400}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "e1a33cd24705e46a4231"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x440a}}, {0x2a, &(0x7f00000002c0)=@string={0x2a, 0x3, "e025ce60e3d0bc8faeb738342df500196bd87010f4df4829e955851b84de1d56d3ceb7096e058cbb"}}]}) 2.355234756s ago: executing program 0 (id=221): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007cc0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 1.733402275s ago: executing program 5 (id=222): socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0xa, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 930.635291ms ago: executing program 5 (id=223): socket(0x10, 0x80002, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x400442c8, &(0x7f0000000080)={'macsec0\x00', @dev}) 0s ago: executing program 5 (id=224): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x5}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 72.601747][ T5213] cgroup: Unknown subsys name 'net' [ 72.772531][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.348724][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.244772][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.263844][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.282018][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.290265][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.323225][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.336647][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.341438][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.345210][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.362112][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.371584][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.372665][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.379119][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.393586][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.402531][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.410900][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.412845][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.418909][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.436340][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.441418][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.446779][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.459235][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.466686][ T4613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.466714][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.474560][ T4613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.492576][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.495787][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.502556][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.515430][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.516699][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.524235][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.531041][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.542095][ T4613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.557047][ T4613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.574359][ T4613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.584090][ T4613] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.591727][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.377029][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 78.443644][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 78.504671][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 78.656905][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 78.846739][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 78.859488][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.871059][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.878633][ T5224] bridge_slave_0: entered allmulticast mode [ 78.886577][ T5224] bridge_slave_0: entered promiscuous mode [ 78.967626][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.974935][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.982415][ T5224] bridge_slave_1: entered allmulticast mode [ 78.989710][ T5224] bridge_slave_1: entered promiscuous mode [ 79.006299][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 79.017660][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.025096][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.033275][ T5229] bridge_slave_0: entered allmulticast mode [ 79.040486][ T5229] bridge_slave_0: entered promiscuous mode [ 79.049034][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.056263][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.063536][ T5229] bridge_slave_1: entered allmulticast mode [ 79.070769][ T5229] bridge_slave_1: entered promiscuous mode [ 79.177772][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.185404][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.193674][ T5225] bridge_slave_0: entered allmulticast mode [ 79.201970][ T5225] bridge_slave_0: entered promiscuous mode [ 79.210408][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.217896][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.225162][ T5225] bridge_slave_1: entered allmulticast mode [ 79.233531][ T5225] bridge_slave_1: entered promiscuous mode [ 79.281408][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.348016][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.358219][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.366424][ T5227] bridge_slave_0: entered allmulticast mode [ 79.374407][ T5227] bridge_slave_0: entered promiscuous mode [ 79.383142][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.390321][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.398075][ T5227] bridge_slave_1: entered allmulticast mode [ 79.406200][ T5227] bridge_slave_1: entered promiscuous mode [ 79.416120][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.443167][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.456277][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.491992][ T5245] Bluetooth: hci0: command tx timeout [ 79.553464][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.566834][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.570958][ T5245] Bluetooth: hci1: command tx timeout [ 79.582548][ T5232] Bluetooth: hci2: command tx timeout [ 79.621878][ T5224] team0: Port device team_slave_0 added [ 79.651378][ T5245] Bluetooth: hci4: command tx timeout [ 79.657136][ T5245] Bluetooth: hci5: command tx timeout [ 79.660861][ T5232] Bluetooth: hci3: command tx timeout [ 79.717921][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.734126][ T5224] team0: Port device team_slave_1 added [ 79.746739][ T5229] team0: Port device team_slave_0 added [ 79.782279][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.789544][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.797160][ T5226] bridge_slave_0: entered allmulticast mode [ 79.805187][ T5226] bridge_slave_0: entered promiscuous mode [ 79.814690][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.821951][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.829130][ T5228] bridge_slave_0: entered allmulticast mode [ 79.837169][ T5228] bridge_slave_0: entered promiscuous mode [ 79.847929][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.874091][ T5229] team0: Port device team_slave_1 added [ 79.898369][ T5225] team0: Port device team_slave_0 added [ 79.905567][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.916876][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.924225][ T5226] bridge_slave_1: entered allmulticast mode [ 79.932158][ T5226] bridge_slave_1: entered promiscuous mode [ 79.938972][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.946349][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.953618][ T5228] bridge_slave_1: entered allmulticast mode [ 79.962458][ T5228] bridge_slave_1: entered promiscuous mode [ 79.996037][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.003453][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.029843][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.046454][ T5225] team0: Port device team_slave_1 added [ 80.117701][ T5227] team0: Port device team_slave_0 added [ 80.140669][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.147850][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.174129][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.229632][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.247262][ T5227] team0: Port device team_slave_1 added [ 80.254390][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.261705][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.287832][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.301796][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.308765][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.334800][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.363449][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.375721][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.440371][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.447541][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.474102][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.488235][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.495680][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.521790][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.536181][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.587898][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.595053][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.621501][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.635134][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.642417][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.669248][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.738125][ T5228] team0: Port device team_slave_0 added [ 80.748389][ T5228] team0: Port device team_slave_1 added [ 80.810122][ T5224] hsr_slave_0: entered promiscuous mode [ 80.818080][ T5224] hsr_slave_1: entered promiscuous mode [ 80.870405][ T5227] hsr_slave_0: entered promiscuous mode [ 80.877573][ T5227] hsr_slave_1: entered promiscuous mode [ 80.885206][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.893359][ T5227] Cannot create hsr debugfs directory [ 80.905919][ T5229] hsr_slave_0: entered promiscuous mode [ 80.913272][ T5229] hsr_slave_1: entered promiscuous mode [ 80.919653][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.927312][ T5229] Cannot create hsr debugfs directory [ 81.019636][ T5226] team0: Port device team_slave_0 added [ 81.115537][ T5226] team0: Port device team_slave_1 added [ 81.138966][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.146263][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.173796][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.193383][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.200418][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.226705][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.383280][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.390263][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.418131][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.459675][ T5225] hsr_slave_0: entered promiscuous mode [ 81.468385][ T5225] hsr_slave_1: entered promiscuous mode [ 81.482130][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.489721][ T5225] Cannot create hsr debugfs directory [ 81.569259][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.581725][ T5232] Bluetooth: hci0: command tx timeout [ 81.587721][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.620652][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.650959][ T5232] Bluetooth: hci1: command tx timeout [ 81.656437][ T5232] Bluetooth: hci2: command tx timeout [ 81.730830][ T5232] Bluetooth: hci3: command tx timeout [ 81.736484][ T5232] Bluetooth: hci5: command tx timeout [ 81.741987][ T5250] Bluetooth: hci4: command tx timeout [ 81.807022][ T5228] hsr_slave_0: entered promiscuous mode [ 81.814480][ T5228] hsr_slave_1: entered promiscuous mode [ 81.821372][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.828958][ T5228] Cannot create hsr debugfs directory [ 82.078267][ T5226] hsr_slave_0: entered promiscuous mode [ 82.089244][ T5226] hsr_slave_1: entered promiscuous mode [ 82.095810][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.103745][ T5226] Cannot create hsr debugfs directory [ 82.418779][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.441749][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.487088][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.515699][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.589273][ T5224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.603358][ T5224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.616928][ T5224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.627557][ T5224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.788172][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.830882][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.876713][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.914919][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.003139][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.028866][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.051570][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.069047][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.107482][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.123718][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.156462][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.173720][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.187361][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.200323][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.244530][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.304092][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.315229][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.322699][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.378581][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.385730][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.400194][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.407317][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.424320][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.452915][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.488174][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.495377][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.512225][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.527539][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.651077][ T5250] Bluetooth: hci0: command tx timeout [ 83.667949][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.731397][ T5250] Bluetooth: hci2: command tx timeout [ 83.736865][ T5250] Bluetooth: hci1: command tx timeout [ 83.819903][ T5250] Bluetooth: hci4: command tx timeout [ 83.825708][ T5232] Bluetooth: hci5: command tx timeout [ 83.831907][ T5245] Bluetooth: hci3: command tx timeout [ 83.869493][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.949156][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.989339][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.153117][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.205266][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.235286][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.257507][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.264684][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.277838][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.285022][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.312198][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.319439][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.355542][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.388960][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.396157][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.459433][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.541933][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.583939][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.617167][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.644012][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.651256][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.670278][ T5227] veth0_vlan: entered promiscuous mode [ 84.727423][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.760281][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.767537][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.796485][ T5227] veth1_vlan: entered promiscuous mode [ 84.914463][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.922502][ T5297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.997150][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.004398][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.204820][ T5224] veth0_vlan: entered promiscuous mode [ 85.219045][ T5224] veth1_vlan: entered promiscuous mode [ 85.229487][ T5227] veth0_macvtap: entered promiscuous mode [ 85.269985][ T5227] veth1_macvtap: entered promiscuous mode [ 85.316058][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.384672][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.470401][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.495256][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.520952][ T5224] veth0_macvtap: entered promiscuous mode [ 85.544842][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.568449][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.589396][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.606499][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616477][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638536][ T5224] veth1_macvtap: entered promiscuous mode [ 85.731662][ T5250] Bluetooth: hci0: command tx timeout [ 85.811940][ T5232] Bluetooth: hci2: command tx timeout [ 85.817437][ T5250] Bluetooth: hci1: command tx timeout [ 85.845957][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.856980][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.869581][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.891439][ T5245] Bluetooth: hci3: command tx timeout [ 85.897148][ T5232] Bluetooth: hci5: command tx timeout [ 85.902845][ T5250] Bluetooth: hci4: command tx timeout [ 85.932985][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.978925][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.992089][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.006408][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.025568][ T5228] veth0_vlan: entered promiscuous mode [ 86.082716][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.095797][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.105077][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.132027][ T5224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.142959][ T5224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.154478][ T5224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167607][ T5224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.192506][ T5229] veth0_vlan: entered promiscuous mode [ 86.242691][ T5228] veth1_vlan: entered promiscuous mode [ 86.268098][ T5229] veth1_vlan: entered promiscuous mode [ 86.303945][ T46] cfg80211: failed to load regulatory.db [ 86.342780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.350644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448782][ T5228] veth0_macvtap: entered promiscuous mode [ 86.507945][ T5228] veth1_macvtap: entered promiscuous mode [ 86.525723][ T5229] veth0_macvtap: entered promiscuous mode [ 86.542847][ T5226] veth0_vlan: entered promiscuous mode [ 86.578869][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.598683][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.608651][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.630790][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.644199][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.667454][ T5229] veth1_macvtap: entered promiscuous mode [ 86.750494][ T5226] veth1_vlan: entered promiscuous mode [ 86.793143][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.804853][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.812620][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.816770][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.839361][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.860202][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.878559][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.925170][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.944803][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.958020][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.966982][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.014948][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.027965][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.039213][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.060886][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.081533][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.094160][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.107485][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.140192][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.144925][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.160354][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.185121][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.191011][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.216156][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.232811][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.237000][ T5345] loop1: detected capacity change from 0 to 16 [ 87.243653][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.264055][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.309327][ T5345] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 