last executing test programs: 1m48.781916069s ago: executing program 2 (id=280): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000002700)={0x8, {0x474, 0x9, 0x1, 0x8000000}, {0x9, 0x7fe, 0x6, 0x5}, {0xfffffffe, 0x4}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x8000004) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) 1m47.465760738s ago: executing program 2 (id=281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x50}}, 0x20000084) close(r0) 1m47.175809572s ago: executing program 2 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m46.980256335s ago: executing program 2 (id=287): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m46.761419178s ago: executing program 2 (id=289): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000002700)={0x8, {0x474, 0x9, 0x1, 0x8000000}, {0x9, 0x7fe, 0x6, 0x5}, {0xfffffffe, 0x4}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x8000004) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) 1m46.398208044s ago: executing program 2 (id=291): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x4, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0x10, {0x100, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m46.021981119s ago: executing program 32 (id=291): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x4, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0x10, {0x100, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 38.141964653s ago: executing program 4 (id=471): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000015c0)=@secondary) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r3 = io_uring_setup(0x1b7b, &(0x7f00000002c0)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYRES32, @ANYBLOB="03000000010000"], 0x50) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002640)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 35.409215932s ago: executing program 4 (id=482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 34.15182294s ago: executing program 4 (id=486): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x10001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11}, 0x80) 32.967503187s ago: executing program 4 (id=488): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x98d054, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 31.750111724s ago: executing program 4 (id=491): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000008000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x13000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0xfffffffffffffdc0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "0500"}, 0x0, 0x2, {0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x2a, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x81, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x80000001, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0xfffffff8, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0xdd, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0x2, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x5, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7ffe, 0x2, 0x4, 0x2, 0xc, 0x6, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x7, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 30.926237116s ago: executing program 4 (id=497): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000002700)={0x8, {0x474, 0x9, 0x1, 0x8000000}, {0x9, 0x7fe, 0x6, 0x5}, {0xfffffffe, 0x4}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000207010400000000000000000a00000a04c77246b27e5f3b05219ed965ec15cb080080c66815d50152df1c195db313adbc54f7940639211e575d17"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8000004) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) 29.752412493s ago: executing program 33 (id=497): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000002700)={0x8, {0x474, 0x9, 0x1, 0x8000000}, {0x9, 0x7fe, 0x6, 0x5}, {0xfffffffe, 0x4}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000207010400000000000000000a00000a04c77246b27e5f3b05219ed965ec15cb080080c66815d50152df1c195db313adbc54f7940639211e575d17"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8000004) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) 20.850242791s ago: executing program 1 (id=520): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000003a00)={0x0, 0x2, 0xffffffffffffffff, 0xcdf4}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) 14.249502345s ago: executing program 1 (id=535): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0xd) 14.023031379s ago: executing program 1 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 13.839926101s ago: executing program 1 (id=539): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 13.602653005s ago: executing program 1 (id=540): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) fstat(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000000000000020000000d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 12.56848104s ago: executing program 1 (id=542): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000003a00)={0x0, 0x2, 0xffffffffffffffff, 0xcdf4}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) 11.972341238s ago: executing program 34 (id=542): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000003a00)={0x0, 0x2, 0xffffffffffffffff, 0xcdf4}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) 6.513943906s ago: executing program 0 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000090601020000000400000000000000000900020073797a310000000005000100070000001c0007800c00018020000140ffffffff0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 6.375734738s ago: executing program 0 (id=569): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9c00, 0x7, 0x3) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x105) 5.861847906s ago: executing program 0 (id=573): getpid() socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x2000000, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@autodefrag}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) 5.210012565s ago: executing program 3 (id=578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000dcc0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f000000de00)={&(0x7f000000dc80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000ddc0)={&(0x7f000000dd40)={0x20, r1, 0x46a215fa07a8de03, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004085}, 0xc040) 5.022969548s ago: executing program 3 (id=580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x49e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xc8, 0x4c) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.792941465s ago: executing program 3 (id=585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x2000, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.75824361s ago: executing program 3 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}}, 0x0) 2.569060993s ago: executing program 3 (id=589): socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) socketpair(0x22, 0x800, 0x1000, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x10012, r2, 0x9a006000) 2.121700019s ago: executing program 0 (id=591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.911102233s ago: executing program 5 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) 1.40213399s ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x50}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.259539422s ago: executing program 0 (id=594): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x2000, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.144801933s ago: executing program 5 (id=595): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000002b00)={0x14, 0x22, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x4, 0x14f, 0x0, 0x0, @binary}]}, 0x14}, {&(0x7f0000000600)={0x10, 0x37, 0x200, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x200400d1) 1.113246364s ago: executing program 6 (id=543): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x10001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11}, 0x80) 732.36047ms ago: executing program 3 (id=596): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) write(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 366.279014ms ago: executing program 5 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f0851ee059c08006e1068ea961d36", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 350.287815ms ago: executing program 0 (id=598): getpid() socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x2000000, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@autodefrag}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) 221.932976ms ago: executing program 5 (id=599): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x8, 0x54, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x80, 0x400, 0x2005}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 5 (id=600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 81.195161][ T5762] cgroup: Unknown subsys name 'net' [ 81.309060][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.095515][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.544924][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.553388][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.555755][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.568622][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.577025][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.585160][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.593091][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.604232][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.614087][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.624524][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.625116][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.639869][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.645902][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.647876][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.669312][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.677591][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.680049][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.689300][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.694950][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.702884][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.713098][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.715315][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.728420][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.744063][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.190885][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.202439][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.326933][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.421092][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.428288][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.436055][ T5776] bridge_slave_0: entered allmulticast mode [ 86.443707][ T5776] bridge_slave_0: entered promiscuous mode [ 86.457270][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.464537][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.471919][ T5776] bridge_slave_1: entered allmulticast mode [ 86.479138][ T5776] bridge_slave_1: entered promiscuous mode [ 86.533888][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.541551][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.548737][ T5775] bridge_slave_0: entered allmulticast mode [ 86.556530][ T5775] bridge_slave_0: entered promiscuous mode [ 86.587857][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.595356][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.604806][ T5775] bridge_slave_1: entered allmulticast mode [ 86.612068][ T5775] bridge_slave_1: entered promiscuous mode [ 86.635467][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.648372][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.733309][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.748200][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.758115][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.768179][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.775702][ T5773] bridge_slave_0: entered allmulticast mode [ 86.783436][ T5773] bridge_slave_0: entered promiscuous mode [ 86.796288][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.803574][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.811342][ T5773] bridge_slave_1: entered allmulticast mode [ 86.818685][ T5773] bridge_slave_1: entered promiscuous mode [ 86.828675][ T5776] team0: Port device team_slave_0 added [ 86.846336][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.870348][ T5776] team0: Port device team_slave_1 