87.354373][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370009][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.381743][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.390577][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.392679][ T5345] loop1: detected capacity change from 0 to 164 [ 87.406671][ T5225] veth0_vlan: entered promiscuous mode [ 87.441688][ T5345] ======================================================= [ 87.441688][ T5345] WARNING: The mand mount option has been deprecated and [ 87.441688][ T5345] and is ignored by this kernel. Remove the mand [ 87.441688][ T5345] option from the mount to silence this warning. [ 87.441688][ T5345] ======================================================= [ 87.497132][ T5226] veth0_macvtap: entered promiscuous mode [ 87.530514][ T5345] Unable to read rock-ridge attributes [ 87.861799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 88.109476][ T5225] veth1_vlan: entered promiscuous mode [ 88.307363][ T5226] veth1_macvtap: entered promiscuous mode [ 88.370521][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.400368][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.418952][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.430097][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.446915][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.459808][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.482453][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.493305][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.495687][ T5351] netlink: 'syz.5.10': attribute type 1 has an invalid length. [ 88.506634][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.574979][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.597723][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.608280][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.620323][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.630829][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.641889][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652141][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.663733][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.676381][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.793445][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.821296][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.830069][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.857374][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.881726][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.932625][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.449839][ T5225] veth0_macvtap: entered promiscuous mode [ 89.716272][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.767368][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.814575][ T5225] veth1_macvtap: entered promiscuous mode [ 89.849181][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.890202][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051123][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.078610][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.096908][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118391][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.136439][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.158798][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.182285][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.207290][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.213639][ T5367] loop1: detected capacity change from 0 to 256 [ 90.241169][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.265649][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.313972][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.333613][ T5369] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.345647][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.363516][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.459537][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.491293][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.501315][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.549288][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.584054][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.617816][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.644684][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.676777][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.686844][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.698364][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.730146][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.777735][ T2555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.803463][ T2555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.831761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 90.868564][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.943485][ T5376] loop5: detected capacity change from 0 to 16 [ 90.951892][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974528][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.993956][ T5376] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 91.024619][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.085975][ T5376] loop5: detected capacity change from 0 to 164 [ 91.105596][ T5376] Unable to read rock-ridge attributes [ 91.446095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.882681][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.897611][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.111535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.284442][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.337344][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.573475][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.718739][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.087084][ T5408] loop2: detected capacity change from 0 to 512 [ 94.118445][ T5406] loop1: detected capacity change from 0 to 1024 [ 94.202038][ T5408] EXT4-fs: Ignoring removed bh option [ 94.314720][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.432208][ T5408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.461199][ T29] audit: type=1326 audit(1722460441.313:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35ef773b9 code=0x0 [ 94.490981][ T5408] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 94.528096][ T5408] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.29: invalid indirect mapped block 8 (level 2) [ 94.563843][ T5416] loop0: detected capacity change from 0 to 256 [ 94.610793][ T5408] EXT4-fs (loop2): Remounting filesystem read-only [ 94.662313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 94.684726][ T5408] EXT4-fs (loop2): 1 truncate cleaned up [ 94.720458][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.915166][ T5426] loop1: detected capacity change from 0 to 512 [ 95.142734][ T5426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.201303][ T5426] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.598692][ T5441] loop5: detected capacity change from 0 to 512 [ 95.671088][ T5441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.740575][ T5441] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.764939][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.818663][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.839674][ T5441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 95.915179][ T5441] System zones: 0-2, 18-18, 34-34 [ 95.922301][ T5451] loop0: detected capacity change from 0 to 512 [ 95.933615][ T5451] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 95.947703][ T5441] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 95.980152][ T5441] EXT4-fs (loop5): 1 truncate cleaned up [ 95.999607][ T5441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.091812][ T5456] syz.2.45[5456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.091989][ T5456] syz.2.45[5456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.295826][ T5441] EXT4-fs error (device loop5): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.5.41: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 97.188354][ T5441] EXT4-fs (loop5): Remounting filesystem read-only [ 97.380663][ T5463] loop3: detected capacity change from 0 to 1024 [ 97.513837][ T5465] Illegal XDP return value 1608675369 on prog (id 9) dev N/A, expect packet loss! [ 97.560665][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 97.617918][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.683965][ T29] audit: type=1326 audit(1722460444.553:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd66ef773b9 code=0x0 [ 98.032238][ T5480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.778483][ T5470] loop0: detected capacity change from 0 to 4096 [ 98.855081][ T5482] evm: overlay not supported [ 98.871792][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 98.929362][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 98.970466][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 98.987677][ T5488] loop4: detected capacity change from 0 to 8 [ 98.995577][ T5488] squashfs: Unknown parameter 'dÀš' [ 99.025941][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 99.069727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.078943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.087942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.100896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.109599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.259537][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 99.267987][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 99.391180][ T5491] loop1: detected capacity change from 0 to 128 [ 99.666228][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 100.183873][ T5492] UBIFS error (pid: 5492): cannot open "./file0", error -22 [ 100.222698][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 100.245732][ T5227] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 100.334175][ T5227] FAT-fs (loop1): Filesystem has been set read-only [ 100.357146][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 100.446126][ T5470] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 100.463584][ T5227] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.528453][ T5495] loop3: detected capacity change from 0 to 512 [ 100.563673][ T5227] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.647805][ T5495] EXT4-fs: Ignoring removed bh option [ 100.748982][ T5495] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.776901][ T5495] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 100.852750][ T5495] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.58: invalid indirect mapped block 8 (level 2) [ 100.926646][ T5495] EXT4-fs (loop3): Remounting filesystem read-only [ 100.948045][ T5495] EXT4-fs (loop3): 1 truncate cleaned up [ 100.975586][ T5495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.131505][ T5295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.417052][ T5505] loop0: detected capacity change from 0 to 32768 [ 101.441776][ T5505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.63 (5505) [ 101.463918][ T5505] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.474303][ T5505] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.484640][ T5505] BTRFS info (device loop0): using free-space-tree [ 101.531046][ T5295] usb 3-1: Using ep0 maxpacket: 16 [ 101.550995][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.565768][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.581233][ T5295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.587735][ T5513] syz.5.64[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.597331][ T5295] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.618906][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.632894][ T5513] syz.5.64[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.766679][ T5295] usb 3-1: config 0 descriptor?? [ 101.961892][ T5505] syz.0.63 (5505) used greatest stack depth: 18672 bytes left [ 102.048942][ T2928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.066715][ T5292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.234923][ T5226] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.282801][ T5228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.305931][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.325970][ T2928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.339135][ T5295] microsoft 0003:045E:07DA.0001: report is too long [ 102.377459][ T5292] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.404746][ T5295] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 102.441349][ T5295] microsoft 0003:045E:07DA.0001: parse failed [ 102.450970][ T5292] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.469270][ T5295] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 102.480756][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.543692][ T5292] usb 6-1: config 0 descriptor?? [ 102.581559][ T5295] usb 3-1: USB disconnect, device number 2 [ 102.830127][ T2928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.025329][ T5292] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.078163][ T5292] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 103.116298][ T2928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.134352][ T5292] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 103.276374][ T5292] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 103.345117][ T5526] loop3: detected capacity change from 0 to 4096 [ 103.406419][ T5250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.415310][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.440914][ T5292] usb 6-1: USB disconnect, device number 2 [ 103.470934][ T5250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.484716][ T5250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.494207][ T5250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.502511][ T5250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.652112][ T5537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'. [ 103.712882][ T5526] ntfs3: loop3: Failed to load $MFT (-2). [ 103.772398][ T5539] loop2: detected capacity change from 0 to 512 [ 103.864577][ T5539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 103.875518][ T2928] bridge_slave_1: left allmulticast mode [ 103.893811][ T2928] bridge_slave_1: left promiscuous mode [ 103.900999][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.908264][ T5539] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.973573][ T5539] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.069935][ T5539] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 104.082247][ T2928] bridge_slave_0: left allmulticast mode [ 104.089639][ T5539] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.71: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.120738][ T2928] bridge_slave_0: left promiscuous mode [ 104.126507][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.222145][ T5539] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.71: couldn't read orphan inode 13 (err -117) [ 104.305276][ T5539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.409118][ T5537] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 104.460803][ T5537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 104.520227][ T5537] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.605831][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 104.694780][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 104.824946][ T5571] loop5: detected capacity change from 0 to 256 [ 104.847651][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.937920][ T5571] FAT-fs (loop5): Directory bread(block 64) failed [ 104.967997][ T5571] FAT-fs (loop5): Directory bread(block 65) failed [ 105.019142][ T5571] FAT-fs (loop5): Directory bread(block 66) failed [ 105.045266][ T5571] FAT-fs (loop5): Directory bread(block 67) failed [ 105.078487][ T5571] FAT-fs (loop5): Directory bread(block 68) failed [ 105.106743][ T5571] FAT-fs (loop5): Directory bread(block 69) failed [ 105.116232][ T5580] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.155615][ T5571] FAT-fs (loop5): Directory bread(block 70) failed [ 105.178313][ T5571] FAT-fs (loop5): Directory bread(block 71) failed [ 105.196765][ T5571] FAT-fs (loop5): Directory bread(block 72) failed [ 105.217205][ T5571] FAT-fs (loop5): Directory bread(block 73) failed [ 105.398505][ T5585] loop3: detected capacity change from 0 to 8 [ 105.486680][ T5585] squashfs: Unknown parameter 'dÀš' [ 105.571543][ T5250] Bluetooth: hci2: command tx timeout [ 105.748717][ T5593] UBIFS error (pid: 5593): cannot open "./file0", error -22 [ 105.864544][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.887722][ T5596] syz.5.85[5596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.887881][ T5596] syz.5.85[5596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.918156][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.950523][ T2928] bond0 (unregistering): Released all slaves [ 106.230864][ T5292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.433228][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.527468][ T5292] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.586273][ T5292] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.666847][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.715238][ T5292] usb 6-1: config 0 descriptor?? [ 106.812542][ T5250] Bluetooth: Frame is too long (len 16, expected len 4) [ 106.840849][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.070859][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 107.104476][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=c3.4e [ 107.140561][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.213385][ T9] usb 3-1: Product: syz [ 107.221596][ T5292] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 107.235940][ T9] usb 3-1: Manufacturer: syz [ 107.249406][ T5292] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 107.265000][ T9] usb 3-1: SerialNumber: syz [ 107.301826][ T9] usb 3-1: config 0 descriptor?? [ 107.314013][ T5292] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 107.344391][ T9] usbtest 3-1:0.0: FX2 device [ 107.349353][ T9] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 107.378479][ T5292] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 107.423188][ T5292] usb 6-1: USB disconnect, device number 3 [ 107.661043][ T5250] Bluetooth: hci2: command tx timeout [ 107.711266][ T5238] usb 3-1: USB disconnect, device number 3 [ 108.553095][ T2928] hsr_slave_0: left promiscuous mode [ 108.659688][ T2928] hsr_slave_1: left promiscuous mode [ 108.723104][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.730640][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.794368][ T5639] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 108.821445][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.888592][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.268548][ T5648] loop0: detected capacity change from 0 to 32768 [ 109.301064][ T5648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.96 (5648) [ 109.339373][ T5648] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.349716][ T5648] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.358556][ T5648] BTRFS info (device loop0): using free-space-tree [ 109.382903][ T2928] veth1_macvtap: left promiscuous mode [ 109.429066][ T2928] veth0_macvtap: left promiscuous mode [ 109.469742][ T2928] veth1_vlan: left promiscuous mode [ 109.499953][ T2928] veth0_vlan: left promiscuous mode [ 109.505329][ T5644] loop5: detected capacity change from 0 to 8192 [ 109.545796][ T5654] loop2: detected capacity change from 0 to 512 [ 109.562045][ T5654] EXT4-fs: Ignoring removed bh option [ 109.724839][ T5648] syz.0.96 (5648) used greatest stack depth: 18160 bytes left [ 109.732850][ T5250] Bluetooth: hci2: command tx timeout [ 109.769687][ T5654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.791363][ T5654] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.889423][ T5654] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.97: invalid indirect mapped block 8 (level 2) [ 109.924816][ C1] eth0: bad gso: type: 1, size: 1408 [ 110.001872][ T5226] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.047589][ T5654] EXT4-fs (loop2): Remounting filesystem read-only [ 110.084251][ T5654] EXT4-fs (loop2): 1 truncate cleaned up [ 110.092917][ T5654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.208393][ T5672] loop3: detected capacity change from 0 to 2048 [ 110.256008][ T5672] EXT4-fs: Ignoring removed i_version option [ 110.283492][ T5672] EXT4-fs: Invalid want_extra_isize 5 [ 111.031947][ T5679] loop0: detected capacity change from 0 to 512 [ 111.246720][ T5679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.335971][ T5679] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.384633][ T5679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.544291][ T5688] loop5: detected capacity change from 0 to 256 [ 111.612142][ T5688] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 111.953445][ T5250] Bluetooth: hci2: command tx timeout [ 112.310190][ T5679] overlay: ./file0 is not a directory [ 112.707728][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 112.797959][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 112.811057][ T5693] loop0: detected capacity change from 0 to 8 [ 112.869654][ T5693] squashfs: Unknown parameter 'dÀš' [ 112.908450][ T5695] loop5: detected capacity change from 0 to 512 [ 112.938905][ T5695] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 112.972387][ T5696] UBIFS error (pid: 5696): cannot open "./file0", error -22 [ 115.132501][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.105'. [ 115.210997][ T5532] chnl_net:caif_netlink_parms(): no params data found [ 115.376997][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.184232][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.234660][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.284083][ T5532] bridge_slave_0: entered allmulticast mode [ 116.316324][ T5532] bridge_slave_0: entered promiscuous mode [ 116.549784][ T5724] loop3: detected capacity change from 0 to 32768 [ 116.561573][ T5724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.109 (5724) [ 116.590989][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.598174][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.609061][ T5532] bridge_slave_1: entered allmulticast mode [ 116.616382][ T5724] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.626760][ T5724] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 116.637813][ T5724] BTRFS info (device loop3): using free-space-tree [ 116.662403][ T5732] loop5: detected capacity change from 0 to 256 [ 116.663479][ T5532] bridge_slave_1: entered promiscuous mode [ 116.703140][ T5732] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 117.824474][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.010775][ T5230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.043955][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.102033][ T5228] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.260914][ T29] audit: type=1326 audit(1722460465.