added [ 86.899069][ T5775] team0: Port device team_slave_0 added [ 86.931095][ T5775] team0: Port device team_slave_1 added [ 86.960246][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.967350][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.993778][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.012811][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.032724][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.104854][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.112484][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.138968][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.173762][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.181117][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.207710][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.228688][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.236065][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.262440][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.353355][ T5773] team0: Port device team_slave_0 added [ 87.394500][ T5776] hsr_slave_0: entered promiscuous mode [ 87.402023][ T5776] hsr_slave_1: entered promiscuous mode [ 87.411633][ T5773] team0: Port device team_slave_1 added [ 87.465582][ T5775] hsr_slave_0: entered promiscuous mode [ 87.472872][ T5775] hsr_slave_1: entered promiscuous mode [ 87.479428][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.487517][ T5775] Cannot create hsr debugfs directory [ 87.512722][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.520138][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.527473][ T5774] bridge_slave_0: entered allmulticast mode [ 87.535472][ T5774] bridge_slave_0: entered promiscuous mode [ 87.573403][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.580635][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.606876][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.620742][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.627940][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.638227][ T5774] bridge_slave_1: entered allmulticast mode [ 87.646696][ T5774] bridge_slave_1: entered promiscuous mode [ 87.676323][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.683474][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.711388][ T5788] Bluetooth: hci2: command tx timeout [ 87.717223][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.769511][ T5788] Bluetooth: hci3: command tx timeout [ 87.775266][ T5788] Bluetooth: hci1: command tx timeout [ 87.832370][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.849573][ T5788] Bluetooth: hci0: command tx timeout [ 87.886240][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.956261][ T5774] team0: Port device team_slave_0 added [ 88.003133][ T5774] team0: Port device team_slave_1 added [ 88.022349][ T5773] hsr_slave_0: entered promiscuous mode [ 88.029145][ T5773] hsr_slave_1: entered promiscuous mode [ 88.038563][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.046355][ T5773] Cannot create hsr debugfs directory [ 88.155127][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.162228][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.195071][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.208478][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.216191][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.242611][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.410769][ T5774] hsr_slave_0: entered promiscuous mode [ 88.417242][ T5774] hsr_slave_1: entered promiscuous mode [ 88.424414][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.432510][ T5774] Cannot create hsr debugfs directory [ 88.466069][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.495171][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.506931][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.526764][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.677790][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.699177][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.714241][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.735306][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.796757][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.830171][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.846563][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.857181][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.935657][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.955192][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.966023][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.978952][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.080133][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.163094][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.189299][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.196799][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.207959][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.215155][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.244842][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.298178][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.319165][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.349139][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.356593][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.373871][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.401035][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.415856][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.423074][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.436115][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443337][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.523323][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.530577][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.612711][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.702901][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.770447][ T5788] Bluetooth: hci2: command tx timeout [ 89.788790][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.796027][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.832158][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.839430][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.849521][ T5788] Bluetooth: hci1: command tx timeout [ 89.854982][ T5788] Bluetooth: hci3: command tx timeout [ 89.929639][ T5788] Bluetooth: hci0: command tx timeout [ 90.013088][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.149413][ T5776] veth0_vlan: entered promiscuous mode [ 90.225818][ T5776] veth1_vlan: entered promiscuous mode [ 90.242148][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.267711][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.336692][ T5776] veth0_macvtap: entered promiscuous mode [ 90.424714][ T5776] veth1_macvtap: entered promiscuous mode [ 90.460543][ T5775] veth0_vlan: entered promiscuous mode [ 90.481795][ T5773] veth0_vlan: entered promiscuous mode [ 90.498391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.520699][ T5775] veth1_vlan: entered promiscuous mode [ 90.534571][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.544365][ T5773] veth1_vlan: entered promiscuous mode [ 90.577330][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.587937][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.597730][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.607092][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.660996][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.706704][ T5773] veth0_macvtap: entered promiscuous mode [ 90.721245][ T5775] veth0_macvtap: entered promiscuous mode [ 90.743431][ T5773] veth1_macvtap: entered promiscuous mode [ 90.765998][ T5775] veth1_macvtap: entered promiscuous mode [ 90.810948][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.819033][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.844849][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.859040][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.875074][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.920504][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.931944][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.943788][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.954053][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.976284][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.999194][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.012487][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.023563][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.034371][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.046929][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.058402][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.075551][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.086019][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.097800][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.111125][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.138969][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148459][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.159966][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.168744][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184663][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.194097][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.208452][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.218776][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.279133][ T5774] veth0_vlan: entered promiscuous mode [ 91.367508][ T5774] veth1_vlan: entered promiscuous mode [ 91.474738][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.474786][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.502308][ T5774] veth0_macvtap: entered promiscuous mode [ 91.525378][ T5774] veth1_macvtap: entered promiscuous mode [ 91.586562][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.586614][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.586626][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.586640][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.586651][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.586664][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.588153][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.654688][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.654711][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.658389][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.658410][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.658420][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.658431][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.658441][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.658453][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.660989][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.723604][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723670][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723702][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723732][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.736477][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.736499][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.853095][ T5788] Bluetooth: hci2: command tx timeout [ 91.878604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.878626][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.938129][ T5788] Bluetooth: hci3: command tx timeout [ 91.938147][ T5782] Bluetooth: hci1: command tx timeout [ 92.019563][ T5782] Bluetooth: hci0: command tx timeout [ 92.102053][ T27] cfg80211: failed to load regulatory.db [ 92.185607][ T4826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.185685][ T4826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.790517][ T5849] syz.0.1[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.864854][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.864877][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.066896][ T5849] loop0: detected capacity change from 0 to 4096 [ 93.489663][ T5858] loop3: detected capacity change from 0 to 256 [ 93.943743][ T5782] Bluetooth: hci2: command tx timeout [ 94.010445][ T5782] Bluetooth: hci3: command tx timeout [ 94.010480][ T5782] Bluetooth: hci1: command tx timeout [ 94.090168][ T5788] Bluetooth: hci0: command tx timeout [ 94.576411][ T5840] tty tty2: ldisc open failed (-12), clearing slot 1 [ 94.586015][ T1191] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 94.600379][ T5855] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 94.787051][ T5870] loop3: detected capacity change from 0 to 512 [ 94.836580][ T5870] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.291288][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.310083][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.611027][ T5870] EXT4-fs (loop3): 1 orphan inode deleted [ 95.678429][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.702983][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.730533][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 95.762011][ T5870] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.997154][ T5879] vivid-000: ================= START STATUS ================= [ 96.009762][ T5879] vivid-000: Generate PTS: true [ 96.017888][ T5879] vivid-000: Generate SCR: true [ 96.039608][ T5879] tpg source WxH: 640x360 (Y'CbCr) [ 96.045090][ T5879] tpg field: 1 [ 96.052868][ T5879] tpg crop: 640x360@0x0 [ 96.058133][ T5879] tpg compose: 640x360@0x0 [ 96.063415][ T5879] tpg colorspace: 8 [ 96.067675][ T5879] tpg transfer function: 0/0 [ 96.075896][ T5879] tpg Y'CbCr encoding: 0/0 [ 96.086901][ T5879] tpg quantization: 0/0 [ 96.099164][ T5879] tpg RGB range: 0/2 [ 96.108403][ T5879] vivid-000: ================== END STATUS ================== [ 96.198895][ T1191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.532725][ T1191] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 96.563644][ T1191] usb 1-1: can't read configurations, error -71 [ 96.726991][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.847239][ T5884] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12'. [ 98.099892][ T1191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.149465][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 99.539518][ T1191] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.547689][ T1191] usb 3-1: config 0 has no interface number 0 [ 99.576899][ T1191] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.594198][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.602400][ T1191] usb 3-1: Product: syz [ 99.606662][ T1191] usb 3-1: Manufacturer: syz [ 99.611823][ T1191] usb 3-1: SerialNumber: syz [ 99.635513][ T1191] usb 3-1: config 0 descriptor?? [ 99.693705][ T1191] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 99.789085][ T5898] loop0: detected capacity change from 0 to 256 [ 100.560628][ T1191] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.670092][ T1191] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 100.997439][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.006875][ T1191] usb 3-1: USB disconnect, device number 2 [ 101.272016][ T1191] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.710473][ T1191] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.741387][ T1191] quatech2 3-1:0.51: device disconnected [ 102.090909][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.537253][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.556438][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.567223][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 102.590101][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.609591][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.647947][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 102.770927][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.827147][ T5921] loop0: detected capacity change from 0 to 4096 [ 102.979075][ T9] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 103.011806][ T9] usb 4-1: USB disconnect, device number 2 [ 103.022482][ T788] usb 3-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 103.059548][ T788] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.088607][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.119426][ T5919] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.135305][ T788] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 103.359450][ T5818] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 104.362346][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.371375][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.526099][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.540420][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 104.559490][ T5818] usb 1-1: can't read configurations, error -71 [ 105.011908][ T5939] loop1: detected capacity change from 0 to 256 [ 105.848869][ T5777] usb 3-1: USB disconnect, device number 3 [ 106.102273][ T5946] loop2: detected capacity change from 0 to 4096 [ 106.111661][ T5946] ======================================================= [ 106.111661][ T5946] WARNING: The mand mount option has been deprecated and [ 106.111661][ T5946] and is ignored by this kernel. Remove the mand [ 106.111661][ T5946] option from the mount to silence this warning. [ 106.111661][ T5946] ======================================================= [ 106.130026][ T5935] loop3: detected capacity change from 0 to 32768 [ 106.188739][ T5935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.27 (5935) [ 106.264541][ T5935] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.264780][ T5935] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.264886][ T5935] BTRFS info (device loop3): using free space tree [ 106.478353][ T5935] BTRFS info (device loop3): enabling ssd optimizations [ 106.491343][ T5935] BTRFS info (device loop3): auto enabling async discard [ 106.915413][ T5973] loop0: detected capacity change from 0 to 2048 [ 108.140951][ T5971] sched: RT throttling activated [ 108.406784][ T5973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.750453][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.634608][ T5975] loop1: detected capacity change from 0 to 131072 [ 109.655074][ T5975] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 109.662399][ T5975] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.683643][ T5975] F2FS-fs (loop1): invalid crc value [ 109.726960][ T5786] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5786) [ 109.741082][ T5975] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.864755][ T5975] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.872096][ T5975] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 110.246972][ T28] audit: type=1800 audit(1782462425.601:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 111.341892][ T5977] loop0: detected capacity change from 0 to 32768 [ 111.566037][ T5977] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.909540][ T5977] XFS (loop0): Ending clean mount [ 111.962891][ T5977] XFS (loop0): Quotacheck needed: Please wait. [ 112.048245][ T5977] XFS (loop0): Quotacheck: Done. [ 112.148248][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.180392][ T1191] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.399433][ T1191] usb 3-1: Using ep0 maxpacket: 32 [ 112.417572][ T1191] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.433299][ T1191] usb 3-1: config 0 has no interface number 0 [ 112.466883][ T1191] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.486379][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.519391][ T1191] usb 3-1: Product: syz [ 112.523782][ T1191] usb 3-1: Manufacturer: syz [ 112.528436][ T1191] usb 3-1: SerialNumber: syz [ 112.574886][ T1191] usb 3-1: config 0 descriptor?? [ 112.907429][ T1191] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.178345][ T1191] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.202134][ T1191] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.508883][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 113.519258][ T1191] usb 3-1: USB disconnect, device number 4 [ 113.641894][ T1191] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.966038][ T1191] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.102208][ T6003] loop3: detected capacity change from 0 to 40427 [ 114.111594][ T1191] quatech2 3-1:0.51: device disconnected [ 114.371644][ T6003] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 114.421583][ T6003] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.507175][ T6003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.844495][ T6003] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.879788][ T6003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.086864][ T6026] loop2: detected capacity change from 0 to 1024 [ 115.109737][ T6026] hfsplus: gid requires an argument [ 115.115283][ T6026] hfsplus: unable to parse mount options [ 115.261183][ T6026] Zero length message leads to an empty skb [ 116.317953][ T6017] loop0: detected capacity change from 0 to 32768 [ 116.362236][ T6017] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.455194][ T6017] XFS (loop0): Ending clean mount [ 117.086997][ T6047] loop1: detected capacity change from 0 to 4096 [ 117.130376][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.369888][ T6069] loop0: detected capacity change from 0 to 1024 [ 119.385011][ T6069] hfsplus: gid requires an argument [ 119.390375][ T6069] hfsplus: unable to parse mount options [ 120.067695][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.489539][ T5782] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 120.496181][ T5788] Bluetooth: hci1: command 0x206a tx timeout [ 123.849653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 124.259501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.509713][ T5788] Bluetooth: hci2: command 0x206a tx timeout [ 124.515982][ T5782] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 125.001225][ T5782] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 125.019555][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.371114][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 125.839400][ T27] usb 4-1: device descriptor read/all, error -71 [ 126.934000][ T6128] trusted_key: encrypted_key: insufficient parameters specified [ 126.946042][ T6128] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 127.064206][ T6130] loop2: detected capacity change from 0 to 256 [ 127.163452][ T6130] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 127.748953][ T28] audit: type=1800 audit(1782462443.101:3): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file2" dev="loop2" ino=1048592 res=0 errno=0 [ 127.794224][ T6130] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 127.824847][ T6130] exFAT-fs (loop2): Filesystem has been set read-only [ 127.857933][ T6130] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 127.887188][ T28] audit: type=1804 audit(1782462443.241:4): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.81" name="/newroot/23/file2/file2" dev="loop2" ino=1048592 res=1 errno=0 [ 128.287316][ T6138] loop0: detected capacity change from 0 to 1024 [ 128.370495][ T6138] hfsplus: gid requires an argument [ 128.375794][ T6138] hfsplus: unable to parse mount options [ 128.979570][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.169493][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 129.182341][ T27] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.199518][ T27] usb 3-1: config 0 has no interface number 0 [ 129.219628][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.247209][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.265644][ T27] usb 3-1: Product: syz [ 129.270391][ T27] usb 3-1: Manufacturer: syz [ 129.275038][ T27] usb 3-1: SerialNumber: syz [ 129.336807][ T27] usb 3-1: config 0 descriptor?? [ 129.368995][ T27] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 129.889768][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 129.947357][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.419652][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.451745][ T23] usb 3-1: USB disconnect, device number 5 [ 130.511502][ T6153] vivid-000: ================= START STATUS ================= [ 130.519228][ T6153] vivid-000: Generate PTS: true [ 130.524467][ T6153] vivid-000: Generate SCR: true [ 130.529520][ T6153] tpg source WxH: 640x360 (Y'CbCr) [ 130.534682][ T6153] tpg field: 1 [ 130.538060][ T6153] tpg crop: 640x360@0x0 [ 130.542337][ T6153] tpg compose: 640x360@0x0 [ 130.546825][ T6153] tpg colorspace: 8 [ 130.550767][ T6153] tpg transfer function: 0/0 [ 130.555367][ T6153] tpg Y'CbCr encoding: 0/0 [ 130.559845][ T6153] tpg quantization: 0/0 [ 130.564008][ T6153] tpg RGB range: 0/2 [ 130.568041][ T6153] vivid-000: ================== END STATUS ================== [ 130.611386][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.662438][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.681841][ T23] quatech2 3-1:0.51: device disconnected [ 131.037780][ T6165] loop3: detected capacity change from 0 to 4096 [ 131.198292][ T5918] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.399710][ T1191] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 131.408330][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 