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.289692][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.332616][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.346125][ T29] audit: type=1326 audit(1722460465.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.389115][ T29] audit: type=1326 audit(1722460465.123:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.421059][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.490609][ T5532] team0: Port device team_slave_0 added [ 118.501009][ T5230] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 118.538953][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.548775][ T5532] team0: Port device team_slave_1 added [ 118.560096][ T29] audit: type=1326 audit(1722460465.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.625836][ T5230] usb 5-1: config 0 descriptor?? [ 118.674248][ T5230] smsusb:smsusb_probe: board id=8, interface number 0 [ 118.681055][ T29] audit: type=1326 audit(1722460465.133:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.681119][ T29] audit: type=1326 audit(1722460465.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.681175][ T29] audit: type=1326 audit(1722460465.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.681231][ T29] audit: type=1326 audit(1722460465.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.681288][ T29] audit: type=1326 audit(1722460465.133:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.681343][ T29] audit: type=1326 audit(1722460465.133:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 118.963010][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.119'. [ 119.858517][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.890713][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.906067][ T5230] smsusb:smsusb_probe: Device initialized with return code -19 [ 120.110656][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.122084][ T5780] loop5: detected capacity change from 0 to 2048 [ 120.122980][ T5780] EXT4-fs: Ignoring removed i_version option [ 120.194537][ T5230] usb 5-1: USB disconnect, device number 2 [ 120.212698][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.227849][ T5780] EXT4-fs: Invalid want_extra_isize 5 [ 120.268474][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.380091][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.456698][ T5788] loop2: detected capacity change from 0 to 2048 [ 120.499389][ T5788] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.643843][ T5794] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.665632][ T5788] syz.2.123: attempt to access beyond end of device [ 120.665632][ T5788] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 120.836186][ T5797] loop0: detected capacity change from 0 to 256 [ 120.999196][ T5797] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 121.031970][ T5800] netlink: 60 bytes leftover after parsing attributes in process `syz.4.126'. [ 121.139167][ T5800] loop4: detected capacity change from 0 to 512 [ 121.402144][ T5804] xt_bpf: check failed: parse error [ 123.243052][ T5804] syz.2.123: attempt to access beyond end of device [ 123.243052][ T5804] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 123.257036][ T5804] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 123.633203][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 123.633229][ T29] audit: type=1326 audit(1722460469.053:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 123.722287][ T5532] hsr_slave_0: entered promiscuous mode [ 123.816868][ T5800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 123.847722][ T5532] hsr_slave_1: entered promiscuous mode [ 123.860796][ T29] audit: type=1326 audit(1722460469.053:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 123.944309][ T5800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.960966][ T5800] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 123.980775][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.984867][ T29] audit: type=1326 audit(1722460469.163:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 124.019961][ T5532] Cannot create hsr debugfs directory [ 124.025881][ T5800] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 124.041970][ T5800] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 124.112332][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.126: couldn't read orphan inode 13 (err -117) [ 124.119547][ T5818] loop3: detected capacity change from 0 to 512 [ 124.145289][ T29] audit: type=1326 audit(1722460469.163:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 124.196679][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.249120][ T29] audit: type=1326 audit(1722460469.163:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 124.311280][ T29] audit: type=1326 audit(1722460469.273:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f8e3fd773b9 code=0x7ffc0000 [ 124.398804][ T5818] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.129: bg 0: block 248: padding at end of block bitmap is not set [ 124.428028][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.456998][ T5818] Quota error (device loop3): write_blk: dquota write failed [ 124.467259][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 124.476576][ T5818] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 124.499437][ T5818] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.129: Failed to acquire dquot type 1 [ 124.669727][ T5818] EXT4-fs (loop3): 1 truncate cleaned up [ 124.702354][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.767948][ T5818] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.224674][ T5840] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.313246][ T5840] binder: Unknown parameter 'workdir1vE3…æÅçwüÀÐc;0 «Ü†ëü·XV–`/gc­ £˜| ²Hóh¹[@/ÖM†“éApƒ9A^¿\' [ 125.378181][ T5853] loop4: detected capacity change from 0 to 512 [ 125.403972][ T5814] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.129: deleted inode referenced: 12 [ 125.530015][ T5856] loop0: detected capacity change from 0 to 256 [ 125.539204][ T29] audit: type=1326 audit(1722460472.393:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5857 comm="syz.2.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3fd773b9 code=0x0 [ 125.560771][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.618883][ T5856] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 125.678935][ T5853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.740183][ T5228] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 125.746821][ T5853] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.837292][ T5228] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 126.011776][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.766325][ T5875] ebt_limit: overflow, try lower: 12058624/0 [ 127.169812][ T5887] syz.2.150[5887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.205867][ C1] eth0: bad gso: type: 1, size: 1408 [ 127.585581][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 127.611769][ T5228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.628786][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:0: Failed to release dquot type 1 [ 127.954902][ T2954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.654562][ T2954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.110059][ T5532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.254949][ T5914] loop5: detected capacity change from 0 to 1024 [ 129.322211][ T5914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.327394][ T2954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.395119][ T5532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.453040][ T5532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.501623][ T5532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.563778][ C1] eth0: bad gso: type: 1, size: 1408 [ 129.592698][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.663810][ T2954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.912426][ T5930] loop5: detected capacity change from 0 to 512 [ 129.998402][ T5250] Bluetooth: Frame is too long (len 16, expected len 4) [ 130.022136][ T5930] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.043570][ T5930] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 130.128927][ T5930] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 130.220903][ T5930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 130.270944][ T5930] System zones: 0-2, 18-18, 34-34 [ 130.338835][ T5930] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.441403][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.460812][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.480536][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.502222][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.510439][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.518162][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.627528][ T5930] EXT4-fs (loop5): 1 truncate cleaned up [ 130.709474][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.788142][ T2954] bridge_slave_1: left allmulticast mode [ 130.800296][ T2954] bridge_slave_1: left promiscuous mode [ 130.831309][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.852868][ T5232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 130.873112][ T5232] Bluetooth: hci0: Injecting HCI hardware error event [ 130.885029][ T5250] Bluetooth: hci0: hardware error 0x00 [ 131.186360][ T2954] bridge_slave_0: left allmulticast mode [ 131.497766][ T2954] bridge_slave_0: left promiscuous mode [ 131.850913][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.149099][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.378155][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.386379][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.700857][ T5232] Bluetooth: hci4: command tx timeout [ 133.330937][ T5250] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 133.840813][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.929144][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.945119][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.956355][ T2954] bond0 (unregistering): Released all slaves [ 134.153381][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.193953][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.239000][ T46] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.259430][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.293641][ T5975] loop5: detected capacity change from 0 to 164 [ 134.319212][ T46] usb 3-1: config 0 descriptor?? [ 134.334819][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.591427][ T5979] loop4: detected capacity change from 0 to 1024 [ 134.636551][ T5960] warning: `syz.2.