131.444517][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.462960][ T5918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50960, setting to 1024 [ 131.479679][ T5918] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 131.493517][ T5918] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 131.542322][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.559762][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.584215][ T5918] usb 1-1: Product: syz [ 131.594695][ T5918] usb 1-1: Manufacturer: syz [ 131.622513][ T5918] usb 1-1: SerialNumber: syz [ 131.672483][ T6151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.836491][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.851271][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.055473][ T5918] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 132.168922][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.174719][ T5918] cdc_ncm 1-1:1.0: bind() failure [ 132.319919][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.360282][ T5918] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 132.367253][ T5918] cdc_ncm 1-1:1.1: bind() failure [ 133.154218][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164837][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.746969][ T5818] usb 1-1: USB disconnect, device number 6 [ 134.194437][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.220565][ T1191] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.345531][ T1191] usb 4-1: can't read configurations, error -71 [ 135.102695][ T6245] netlink: 'syz.1.99': attribute type 12 has an invalid length. [ 135.203749][ T6246] loop2: detected capacity change from 0 to 1024 [ 135.228113][ T6246] hfsplus: gid requires an argument [ 135.249506][ T6246] hfsplus: unable to parse mount options [ 135.299236][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.765036][ T6263] loop0: detected capacity change from 0 to 4096 [ 137.211275][ T5788] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 137.371082][ T5788] Bluetooth: hci0: command 0x206a tx timeout [ 137.378200][ T5782] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 137.509454][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 139.064499][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.169369][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.459460][ T5788] Bluetooth: hci0: command 0x206a tx timeout [ 139.465612][ T5782] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 139.539517][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.579846][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.598773][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 139.606588][ T9] usb 1-1: can't read configurations, error -71 [ 139.749520][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 139.766597][ T27] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 139.779077][ T27] usb 3-1: config 0 has no interface number 0 [ 139.804551][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 139.821641][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.839575][ T27] usb 3-1: Product: syz [ 139.843892][ T27] usb 3-1: Manufacturer: syz [ 139.848556][ T27] usb 3-1: SerialNumber: syz [ 139.873260][ T27] usb 3-1: config 0 descriptor?? [ 139.894039][ T27] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.117968][ T6308] loop3: detected capacity change from 0 to 1024 [ 140.137333][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 140.178425][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 140.207858][ T6308] hfsplus: gid requires an argument [ 140.279770][ T6308] hfsplus: unable to parse mount options [ 140.560515][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 140.563892][ T5818] usb 3-1: USB disconnect, device number 6 [ 140.605760][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 140.652863][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 140.689695][ T5818] quatech2 3-1:0.51: device disconnected [ 141.421234][ T6321] loop1: detected capacity change from 0 to 1024 [ 141.428937][ T6321] hfsplus: gid requires an argument [ 141.434363][ T6321] hfsplus: unable to parse mount options [ 141.610658][ T5782] Bluetooth: hci3: command 0x206a tx timeout [ 141.616967][ T5788] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 142.238619][ T6336] netlink: 108 bytes leftover after parsing attributes in process `syz.3.134'. [ 142.457310][ T6339] netlink: 'syz.1.135': attribute type 4 has an invalid length. [ 143.929630][ T5788] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 143.935832][ T5788] Bluetooth: hci2: command 0x206a tx timeout [ 144.121092][ T6360] loop1: detected capacity change from 0 to 1024 [ 144.184165][ T6360] hfsplus: gid requires an argument [ 144.209411][ T6360] hfsplus: unable to parse mount options [ 145.973780][ T6379] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 146.968755][ T6389] netlink: 80 bytes leftover after parsing attributes in process `syz.1.153'. [ 147.077440][ T6391] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.154'. [ 152.512244][ T6442] netlink: 'syz.1.171': attribute type 29 has an invalid length. [ 152.535601][ T6442] netlink: 'syz.1.171': attribute type 29 has an invalid length. [ 153.031721][ T6445] netlink: 'syz.1.171': attribute type 29 has an invalid length. [ 153.089059][ T6442] netlink: 'syz.1.171': attribute type 29 has an invalid length. [ 154.216701][ T6456] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 154.380557][ T6456] team0: Device wg1 is of different type [ 155.149813][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 157.234994][ T6486] loop0: detected capacity change from 0 to 1024 [ 157.252055][ T6486] hfsplus: gid requires an argument [ 157.289516][ T6486] hfsplus: unable to parse mount options [ 157.381922][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.599926][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 157.617691][ T27] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 157.629459][ T27] usb 3-1: config 0 has no interface number 0 [ 157.672721][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.682076][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.764133][ T27] usb 3-1: Product: syz [ 157.779481][ T27] usb 3-1: Manufacturer: syz [ 157.784309][ T27] usb 3-1: SerialNumber: syz [ 157.829269][ T27] usb 3-1: config 0 descriptor?? [ 157.857882][ T27] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.112354][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.136911][ T27] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.278811][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 158.325945][ T6495] sch_tbf: burst 0 is lower than device veth0 mtu (1514) ! [ 158.561648][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.579756][ T23] usb 3-1: USB disconnect, device number 7 [ 158.613413][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.688054][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.756104][ T23] quatech2 3-1:0.51: device disconnected [ 159.180176][ T6502] loop3: detected capacity change from 0 to 32768 [ 159.190655][ T6502] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.194 (6502) [ 159.212292][ T6502] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.222597][ T6502] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.231434][ T6502] BTRFS info (device loop3): enabling disk space caching [ 159.240286][ T6502] BTRFS info (device loop3): force clearing of disk cache [ 159.248007][ T6502] BTRFS info (device loop3): enabling auto defrag [ 159.254675][ T6502] BTRFS info (device loop3): disk space caching is enabled [ 159.397271][ T6502] BTRFS info (device loop3): enabling ssd optimizations [ 159.405063][ T6502] BTRFS info (device loop3): auto enabling async discard [ 159.415172][ T6502] BTRFS info (device loop3): rebuilding free space tree [ 159.461258][ T6502] BTRFS info (device loop3): disabling free space tree [ 159.468388][ T6502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.478550][ T6502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.544199][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 161.512984][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (5786) [ 161.903847][ T6550] warning: `syz.0.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 165.309544][ T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.719391][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 165.736856][ T788] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 165.745625][ T788] usb 1-1: config 0 has no interface number 0 [ 165.958306][ T6613] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.231'. [ 166.096861][ T6613] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.231'. [ 166.298325][ T6611] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.231'. [ 166.323602][ T6614] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.231'. [ 166.531704][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 166.540904][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.548944][ T788] usb 1-1: Product: syz [ 166.554418][ T788] usb 1-1: Manufacturer: syz [ 166.559165][ T788] usb 1-1: SerialNumber: syz [ 166.566532][ T788] usb 1-1: config 0 descriptor?? [ 166.576862][ T788] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 166.802199][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 166.839148][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 167.264213][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 167.278854][ T5777] usb 1-1: USB disconnect, device number 9 [ 167.335372][ T5777] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 167.380974][ T5777] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 167.413275][ T5777] quatech2 1-1:0.51: device disconnected [ 168.616172][ T6653] loop1: detected capacity change from 0 to 1024 [ 168.660063][ T6653] hfsplus: gid requires an argument [ 168.730069][ T6653] hfsplus: unable to parse mount options [ 168.859962][ T6655] loop2: detected capacity change from 0 to 1024 [ 168.874426][ T6655] hfsplus: gid requires an argument [ 168.879810][ T6655] hfsplus: unable to parse mount options [ 169.907475][ T6658] loop0: detected capacity change from 0 to 32768 [ 169.916683][ T6658] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 170.475382][ T5786] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 170.501732][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.739748][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 170.763344][ T788] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.799374][ T788] usb 3-1: config 0 has no interface number 0 [ 170.847873][ T788] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.920128][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.920670][ T788] usb 3-1: Product: syz [ 170.920937][ T788] usb 3-1: Manufacturer: syz [ 170.921139][ T788] usb 3-1: SerialNumber: syz [ 170.985676][ T788] usb 3-1: config 0 descriptor?? [ 171.007536][ T788] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.369418][ T788] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.419807][ T788] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.831061][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.839585][ T788] usb 3-1: USB disconnect, device number 8 [ 171.937906][ T788] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.976230][ T788] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.020246][ T788] quatech2 3-1:0.51: device disconnected [ 172.603945][ T6695] loop3: detected capacity change from 0 to 32768 [ 172.631470][ T6695] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 172.641876][ T6695] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 172.650993][ T6695] BTRFS info (device loop3): enabling disk space caching [ 172.658104][ T6695] BTRFS info (device loop3): force clearing of disk cache [ 172.665345][ T6695] BTRFS info (device loop3): enabling auto defrag [ 172.671866][ T6695] BTRFS info (device loop3): disk space caching is enabled [ 172.763567][ T6695] BTRFS info (device loop3): enabling ssd optimizations [ 172.770690][ T6695] BTRFS info (device loop3): auto enabling async discard [ 172.784720][ T6695] BTRFS info (device loop3): rebuilding free space tree [ 172.849639][ T6695] BTRFS info (device loop3): disabling free space tree [ 172.857115][ T6695] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.867391][ T6695] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.060040][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.175634][ T6751] loop0: detected capacity change from 0 to 1024 [ 175.546210][ T6751] hfsplus: gid requires an argument [ 175.679697][ T6751] hfsplus: unable to parse mount options [ 176.784038][ T6765] netlink: 140 bytes leftover after parsing attributes