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.681097][ T5238] usb 3-1: USB disconnect, device number 4 [ 134.719164][ T5979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.770819][ T5250] Bluetooth: hci4: command tx timeout [ 135.011251][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.177'. [ 135.047059][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.057586][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.177'. [ 135.107414][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.135947][ T5998] process 'syz.0.179' launched './file1' with NULL argv: empty string added [ 135.236327][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.243591][ T5315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.478937][ T2954] hsr_slave_0: left promiscuous mode [ 135.602802][ T2954] hsr_slave_1: left promiscuous mode [ 135.661040][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.713948][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.808187][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.816665][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.965302][ T2954] veth1_macvtap: left promiscuous mode [ 135.993291][ T2954] veth0_macvtap: left promiscuous mode [ 136.021133][ T2954] veth1_vlan: left promiscuous mode [ 136.047057][ T2954] veth0_vlan: left promiscuous mode [ 136.076574][ T6028] loop0: detected capacity change from 0 to 1024 [ 136.142106][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.166787][ T6028] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.243671][ T6036] syz.4.188 (6036): /proc/6036/oom_adj is deprecated, please use /proc/6036/oom_score_adj instead. [ 136.250990][ T6028] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 136.330059][ T6028] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.343373][ T6028] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.184: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.362405][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 136.381373][ T6028] EXT4-fs (loop0): 1 orphan inode deleted [ 136.385994][ T9] usb 3-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 136.431390][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.440827][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.477163][ T9] usb 3-1: Product: syz [ 136.490816][ T9] usb 3-1: Manufacturer: syz [ 136.506104][ T9] usb 3-1: SerialNumber: syz [ 136.544088][ T9] usb 3-1: config 0 descriptor?? [ 136.564229][ T9] cp210x 3-1:0.0: cp210x converter detected [ 136.852037][ T5250] Bluetooth: hci4: command tx timeout [ 136.966916][ T5226] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.023985][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 137.074223][ T9] usb 3-1: USB disconnect, device number 5 [ 137.136672][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.187986][ T9] cp210x 3-1:0.0: device disconnected [ 137.480937][ T5294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.653927][ T6057] loop4: detected capacity change from 0 to 512 [ 137.718926][ T6057] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.729387][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.754297][ T5294] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.775008][ T6057] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 137.797441][ T5294] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.825764][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.866789][ T6057] loop4: detected capacity change from 0 to 512 [ 137.874489][ T5294] usb 1-1: config 0 descriptor?? [ 137.946055][ T6057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.089622][ T29] audit: type=1800 audit(1722460484.943:57): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.192" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 138.155834][ T6057] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.192: bg 0: block 144: padding at end of block bitmap is not set [ 138.229842][ T29] audit: type=1804 audit(1722460485.043:58): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.192" name="/newroot/34/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 138.357302][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.724715][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 138.941296][ T5250] Bluetooth: hci4: command tx timeout [ 138.943410][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 139.017428][ T5297] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.063242][ T5297] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.065740][ T6103] loop5: detected capacity change from 0 to 512 [ 139.086012][ T5297] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.100011][ T6103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.131024][ T5297] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.160894][ T6103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.174799][ T5297] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 139.290180][ T6103] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.341146][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.351440][ T6103] EXT4-fs (loop5): 1 truncate cleaned up [ 139.396905][ T6103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.597196][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.619848][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.641010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.660904][ T9] usb 5-1: Product: syz [ 139.682846][ T9] usb 5-1: Manufacturer: syz [ 139.708028][ T9] usb 5-1: SerialNumber: syz [ 139.755443][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.868177][ T6121] loop5: detected capacity change from 0 to 512 [ 139.901953][ T5292] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.912424][ T6121] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.925758][ T6121] EXT4-fs (loop5): blocks per group (3008) and clusters per group (32768) inconsistent [ 140.047357][ T6121] loop5: detected capacity change from 0 to 512 [ 140.132496][ T6121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.256487][ T29] audit: type=1800 audit(1722460487.123:59): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.209" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 140.295960][ T6121] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.209: bg 0: block 144: padding at end of block bitmap is not set [ 140.369187][ T29] audit: type=1804 audit(1722460487.233:60): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.209" name="/newroot/55/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 140.631903][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.144019][ T5292] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 141.778715][ T6135] Falling back ldisc for ptm0. [ 142.243859][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.251205][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.317879][ T5297] usb 1-1: USB disconnect, device number 2 [ 142.393283][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.683330][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 142.722609][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.769568][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.841765][ T46] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 142.904550][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.989241][ T46] usb 6-1: config 0 descriptor?? [ 143.477733][ T46] cp2112 0003:10C4:EA90.0005: unbalanced delimiter at end of report description [ 143.605986][ T46] cp2112 0003:10C4:EA90.0005: parse failed [ 143.623686][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 143.659988][ T46] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -22 [ 143.818283][ T46] usb 6-1: USB disconnect, device number 4 [ 144.731064][ T46] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 144.789594][ T5320] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.825323][ T46] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 144.870915][ T46] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 144.907583][ T46] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 144.984449][ T46] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.065726][ T5320] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.167435][ T5315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.199576][ T5320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.253387][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.319803][ T5320] usb 3-1: SerialNumber: syz [ 145.349777][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.424940][ T5315] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.440859][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.505517][ T5315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.521220][ T5939] bridge_slave_0: entered allmulticast mode [ 145.529276][ T5939] bridge_slave_0: entered promiscuous mode [ 145.610267][ T5315] usb 1-1: Product: syz [ 145.638637][ T5315] usb 1-1: Manufacturer: syz [ 145.675141][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.700824][ T5315] usb 1-1: SerialNumber: syz [ 145.774480][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.793949][ T5315] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.868404][ T5939] bridge_slave_1: entered allmulticast mode [ 145.886089][ T5230] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.924920][ T5939] bridge_slave_1: entered promiscuous mode [ 146.062946][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.252019][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.606703][ T5292] ath9k_htc: Failed to initialize the device [ 186.431275][ C0] hrtimer: interrupt took 12773610 ns [ 203.040337][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.057785][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.599176][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 244.361644][ T5230] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 253.715392][ T5250] Bluetooth: hci5: command 0x0406 tx timeout [ 262.890426][ T5250] Bluetooth: hci3: command tx timeout [ 271.645120][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 271.652215][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4676/1:b..l [ 271.660858][ C0] rcu: (detected by 0, t=10502 jiffies, g=14069, q=439 