in process `syz.3.283'. [ 178.819703][ T788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.887880][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.900372][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.908794][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.923199][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.939661][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.950124][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.045673][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 179.072280][ T788] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.109824][ T788] usb 4-1: config 0 has no interface number 0 [ 179.133181][ T788] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.169376][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.180866][ T788] usb 4-1: Product: syz [ 179.185204][ T788] usb 4-1: Manufacturer: syz [ 179.199557][ T788] usb 4-1: SerialNumber: syz [ 179.216735][ T788] usb 4-1: config 0 descriptor?? [ 179.238870][ T788] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.178736][ T788] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.194971][ T788] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.426163][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.430744][ T5818] usb 4-1: USB disconnect, device number 7 [ 180.467302][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.488143][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 180.518101][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.542277][ T5818] quatech2 4-1:0.51: device disconnected [ 180.650944][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 180.814187][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.839588][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.859560][ T6788] bridge_slave_0: entered allmulticast mode [ 180.879599][ T6788] bridge_slave_0: entered promiscuous mode [ 180.901890][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.924343][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.939736][ T6788] bridge_slave_1: entered allmulticast mode [ 180.956002][ T6788] bridge_slave_1: entered promiscuous mode [ 181.049597][ T5782] Bluetooth: hci2: command tx timeout [ 181.058212][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.071167][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.195927][ T6788] team0: Port device team_slave_0 added [ 181.242607][ T6788] team0: Port device team_slave_1 added [ 181.405562][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.412904][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.439578][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.461803][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.468810][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.502935][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.590242][ T6816] loop0: detected capacity change from 0 to 1024 [ 181.618392][ T6816] hfsplus: gid requires an argument [ 181.662110][ T6816] hfsplus: unable to parse mount options [ 182.124704][ T6821] loop3: detected capacity change from 0 to 32768 [ 182.134159][ T6821] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.305 (6821) [ 182.175205][ T6821] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.185549][ T6821] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 182.194471][ T6821] BTRFS info (device loop3): enabling disk space caching [ 182.201698][ T6821] BTRFS info (device loop3): force clearing of disk cache [ 182.208877][ T6821] BTRFS info (device loop3): enabling auto defrag [ 182.215438][ T6821] BTRFS info (device loop3): disk space caching is enabled [ 182.279032][ T6821] BTRFS info (device loop3): enabling ssd optimizations [ 182.286253][ T6821] BTRFS info (device loop3): auto enabling async discard [ 182.302204][ T6821] BTRFS info (device loop3): rebuilding free space tree [ 182.362824][ T6821] BTRFS info (device loop3): disabling free space tree [ 182.369982][ T6821] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.381380][ T6821] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.960723][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 183.129591][ T5782] Bluetooth: hci2: command tx timeout [ 183.270418][ T6842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.306'. [ 183.301520][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (5786) [ 185.052808][ T6845] loop0: detected capacity change from 0 to 131072 [ 185.087459][ T6845] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 185.102172][ T6845] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 185.128429][ T6845] F2FS-fs (loop0): invalid crc value [ 185.189470][ T6845] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.215814][ T5782] Bluetooth: hci2: command tx timeout [ 185.316914][ T6845] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 185.327586][ T6845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 185.413616][ T28] audit: type=1800 audit(1782462500.761:5): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 185.521184][ T6788] hsr_slave_0: entered promiscuous mode [ 185.540156][ T6788] hsr_slave_1: entered promiscuous mode [ 185.562412][ T6788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.579007][ T6788] Cannot create hsr debugfs directory [ 186.862674][ T6788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.885092][ T6788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.907751][ T6788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.080879][ T6867] loop1: detected capacity change from 0 to 2048 [ 187.178079][ T6867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.701688][ T5782] Bluetooth: hci2: command tx timeout [ 187.943441][ T6788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.305441][ T6875] loop3: detected capacity change from 0 to 128 [ 188.315094][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.350048][ T6875] EXT4-fs (loop3): Test dummy encryption mode enabled [ 188.397540][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.420673][ T6875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.446505][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.453747][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.494877][ T6875] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.542784][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.550054][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.657431][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.316'. [ 188.713801][ T6788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.234782][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.323582][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.690244][ T6895] loop3: detected capacity change from 0 to 32768 [ 189.756377][ T6895] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 189.766715][ T6895] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 189.775698][ T6895] BTRFS info (device loop3): enabling disk space caching [ 189.782914][ T6895] BTRFS info (device loop3): force clearing of disk cache [ 189.790289][ T6895] BTRFS info (device loop3): enabling auto defrag [ 189.798227][ T6895] BTRFS info (device loop3): disk space caching is enabled [ 190.014517][ T6895] BTRFS info (device loop3): enabling ssd optimizations [ 190.021740][ T6895] BTRFS info (device loop3): auto enabling async discard [ 190.030432][ T6895] BTRFS info (device loop3): rebuilding free space tree [ 190.055474][ T6895] BTRFS info (device loop3): disabling free space tree [ 190.062645][ T6895] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.072520][ T6895] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.601071][ T6788] veth0_vlan: entered promiscuous mode [ 190.623900][ T6788] veth1_vlan: entered promiscuous mode [ 190.691381][ T6788] veth0_macvtap: entered promiscuous mode [ 190.714828][ T6788] veth1_macvtap: entered promiscuous mode [ 190.763876][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.774722][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.787356][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.804158][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.818050][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.836924][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.847972][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.866508][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.878400][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.896606][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.907199][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.923417][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.934270][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.944895][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.956692][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.967094][ T6788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.989167][ T6788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.001751][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.036590][ T6788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.045496][ T6788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.059396][ T6788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.076236][ T6788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.349611][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 192.374220][ T4826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.409903][ T4826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.533746][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.565028][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.639421][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.719459][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 193.728815][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.738914][ T23] usb 1-1: config 0 has no interface number 0 [ 193.748473][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.760520][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.779910][ T23] usb 1-1: Product: syz [ 193.784161][ T23] usb 1-1: Manufacturer: syz [ 193.809606][ T23] usb 1-1: SerialNumber: syz [ 193.828632][ T23] usb 1-1: config 0 descriptor?? [ 193.853323][ T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.872176][ T6938] loop4: detected capacity change from 0 to 128 [ 193.930320][ T6938] EXT4-fs (loop4): Test dummy encryption mode enabled [ 193.970662][ T6938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.989189][ T6938] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.083304][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.327'. [ 194.120079][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 194.148267][ T6948] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 194.168135][ T6948] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 194.181197][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.195779][ T6948] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 194.221727][ T6948] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 194.496784][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.504855][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.941312][ T6788] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.275433][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.278911][ T5918] usb 1-1: USB disconnect, device number 10 [ 195.297147][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.352935][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.382406][ T5918] quatech2 1-1:0.51: device disconnected [ 196.347640][ T6965] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 196.596728][ T6970] netlink: 160 bytes leftover after parsing attributes in process `syz.4.339'. [ 196.818211][ T6972] loop0: detected capacity change from 0 to 128 [ 196.877706][ T6972] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.986074][ T6972] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.068540][ T6972] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.116642][ T6977] netlink: 64 bytes leftover after parsing attributes in process `syz.4.342'. [ 197.163295][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 197.449250][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.209539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 204.746833][ T7027] loop4: detected capacity change from 0 to 1024 [ 204.848657][ T7027] hfsplus: gid requires an argument [ 204.854147][ T7027] hfsplus: unable to parse mount options [ 206.770306][ T7036] loop0: detected capacity change from 0 to 128 [ 206.819438][ T7036] EXT4-fs (loop0): Test dummy encryption mode enabled [ 206.855983][ T7036] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.933420][ T7036] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.123539][ T7048] netlink: 380 bytes leftover after parsing attributes in process `syz.1.370'. [ 207.201359][ T7050] loop3: detected capacity change from 0 to 1024 [ 207.232708][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.386588][ T7050] hfsplus: gid requires an argument [ 207.466339][ T7050] hfsplus: unable to parse mount options [ 207.644321][ T7056] loop4: detected capacity change from 0 to 1024 [ 207.659064][ T7056] hfsplus: gid requires an argument [ 207.664500][ T7056] hfsplus: unable to parse mount options [ 208.342382][ T7058] loop0: detected capacity change from 0 to 128 [ 208.425677][ T7058] EXT4-fs (loop0): Test dummy encryption mode enabled [ 208.461324][ T7058] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.476118][ T7058] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.203908][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.629402][ T5777] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.680461][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 209.870561][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 209.892909][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.917015][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50960, setting to 1024 [ 209.936861][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 209.978212][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 210.031339][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.062407][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.083280][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 210.104002][ T5777] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 210.110625][ T9] usb 2-1: Product: syz [ 210.112522][ T5777] usb 1-1: config 0 has no interface number 0 [ 210.121877][ T9] usb 2-1: Manufacturer: syz [ 210.129950][ T9] usb 2-1: SerialNumber: syz [ 210.136790][ T5777] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 210.289673][ T7059] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.427389][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 210.548265][ T9] cdc_ncm 2-1:1.0: bind() failure [ 210.674605][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 210.711645][ T9] cdc_ncm 2-1:1.1: bind() failure [ 210.900085][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.903220][ T9] usb 2-1: USB disconnect, device number 2 [ 210.908155][ T5777] usb 1-1: Product: syz [ 210.908174][ T5777] usb 1-1: Manufacturer: syz [ 210.908191][ T5777] usb 1-1: SerialNumber: syz [ 210.947041][ T5777] usb 1-1: config 0 descriptor?? [ 210.962506][ T5777] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 211.127620][ T7087] netlink: 'syz.1.384': attribute type 21 has an invalid length. [ 211.155193][ T7086] loop3: detected capacity change from 0 to 128 [ 211.168382][ T7087] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.384'. [ 211.214664][ T5777] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 211.224380][ T7086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.261271][ T5777] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 211.291872][ T7086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.355287][ T7086] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.680132][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 211.683859][ T9] usb 1-1: USB disconnect, device number 11 [ 211.775100][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 211.827037][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.942429][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.948829][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 211.955272][ T51] Bluetooth: hci1: command 0x206a tx timeout [ 212.009541][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 212.287455][ T9] quatech2 1-1:0.51: device disconnected [ 212.799088][ T7106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.391'. [ 213.814839][ T7112] loop0: detected capacity change from 0 to 32768 [ 213.834941][ T7112] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.393 (7112) [ 213.871799][ T7112] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 213.882088][ T7112] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 213.890900][ T7112] BTRFS info (device loop0): enabling disk space caching [ 213.897976][ T7112] BTRFS info (device loop0): force clearing of disk cache [ 213.905335][ T7112] BTRFS info (device loop0): enabling auto defrag [ 213.911893][ T7112] BTRFS info (device loop0): disk space caching is enabled [ 214.390029][ T7112] BTRFS info (device loop0): enabling ssd optimizations [ 214.397126][ T7112] BTRFS info (device loop0): auto enabling async discard [ 214.405651][ T7112] BTRFS info (device loop0): rebuilding free space tree [ 214.426245][ T7112] BTRFS info (device loop0): disabling free space tree [ 214.433399][ T7112] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.443279][ T7112] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.513135][ T7130] loop1: detected capacity change from 0 to 128 [ 214.581645][ T7130] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.790240][ T7130] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.855226][ T7130] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.063949][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 215.218780][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.325583][ T7141] loop3: detected capacity change from 0 to 4096 [ 215.936354][ T5918] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 218.316977][ T5918] usb 4-1: device descriptor read/all, error -71 [ 218.849745][ T7163] loop3: detected capacity change from 0 to 32768 [ 218.858879][ T7163] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.406 (7163) [ 218.891492][ T7163] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 218.901834][ T7163] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 218.910841][ T7163] BTRFS info (device loop3): enabling disk space caching [ 218.917917][ T7163] BTRFS info (device loop3): force clearing of disk cache [ 218.925159][ T7163] BTRFS info (device loop3): enabling auto defrag [ 218.931769][ T7163] BTRFS info (device loop3): disk space caching is enabled [ 219.085259][ T7163] BTRFS info (device loop3): enabling ssd optimizations [ 219.092893][ T7163] BTRFS info (device loop3): auto enabling async discard [ 219.110672][ T7163] BTRFS info (device loop3): rebuilding free space tree [ 219.127650][ T7163] BTRFS info (device loop3): disabling free space tree [ 219.135548][ T7163] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.145375][ T7163] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.575617][ T7187] loop4: detected capacity change from 0 to 1024 [ 219.588549][ T7187] hfsplus: gid requires an argument [ 219.595385][ T7187] hfsplus: unable to parse mount options [ 220.327860][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.339682][ T5787] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.924625][ T7200] loop0: detected capacity change from 0 to 4096 [ 222.203474][ T5788] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 222.220171][ T7210] netem: change failed [ 222.740822][ T7212] loop4: detected capacity change from 0 to 32768 [ 222.751270][ T5818] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 222.768357][ T7212] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.420 (7212) [ 222.850878][ T7212] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.861208][ T7212] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 222.871964][ T7212] BTRFS info (device loop4): enabling disk space caching [ 222.879067][ T7212] BTRFS info (device loop4): force clearing of disk cache [ 222.886306][ T7212] BTRFS info (device loop4): enabling auto defrag [ 222.892878][ T7212] BTRFS info (device loop4): disk space caching is enabled [ 223.204337][ T7212] BTRFS info (device loop4): enabling ssd optimizations [ 223.211659][ T7212] BTRFS info (device loop4): auto enabling async discard [ 223.228326][ T7212] BTRFS info (device loop4): rebuilding free space tree [ 223.334610][ T7212] BTRFS info (device loop4): disabling free space tree [ 223.341817][ T7212] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.351726][ T7212] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.588535][ T6788] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.507458][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.541704][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.364152][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.378392][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 226.394781][ T5818] usb 1-1: can't read configurations, error -71 [ 228.095266][ T7264] loop0: detected capacity change from 0 to 32768 [ 228.159566][ T7264] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.429 (7264) [ 228.485370][ T7268] loop1: detected capacity change from 0 to 256 [ 228.608946][ T7268] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 228.689531][ T7264] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 228.702356][ T7264] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 228.713112][ T7264] BTRFS info (device loop0): enabling disk space caching [ 228.720370][ T7264] BTRFS info (device loop0): force clearing of disk cache [ 228.727547][ T7264] BTRFS info (device loop0): enabling auto defrag [ 228.734188][ T7264] BTRFS info (device loop0): disk space caching is enabled [ 228.939559][ T7264] BTRFS info (device loop0): enabling ssd optimizations [ 228.946761][ T7264] BTRFS info (device loop0): auto enabling async discard [ 228.960266][ T7264] BTRFS info (device loop0): rebuilding free space tree [ 228.977459][ T7264] BTRFS info (device loop0): disabling free space tree [ 228.984665][ T7264] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.994604][ T7264] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.696665][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 229.965879][ T7292] loop1: detected capacity change from 0 to 4096 [ 230.074036][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (5786) [ 231.417300][ T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 231.969422][ T5777] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 232.189649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 232.305838][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.315934][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.239614][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 233.269562][ T5777] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 233.277953][ T5777] usb 1-1: config 0 has no interface number 0 [ 233.335457][ T5777] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 233.345444][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.353800][ T5777] usb 1-1: Product: syz [ 233.358709][ T5777] usb 1-1: Manufacturer: syz [ 233.363698][ T5777] usb 1-1: SerialNumber: syz [ 233.411480][ T5777] usb 1-1: config 0 descriptor?? [ 233.462257][ T5777] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 233.554209][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.575036][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 233.585769][ T23] usb 2-1: can't read configurations, error -71 [ 234.368378][ T5777] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 234.385255][ T5777] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 234.749612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 234.760831][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 234.817373][ T7320] loop4: detected capacity change from 0 to 32768 [ 234.838256][ T5777] usb 1-1: USB disconnect, device number 14 [ 234.865493][ T7320] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 234.915736][ T5777] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 234.952696][ T5777] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 234.990219][ T5777] quatech2 1-1:0.51: device disconnected [ 238.145452][ T7351] loop0: detected capacity change from 0 to 32768 [ 238.689069][ T7351] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.699549][ T7351] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 238.708269][ T7351] BTRFS info (device loop0): enabling disk space caching [ 238.715413][ T7351] BTRFS info (device loop0): force clearing of disk cache [ 238.722619][ T7351] BTRFS info (device loop0): enabling auto defrag [ 238.729099][ T7351] BTRFS info (device loop0): disk space caching is enabled [ 239.410839][ T7351] BTRFS info (device loop0): enabling ssd optimizations [ 239.417951][ T7351] BTRFS info (device loop0): auto enabling async discard [ 239.433252][ T7351] BTRFS info (device loop0): rebuilding free space tree [ 239.462722][ T7351] BTRFS info (device loop0): disabling free space tree [ 239.469841][ T7351] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 