ncpus=2) [ 271.668607][ C0] task:udevd state:R running task stack:24400 pid:4676 tgid:4676 ppid:1 flags:0x00000002 [ 271.681899][ C0] Call Trace: [ 271.685222][ C0] [ 271.688271][ C0] __schedule+0x1800/0x4a60 [ 271.692885][ C0] ? mark_lock+0x9a/0x350 [ 271.697336][ C0] ? __pfx___schedule+0x10/0x10 [ 271.702213][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.708294][ C0] ? irqentry_exit+0x63/0x90 [ 271.712911][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.718565][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 271.723882][ C0] ? preempt_schedule+0xe1/0xf0 [ 271.728762][ C0] preempt_schedule_common+0x84/0xd0 [ 271.734086][ C0] preempt_schedule+0xe1/0xf0 [ 271.738801][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 271.744216][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 271.749550][ C0] ? deref_stack_reg+0xd5/0x260 [ 271.754454][ C0] ? deref_stack_reg+0xd5/0x260 [ 271.759352][ C0] preempt_schedule_thunk+0x1a/0x30 [ 271.764584][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 271.769999][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 271.775322][ C0] ? unwind_next_frame+0x211f/0x2a00 [ 271.780654][ C0] unwind_next_frame+0x2124/0x2a00 [ 271.785866][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 271.791546][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 271.797224][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.803436][ C0] arch_stack_walk+0x151/0x1b0 [ 271.808237][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 271.813310][ C0] stack_trace_save+0x118/0x1d0 [ 271.818202][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 271.823621][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.829313][ C0] save_stack+0xfb/0x1f0 [ 271.833622][ C0] ? __pfx_save_stack+0x10/0x10 [ 271.838533][ C0] ? free_unref_page+0xd22/0xea0 [ 271.843510][ C0] ? __put_partials+0xeb/0x130 [ 271.848309][ C0] ? put_cpu_partial+0x17c/0x250 [ 271.853280][ C0] ? __slab_free+0x2ea/0x3d0 [ 271.857910][ C0] ? qlist_free_all+0x9e/0x140 [ 271.862708][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 271.868400][ C0] ? page_ext_get+0x20/0x2a0 [ 271.873217][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.879071][ C0] __reset_page_owner+0x75/0x3f0 [ 271.884153][ C0] free_unref_page+0xd22/0xea0 [ 271.888983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.894685][ C0] __put_partials+0xeb/0x130 [ 271.899330][ C0] put_cpu_partial+0x17c/0x250 [ 271.904148][ C0] ? put_cpu_partial+0x70/0x250 [ 271.909046][ C0] __slab_free+0x2ea/0x3d0 [ 271.913505][ C0] ? __phys_addr+0xba/0x170 [ 271.918043][ C0] qlist_free_all+0x9e/0x140 [ 271.922675][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 271.928184][ C0] __kasan_slab_alloc+0x23/0x80 [ 271.933074][ C0] ? getname_flags+0xb7/0x540 [ 271.937779][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 271.943282][ C0] getname_flags+0xb7/0x540 [ 271.947819][ C0] do_readlinkat+0xd8/0x3a0 [ 271.952355][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 271.957502][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.963883][ C0] ? do_syscall_64+0x100/0x230 [ 271.968706][ C0] __x64_sys_readlink+0x7f/0x90 [ 271.973602][ C0] do_syscall_64+0xf3/0x230 [ 271.978152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.983826][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.989853][ C0] RIP: 0033:0x7f6e10717d47 [ 271.994289][ C0] RSP: 002b:00007ffe78a93278 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 272.002734][ C0] RAX: ffffffffffffffda RBX: 00007ffe78a93288 RCX: 00007f6e10717d47 [ 272.010736][ C0] RDX: 0000000000000400 RSI: 00007ffe78a93288 RDI: 00007ffe78a93768 [ 272.018735][ C0] RBP: 0000000000000400 R08: 00005563daec6594 R09: 0000000000000000 [ 272.026734][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ffe78a93768 [ 272.034737][ C0] R13: 00007ffe78a936d8 R14: 00005563dae9e910 R15: 0000000000000000 [ 272.042765][ C0] [ 272.045802][ C0] rcu: rcu_preempt kthread starved for 660 jiffies! g14069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 272.056849][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.066843][ C0] rcu: RCU grace-period kthread stack dump: [ 272.072745][ C0] task:rcu_preempt state:R running task stack:26544 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 272.084519][ C0] Call Trace: [ 272.087811][ C0] [ 272.090761][ C0] __schedule+0x1800/0x4a60 [ 272.095323][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.100996][ C0] ? __pfx___schedule+0x10/0x10 [ 272.105877][ C0] ? __pfx_lock_release+0x10/0x10 [ 272.110931][ C0] ? __asan_memset+0x23/0x50 [ 272.115563][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 272.121416][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.127883][ C0] ? schedule+0x90/0x320 [ 272.132153][ C0] schedule+0x14b/0x320 [ 272.136343][ C0] schedule_timeout+0x1be/0x310 [ 272.141226][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 272.146636][ C0] ? __pfx_process_timeout+0x10/0x10 [ 272.151972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.157632][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 272.163216][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 272.168105][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 272.173337][ C0] ? rcu_gp_init+0x1256/0x1630 [ 272.178143][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 272.183113][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 272.189219][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 272.194546][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.200493][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.206155][ C0] ? finish_swait+0xd4/0x1e0 [ 272.210787][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 272.215419][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.220651][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.226577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.232243][ C0] ? __kthread_parkme+0x169/0x1d0 [ 272.237317][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.242547][ C0] kthread+0x2f2/0x390 [ 272.246646][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 272.251881][ C0] ? __pfx_kthread+0x10/0x10 [ 272.256497][ C0] ret_from_fork+0x4d/0x80 [ 272.260970][ C0] ? __pfx_kthread+0x10/0x10 [ 272.265599][ C0] ret_from_fork_asm+0x1a/0x30 [ 272.270419][ C0] [ 272.273445][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 272.279768][ C0] Sending NMI from CPU 0 to CPUs 1: [ 272.284981][ C1] NMI backtrace for cpu 1 [ 272.284995][ C1] CPU: 1 UID: 0 PID: 5232 Comm: kworker/u9:2 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 272.285022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 272.285038][ C1] Workqueue: hci5 hci_cmd_sync_work [ 272.285070][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 272.285105][ C1] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 272.285123][ C1] RSP: 0018:ffffc90000a17180 EFLAGS: 00000046 [ 272.285142][ C1] RAX: ffffffff81410c81 RBX: ffffffff90303228 RCX: ffff888069c90000 [ 272.285160][ C1] RDX: ffffc90002352000 RSI: 000000000000018e RDI: ffffffff81fa64a0 [ 272.285176][ C1] RBP: ffffffff81fa64a0 R08: ffffffff81410c60 R09: ffffc90000a17350 [ 272.285194][ C1] R10: 0000000000000003 R11: ffffffff817f0ca0 R12: ffffffff90303230 [ 272.285210][ C1] R13: ffffffff9030322c R14: ffffffff81fa64ee R15: ffffffff90303228 [ 272.285230][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 272.285250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.285266][ C1] CR2: 0000001b32417ff8 CR3: 000000002293a000 CR4: 0000000000350ef0 [ 272.285284][ C1] Call Trace: [ 272.285292][ C1] [ 272.285301][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 272.285339][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.285376][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 272.285419][ C1] ? nmi_handle+0x2a/0x5a0 [ 272.285455][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 272.285486][ C1] ? nmi_handle+0x151/0x5a0 [ 272.285508][ C1] ? nmi_handle+0x2a/0x5a0 [ 272.285533][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 272.285565][ C1] ? default_do_nmi+0x63/0x160 [ 272.285604][ C1] ? exc_nmi+0x123/0x1f0 [ 272.285641][ C1] ? end_repeat_nmi+0xf/0x53 [ 272.285678][ C1] ? kasan_save_track+0x3e/0x80 [ 272.285710][ C1] ? kasan_set_track+0x20/0x20 [ 272.285741][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.285773][ C1] ? unwind_next_frame+0x510/0x2a00 [ 272.285808][ C1] ? unwind_next_frame+0x531/0x2a00 [ 272.285845][ C1] ? kasan_set_track+0x20/0x20 [ 272.285876][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 272.285910][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 272.285945][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 272.285978][ C1] [ 272.285985][ C1] [ 272.285993][ C1] unwind_next_frame+0x531/0x2a00 [ 272.286033][ C1] ? kasan_save_track+0x3e/0x80 [ 272.286068][ C1] ? kasan_save_track+0x3f/0x80 [ 272.286099][ C1] ? kasan_save_track+0x3f/0x80 [ 272.286131][ C1] ? __kernel_text_address+0xd/0x40 [ 272.286155][ C1] ? kasan_save_track+0x3f/0x80 [ 272.286186][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.286217][ C1] arch_stack_walk+0x151/0x1b0 [ 272.286246][ C1] ? kasan_save_track+0x3f/0x80 [ 272.286283][ C1] stack_trace_save+0x118/0x1d0 [ 272.286312][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.286337][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 272.286365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.286401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.286428][ C1] kasan_save_track+0x3f/0x80 [ 272.286459][ C1] ? kasan_save_track+0x3f/0x80 [ 272.286489][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 272.286522][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 272.286546][ C1] ? dummy_urb_enqueue+0x7d/0x760 [ 272.286569][ C1] ? usb_hcd_submit_urb+0x36e/0x1e80 [ 272.286602][ C1] ? ath9k_hif_usb_reg_in_cb+0x472/0x650 [ 272.286624][ C1] ? __usb_hcd_giveback_urb+0x42e/0x6e0 [ 272.286656][ C1] ? dummy_timer+0x830/0x45a0 [ 272.286678][ C1] ? __hrtimer_run_queues+0x59d/0xd50 [ 272.286702][ C1] ? hrtimer_interrupt+0x396/0x990 [ 272.286725][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 272.286763][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 272.286788][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.286825][ C1] ? __sanitizer_cov_trace_cmp8+0x8/0x90 [ 272.286856][ C1] ? unwind_next_frame+0x1ef/0x2a00 [ 272.286892][ C1] ? arch_stack_walk+0x151/0x1b0 [ 272.286913][ C1] ? stack_trace_save+0x118/0x1d0 [ 272.286941][ C1] ? kasan_save_track+0x3f/0x80 [ 272.287005][ C1] __kasan_kmalloc+0x98/0xb0 [ 272.287039][ C1] ? dummy_urb_enqueue+0x7d/0x760 [ 272.287062][ C1] __kmalloc_cache_noprof+0x19c/0x2c0 [ 272.287093][ C1] dummy_urb_enqueue+0x7d/0x760 [ 272.287124][ C1] usb_hcd_submit_urb+0x36e/0x1e80 [ 272.287165][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 272.287196][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 272.287226][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 272.287257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.287279][ C1] ? usb_submit_urb+0x10e4/0x1930 [ 272.287305][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.287334][ C1] ath9k_hif_usb_reg_in_cb+0x472/0x650 [ 272.287358][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 272.287400][ C1] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 272.287436][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 272.287474][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 272.287501][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.287531][ C1] dummy_timer+0x830/0x45a0 [ 272.287563][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.287613][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 272.287641][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 272.287668][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.287706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.287729][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 272.287765][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 272.287795][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 272.287819][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 272.287845][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 272.287894][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 272.287921][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.287951][ C1] hrtimer_interrupt+0x396/0x990 [ 272.287996][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 272.288038][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 272.288066][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.288103][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x90 [ 272.288136][ C1] Code: 44 0a 20 e9 55 d8 5c 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 40 d7 03 00 65 8b 05 60 6e 70 7e a9 00 01 ff 00 74 [ 272.288154][ C1] RSP: 0018:ffffc90000a18020 EFLAGS: 00000246 [ 272.288172][ C1] RAX: 0000000000000102 RBX: ffffffff81000000 RCX: ffff888069c90000 [ 272.288189][ C1] RDX: ffffc90000a18135 RSI: ffffffff8c000000 RDI: ffffffff81fa6806 [ 272.288206][ C1] RBP: ffffffff81fa6806 R08: ffffffff8141093f R09: ffffc90000a181f0 [ 272.288223][ C1] R10: 0000000000000003 R11: ffffffff817f0ca0 R12: ffffc90000a18100 [ 272.288240][ C1] R13: ffffc90000a18150 R14: ffffffff8c000000 R15: ffffffff81fa6807 [ 272.288257][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.288292][ C1] ? __kasan_slab_free+0x36/0x60 [ 272.288324][ C1] ? 0xffffffff81000000 [ 272.288341][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.288371][ C1] ? unwind_next_frame+0x1ef/0x2a00 [ 272.288414][ C1] ? __kasan_slab_free+0x36/0x60 [ 272.288450][ C1] unwind_next_frame+0x1ef/0x2a00 [ 272.288496][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.288529][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.288562][ C1] ? __kernel_text_address+0xd/0x40 [ 272.288586][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.288619][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.288650][ C1] arch_stack_walk+0x151/0x1b0 [ 272.288679][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.288717][ C1] stack_trace_save+0x118/0x1d0 [ 272.288746][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.288771][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 272.288806][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.288829][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.288865][ C1] kasan_save_track+0x3f/0x80 [ 272.288896][ C1] ? kasan_save_track+0x3f/0x80 [ 272.288927][ C1] ? kasan_save_free_info+0x40/0x50 [ 272.288952][ C1] ? poison_slab_object+0xe0/0x150 [ 272.288984][ C1] ? __kasan_slab_free+0x37/0x60 [ 272.289057][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289082][ C1] ? skb_release_data+0x64d/0x880 [ 272.289103][ C1] kasan_save_free_info+0x40/0x50 [ 272.289130][ C1] poison_slab_object+0xe0/0x150 [ 272.289164][ C1] ? skb_release_data+0x64d/0x880 [ 272.289186][ C1] __kasan_slab_free+0x37/0x60 [ 272.289220][ C1] kmem_cache_free+0x145/0x350 [ 272.289249][ C1] skb_release_data+0x64d/0x880 [ 272.289282][ C1] sk_skb_reason_drop+0x1a5/0x3d0 [ 272.289323][ C1] __netif_receive_skb_core+0x3edd/0x4570 [ 272.289353][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289391][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289439][ C1] ? mark_lock+0x9a/0x350 [ 272.289474][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.289510][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 272.289541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289564][ C1] ? mark_lock+0x9a/0x350 [ 272.289602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289625][ C1] ? __lock_acquire+0x137a/0x2040 [ 272.289672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.289701][ C1] __netif_receive_skb+0x12f/0x650 [ 272.289731][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.289764][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 272.289789][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.289823][ C1] ? __pfx_lock_release+0x10/0x10 [ 272.289857][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 272.289894][ C1] process_backlog+0x662/0x15b0 [ 272.289927][ C1] ? process_backlog+0x33b/0x15b0 [ 272.289964][ C1] ? __pfx_process_backlog+0x10/0x10 [ 272.289993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.290024][ C1] __napi_poll+0xcd/0x490 [ 272.290054][ C1] net_rx_action+0x89b/0x1240 [ 272.290102][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 272.290132][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 272.290198][ C1] handle_softirqs+0x2c6/0x970 [ 272.290233][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 272.290268][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 272.290303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.290325][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 272.290364][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 272.290409][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 272.290444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.290471][ C1] irq_exit_rcu+0x9/0x30 [ 272.290500][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 272.290528][ C1] [ 272.290535][ C1] [ 272.290544][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.290581][ C1] RIP: 0010:unwind_next_frame+0x1d89/0x2a00 [ 272.290618][ C1] Code: c0 0f 85 5a 09 00 00 44 8b 75 00 44 89 f7 8b 9c 24 8c 00 00 00 89 de e8 65 43 52 00 41 39 de 0f 85 c4 00 00 00 48 8b 44 24 58 <42> 80 3c 28 00 74 0a 48 8b 7c 24 50 e8 b6 7a b9 00 4c 8b 65 38 48 [ 272.290635][ C1] RSP: 0018:ffffc9000495f108 EFLAGS: 00000246 [ 272.290654][ C1] RAX: 1ffff9200092be43 RBX: 0000000000000001 RCX: ffff888069c90000 [ 272.290670][ C1] RDX: ffff888069c90000 RSI: 0000000000000001 RDI: 0000000000000001 [ 272.290685][ C1] RBP: ffffc9000495f1e0 R08: ffffffff814124cb R09: ffffffff814120bf [ 272.290702][ C1] R10: 0000000000000003 R11: ffff888069c90000 R12: ffffc9000495fb48 [ 272.290719][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff9200092be3c [ 272.290740][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 272.290776][ C1] ? unwind_next_frame+0x1d7b/0x2a00 [ 272.290818][ C1] ? unwind_next_frame+0x1d7b/0x2a00 [ 272.290863][ C1] ? hci_abort_conn_sync+0x583/0xde0 [ 272.290888][ C1] ? hci_abort_conn_sync+0x583/0xde0 [ 272.290910][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.290941][ C1] arch_stack_walk+0x151/0x1b0 [ 272.290969][ C1] ? hci_cmd_sync_work+0x22d/0x400 [ 272.291004][ C1] stack_trace_save+0x118/0x1d0 [ 272.291036][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 272.291068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.291093][ C1] ? mgmt_connect_failed+0x186/0x210 [ 272.291129][ C1] save_stack+0xfb/0x1f0 [ 272.291169][ C1] ? __pfx_save_stack+0x10/0x10 [ 272.291205][ C1] ? free_unref_page+0xd22/0xea0 [ 272.291236][ C1] ? __put_partials+0xeb/0x130 [ 272.291263][ C1] ? put_cpu_partial+0x17c/0x250 [ 272.291293][ C1] ? __slab_free+0x2ea/0x3d0 [ 272.291324][ C1] ? qlist_free_all+0x9e/0x140 [ 272.291354][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 272.291389][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 272.291422][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 272.291447][ C1] ? __alloc_skb+0x1c3/0x440 [ 272.291480][ C1] ? mgmt_send_event+0x46/0x1a0 [ 272.291503][ C1] ? mgmt_connect_failed+0x186/0x210 [ 272.291534][ C1] ? hci_conn_failed+0xfa/0x340 [ 272.291563][ C1] ? hci_abort_conn_sync+0x583/0xde0 [ 272.291589][ C1] ? page_ext_get+0x20/0x2a0 [ 272.291626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.291654][ C1] __reset_page_owner+0x75/0x3f0 [ 272.291693][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.291716][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 272.291749][ C1] free_unref_page+0xd22/0xea0 [ 272.291786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.291813][ C1] __put_partials+0xeb/0x130 [ 272.291846][ C1] put_cpu_partial+0x17c/0x250 [ 272.291880][ C1] ? put_cpu_partial+0x70/0x250 [ 272.291916][ C1] __slab_free+0x2ea/0x3d0 [ 272.291952][ C1] ? __phys_addr+0xba/0x170 [ 272.291977][ C1] qlist_free_all+0x9e/0x140 [ 272.292013][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 272.292050][ C1] __kasan_slab_alloc+0x23/0x80 [ 272.292085][ C1] ? __alloc_skb+0x1c3/0x440 [ 272.292120][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 272.292151][ C1] __alloc_skb+0x1c3/0x440 [ 272.292191][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 272.292236][ C1] mgmt_send_event+0x46/0x1a0 [ 272.292266][ C1] mgmt_connect_failed+0x186/0x210 [ 272.292299][ C1] ? hci_abort_conn_sync+0x1f6/0xde0 [ 272.292323][ C1] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 272.292354][ C1] ? hci_disconnect_sync+0x218/0x3d0 [ 272.292389][ C1] hci_conn_failed+0xfa/0x340 [ 272.292422][ C1] hci_abort_conn_sync+0x583/0xde0 [ 272.292446][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.292484][ C1] ? hci_abort_conn_sync+0x1f6/0xde0 [ 272.292507][ C1] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 272.292535][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.292573][ C1] ? abort_conn_sync+0x26/0x270 [ 272.292606][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.292629][ C1] ? abort_conn_sync+0x204/0x270 [ 272.292663][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 272.292700][ C1] hci_cmd_sync_work+0x22d/0x400 [ 272.292737][ C1] ? process_scheduled_works+0x945/0x1830 [ 272.292769][ C1] process_scheduled_works+0xa2e/0x1830 [ 272.292826][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.292867][ C1] ? assign_work+0x364/0x3d0 [ 272.292903][ C1] worker_thread+0x86d/0xd40 [ 272.292944][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.292975][ C1] ? __kthread_parkme+0x169/0x1d0 [ 272.293013][ C1] ? __pfx_worker_thread+0x10/0x10 [ 272.293047][ C1] kthread+0x2f2/0x390 [ 272.293068][ C1] ? __pfx_worker_thread+0x10/0x10 [ 272.293101][ C1] ? __pfx_kthread+0x10/0x10 [ 272.293123][ C1] ret_from_fork+0x4d/0x80 [ 272.293159][ C1] ? __pfx_kthread+0x10/0x10 [ 272.293180][ C1] ret_from_fork_asm+0x1a/0x30 [ 272.293229][ C1] [ 273.783201][ C0] sched: RT throttling activated