239.479655][ T7351] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.609567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 242.694862][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 242.941380][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (5786) [ 246.245332][ T7448] loop1: detected capacity change from 0 to 32768 [ 246.254623][ T7448] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 246.295530][ T7452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.472'. [ 246.386130][ T5787] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.685031][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.939565][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 246.957679][ T23] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 246.966817][ T23] usb 5-1: config 0 has no interface number 0 [ 247.021002][ T23] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.030574][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.043369][ T23] usb 5-1: Product: syz [ 247.047896][ T23] usb 5-1: Manufacturer: syz [ 247.056185][ T23] usb 5-1: SerialNumber: syz [ 247.085406][ T23] usb 5-1: config 0 descriptor?? [ 247.204484][ T23] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.493899][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.534297][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.896273][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 247.899898][ T5918] usb 5-1: USB disconnect, device number 2 [ 247.942417][ T7467] loop3: detected capacity change from 0 to 1024 [ 247.943003][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.981037][ T7467] hfsplus: gid requires an argument [ 248.011057][ T7467] hfsplus: unable to parse mount options [ 248.037734][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.088373][ T5918] quatech2 5-1:0.51: device disconnected [ 248.462393][ T7474] loop1: detected capacity change from 0 to 1024 [ 248.510837][ T7474] hfsplus: gid requires an argument [ 248.516123][ T7474] hfsplus: unable to parse mount options [ 249.809867][ T7503] loop3: detected capacity change from 0 to 256 [ 249.891240][ T7503] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 250.166164][ T7505] loop0: detected capacity change from 0 to 32768 [ 250.323649][ T7505] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 250.334665][ T7505] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 250.342897][ T28] audit: type=1800 audit(1782462565.681:6): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.484" name="file2" dev="loop3" ino=1048610 res=0 errno=0 [ 250.343748][ T7505] BTRFS info (device loop0): enabling disk space caching [ 250.371427][ T7505] BTRFS info (device loop0): force clearing of disk cache [ 250.378601][ T7505] BTRFS info (device loop0): enabling auto defrag [ 250.385161][ T7505] BTRFS info (device loop0): disk space caching is enabled [ 250.421122][ T28] audit: type=1804 audit(1782462565.681:7): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.484" name="/newroot/129/file2/file2" dev="loop3" ino=1048610 res=1 errno=0 [ 250.945299][ T7505] BTRFS info (device loop0): enabling ssd optimizations [ 250.952783][ T7505] BTRFS info (device loop0): auto enabling async discard [ 250.973672][ T7505] BTRFS info (device loop0): rebuilding free space tree [ 251.041846][ T7505] BTRFS info (device loop0): disabling free space tree [ 251.048863][ T7505] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.058742][ T7505] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.460643][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 252.669303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 252.695183][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (5786) [ 252.936665][ T7547] loop3: detected capacity change from 0 to 256 [ 253.115665][ T7547] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 253.208225][ T28] audit: type=1800 audit(1782462568.561:8): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.495" name="file2" dev="loop3" ino=1048611 res=0 errno=0 [ 253.306992][ T28] audit: type=1804 audit(1782462568.591:9): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.495" name="/newroot/133/file2/file2" dev="loop3" ino=1048611 res=1 errno=0 [ 256.997896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.004379][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.505027][ T7577] netlink: 104 bytes leftover after parsing attributes in process `syz.0.507'. [ 257.788278][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.807751][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.843496][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.911923][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.071891][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.090145][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.821974][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 258.970844][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.978159][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.993261][ T7580] bridge_slave_0: entered allmulticast mode [ 259.004173][ T7580] bridge_slave_0: entered promiscuous mode [ 259.018730][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.041164][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.048526][ T7580] bridge_slave_1: entered allmulticast mode [ 259.065175][ T7580] bridge_slave_1: entered promiscuous mode [ 259.125785][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.143419][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.199638][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 259.507996][ T7580] team0: Port device team_slave_0 added [ 259.525075][ T7580] team0: Port device team_slave_1 added [ 261.101451][ T5779] Bluetooth: hci2: command tx timeout [ 261.579581][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 261.606938][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.635792][ T9] usb 4-1: config 0 has no interface number 0 [ 261.670320][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.677460][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.706116][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.718953][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 261.728431][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.741400][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.748417][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.777147][ T9] usb 4-1: Product: syz [ 261.782466][ T9] usb 4-1: Manufacturer: syz [ 261.787646][ T9] usb 4-1: SerialNumber: syz [ 261.799975][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.840813][ T9] usb 4-1: config 0 descriptor?? [ 261.868188][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 262.027981][ T7580] hsr_slave_0: entered promiscuous mode [ 262.071361][ T9] usb 4-1: qt2_attach - failed to power on unit: -71 [ 262.080385][ T7580] hsr_slave_1: entered promiscuous mode [ 262.109054][ T9] quatech2: probe of 4-1:0.51 failed with error -71 [ 262.121268][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.128909][ T7580] Cannot create hsr debugfs directory [ 262.160028][ T9] usb 4-1: USB disconnect, device number 10 [ 263.140156][ T5779] Bluetooth: hci2: command tx timeout [ 263.511656][ T7580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.530346][ T7580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.550958][ T7580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.584257][ T7580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.059526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 265.536080][ T5779] Bluetooth: hci2: command tx timeout [ 266.369719][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.484462][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.547389][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.554700][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.618122][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.625589][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.672950][ T7644] loop0: detected capacity change from 0 to 256 [ 266.755963][ T7644] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 266.838409][ T28] audit: type=1800 audit(1782462582.191:10): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file2" dev="loop0" ino=1048612 res=0 errno=0 [ 266.900846][ T28] audit: type=1804 audit(1782462582.191:11): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.528" name="/newroot/115/file2/file2" dev="loop0" ino=1048612 res=1 errno=0 [ 268.908407][ T5779] Bluetooth: hci2: command tx timeout [ 269.547150][ T7652] loop0: detected capacity change from 0 to 4096 [ 269.708335][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.797327][ T5779] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 270.099453][ T5817] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 270.113523][ T7671] loop3: detected capacity change from 0 to 256 [ 270.193688][ T7671] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 270.250961][ T28] audit: type=1800 audit(1782462585.601:12): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.538" name="file2" dev="loop3" ino=1048613 res=0 errno=0 [ 270.313919][ T28] audit: type=1804 audit(1782462585.611:13): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.538" name="/newroot/150/file2/file2" dev="loop3" ino=1048613 res=1 errno=0 [ 270.557189][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.574930][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.337350][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.368229][ T5817] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 271.386785][ T5817] usb 1-1: can't read configurations, error -71 [ 271.432415][ T7580] veth0_vlan: entered promiscuous mode [ 271.474655][ T7580] veth1_vlan: entered promiscuous mode [ 271.608490][ T7580] veth0_macvtap: entered promiscuous mode [ 271.635946][ T7580] veth1_macvtap: entered promiscuous mode [ 271.687852][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.719312][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.729205][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.769668][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.789720][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.809308][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.833335][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.865432][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.899350][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.929689][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.952426][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.011686][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.082565][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.126267][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.168084][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.204989][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.232659][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.260944][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.279581][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.325682][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.350576][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.375367][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.405781][ T7580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.430034][ T7580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.449478][ T7580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.458269][ T7580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.768397][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.799141][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.850038][ T7700] loop0: detected capacity change from 0 to 256 [ 272.928611][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.954582][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.955659][ T7700] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 273.001363][ T28] audit: type=1800 audit(1782462588.361:14): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file2" dev="loop0" ino=1048614 res=0 errno=0 [ 273.064281][ T7700] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 273.072951][ T7700] exFAT-fs (loop0): Filesystem has been set read-only [ 273.081865][ T7700] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 273.235302][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.248503][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.276359][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.286945][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.300256][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.307748][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.092123][ T5779] Bluetooth: hci2: command tx timeout [ 274.642045][ T7703] chnl_net:caif_netlink_parms(): no params data found [ 274.718331][ T7723] netlink: 'syz.0.554': attribute type 39 has an invalid length. [ 274.904108][ T7725] loop5: detected capacity change from 0 to 1024 [ 274.941783][ T7725] hfsplus: gid requires an argument [ 274.947113][ T7725] hfsplus: unable to parse mount options [ 275.520240][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.528253][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.555969][ T7703] bridge_slave_0: entered allmulticast mode [ 275.579926][ T7703] bridge_slave_0: entered promiscuous mode [ 275.610008][ T5779] Bluetooth: hci3: command tx timeout [ 275.639717][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.679212][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.687536][ T7703] bridge_slave_1: entered allmulticast mode [ 275.739445][ T7703] bridge_slave_1: entered promiscuous mode [ 275.843750][ T7703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.899038][ T7703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.947760][ T7740] Bluetooth: MGMT ver 1.22 [ 276.033743][ T7703] team0: Port device team_slave_0 added [ 276.054490][ T7703] team0: Port device team_slave_1 added [ 276.166624][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.189492][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'. [ 276.189783][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.232943][ T7703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.248143][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.256085][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.349349][ T7703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.480484][ T7703] hsr_slave_0: entered promiscuous mode [ 276.516919][ T7703] hsr_slave_1: entered promiscuous mode [ 276.531153][ T7703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.551771][ T7703] Cannot create hsr debugfs directory [ 276.830461][ T7755] syzkaller1: entered promiscuous mode [ 276.836378][ T7755] syzkaller1: entered allmulticast mode [ 277.600134][ T7703] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.633538][ T7703] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.659768][ T7772] loop0: detected capacity change from 0 to 256 [ 277.673981][ T7703] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.690283][ T5779] Bluetooth: hci3: command tx timeout [ 277.741430][ T7772] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 277.770378][ T7703] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.809924][ T28] audit: type=1800 audit(1782462593.151:15): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.569" name="file2" dev="loop0" ino=1048618 res=0 errno=0 [ 277.817573][ T7772] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 277.899693][ T7772] exFAT-fs (loop0): Filesystem has been set read-only [ 277.906773][ T7772] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 278.038205][ T7778] netlink: 576 bytes leftover after parsing attributes in process `syz.5.572'. [ 278.199916][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.273976][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.306086][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.313376][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.347554][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.355147][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.074504][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.137676][ T7782] loop0: detected capacity change from 0 to 32768 [ 279.161596][ T7782] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 279.200957][ T7782] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 279.234164][ T7782] BTRFS info (device loop0): enabling disk space caching [ 279.259033][ T7782] BTRFS info (device loop0): force clearing of disk cache [ 279.288183][ T7782] BTRFS info (device loop0): enabling auto defrag [ 279.297691][ T7782] BTRFS info (device loop0): disk space caching is enabled [ 279.480149][ T7782] BTRFS info (device loop0): enabling ssd optimizations [ 279.514639][ T7782] BTRFS info (device loop0): auto enabling async discard [ 279.562235][ T7782] BTRFS info (device loop0): rebuilding free space tree [ 279.626090][ T7782] BTRFS info (device loop0): disabling free space tree [ 279.658514][ T7782] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 279.697172][ T7782] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 279.715876][ T7826] block nbd5: not configured, cannot reconfigure [ 279.769821][ T5779] Bluetooth: hci3: command tx timeout [ 280.169993][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.354393][ T7703] veth0_vlan: entered promiscuous mode [ 280.559990][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.832517][ T7703] veth1_vlan: entered promiscuous mode [ 281.121080][ T7703] veth0_macvtap: entered promiscuous mode [ 281.167251][ T7703] veth1_macvtap: entered promiscuous mode [ 281.227437][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.241296][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.256816][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.272817][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.293560][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.330812][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.362761][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.399709][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.415960][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.438619][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.462255][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.485739][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.512604][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.566358][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.589362][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.618023][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.619494][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.689650][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.719321][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.739623][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.759604][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.786032][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.809342][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.826195][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.838862][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.849809][ T5779] Bluetooth: hci3: command tx timeout [ 281.868524][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.881305][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 281.895129][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.950210][ T7703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.967592][ T7703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.009995][ T7703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.029061][ T7703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.129601][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.5.592'. [ 282.181062][ T7849] syzkaller1: entered promiscuous mode [ 282.186707][ T7849] syzkaller1: entered allmulticast mode [ 282.528888][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.539489][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.605726][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.622171][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.691778][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.816157][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.794713][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.819712][ T7864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.596'. [ 283.850141][ T7864] ------------[ cut here ]------------ [ 283.855808][ T7864] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 283.906755][ T7864] WARNING: CPU: 1 PID: 7864 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 283.916065][ T7864] Modules linked in: [ 283.920379][ T7864] CPU: 1 PID: 7864 Comm: syz.3.596 Not tainted syzkaller #0 [ 283.927755][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.938551][ T7864] RIP: 0010:u32_change+0x1ce8/0x2690 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.944242][ T7864] Code: f8 eb 59 e8 1a 49 da f8 c6 05 d3 ed c8 05 01 b9 10 00 00 00 48 c7 c7 00 8e c7 8b 4c 89 fe 48 c7 c2 80 8e c7 8b e8 18 22 a4 f8 <0f> 0b e9 1f f0 ff ff e8 ec 48 da f8 eb 24 e8 e5 48 da f8 c6 05 63 [ 283.964430][ T7864] RSP: 0018:ffffc90003676d60 EFLAGS: 00010246 [ 283.970636][ T7864] RAX: fd542a7a36307900 RBX: ffff88805dbd4400 RCX: 0000000000080000 [ 283.978761][ T7864] RDX: ffffc9000d5ca000 RSI: 0000000000006bed RDI: 0000000000006bee [ 283.986943][ T7864] RBP: ffffc90003676ef8 R08: ffffc90003676967 R09: 1ffff920006ced2c [ 283.995067][ T7864] R10: dffffc0000000000 R11: fffff520006ced2d R12: 1ffff920006cedbc [ 284.005205][ T7864] R13: ffff888030dde8e8 R14: ffff888030c9bb80 R15: 0000000000000020 [ 284.014365][ T7864] FS: 00007f0479f736c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 284.023815][ T7864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.030571][ T7864] CR2: 000055556b18ca38 CR3: 0000000053dd8000 CR4: 00000000003506e0 [ 284.038621][ T7864] Call Trace: [ 284.042085][ T7864] [ 284.045088][ T7864] ? u32_get+0x370/0x370 [ 284.049536][ T7864] tc_new_tfilter+0x1109/0x1820 [ 284.054577][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.060722][ T7864] ? rcu_read_unlock+0x8c/0xa0 [ 284.065838][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.072524][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.078607][ T7864] rtnetlink_rcv_msg+0x892/0xf90 [ 284.083653][ T7864] ? rtnetlink_rcv_msg+0x220/0xf90 [ 284.088841][ T7864] ? rtnetlink_bind+0x80/0x80 [ 284.094227][ T7864] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.100578][ T7864] ? lock_chain_count+0x20/0x20 [ 284.107444][ T7864] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.113309][ T7864] ? lockdep_hardirqs_on+0x98/0x150 [ 284.118599][ T7864] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.124174][ T7864] ? _local_bh_enable+0xa0/0xa0 [ 284.129086][ T7864] ? __dev_queue_xmit+0x275/0x3630 [ 284.134294][ T7864] ? __dev_queue_xmit+0x1bc2/0x3630 [ 284.139576][ T7864] ? __dev_queue_xmit+0x275/0x3630 [ 284.144783][ T7864] ? ref_tracker_free+0x686/0x830 [ 284.149943][ T7864] netlink_rcv_skb+0x235/0x4c0 [ 284.154735][ T7864] ? rtnetlink_bind+0x80/0x80 [ 284.159512][ T7864] ? netlink_ack+0x1160/0x1160 [ 284.164397][ T7864] ? __lock_acquire+0x7d80/0x7d80 [ 284.169626][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.174962][ T7864] netlink_unicast+0x7b1/0x930 [ 284.179842][ T7864] netlink_sendmsg+0x8d0/0xbf0 [ 284.184649][ T7864] ? netlink_getsockopt+0x590/0x590 [ 284.189914][ T7864] ? aa_sock_msg_perm+0x94/0x150 [ 284.194888][ T7864] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.200256][ T7864] ? security_socket_sendmsg+0x80/0xa0 [ 284.205732][ T7864] ? netlink_getsockopt+0x590/0x590 [ 284.212346][ T7864] ____sys_sendmsg+0x61b/0x980 [ 284.217158][ T7864] ? __asan_memset+0x22/0x40 [ 284.222126][ T7864] ? __sys_sendmsg_sock+0x30/0x30 [ 284.227179][ T7864] ? __import_iovec+0x5f2/0x850 [ 284.232141][ T7864] ? import_iovec+0x73/0xa0 [ 284.236689][ T7864] ___sys_sendmsg+0x2a6/0x360 [ 284.241682][ T7864] ? __sys_sendmsg+0x2b0/0x2b0 [ 284.246628][ T7864] __sys_sendmmsg+0x2ca/0x510 [ 284.251670][ T7864] ? __ia32_sys_sendmsg+0x90/0x90 [ 284.256733][ T7864] ? __ia32_sys_get_robust_list+0x110/0x110 [ 284.262864][ T7864] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.268873][ T7864] ? lock_chain_count+0x20/0x20 [ 284.273865][ T7864] __x64_sys_sendmmsg+0xa0/0xb0 [ 284.278748][ T7864] do_syscall_64+0x55/0xb0 [ 284.283489][ T7864] ? clear_bhb_loop+0x40/0x90 [ 284.288181][ T7864] ? clear_bhb_loop+0x40/0x90 [ 284.292925][ T7864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.298848][ T7864] RIP: 0033:0x7f047919ce59 [ 284.303364][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.324504][ T7864] RSP: 002b:00007f0479f73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.333152][ T7864] RAX: ffffffffffffffda RBX: 00007f0479415fa0 RCX: 00007f047919ce59 [ 284.341266][ T7864] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 284.349443][ T7864] RBP: 00007f0479232e6f R08: 0000000000000000 R09: 0000000000000000 [ 284.357457][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.365548][ T7864] R13: 00007f0479416038 R14: 00007f0479415fa0 R15: 00007ffc2a35f5f8 [ 284.373619][ T7864] [ 284.376664][ T7864] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.384029][ T7864] CPU: 1 PID: 7864 Comm: syz.3.596 Not tainted syzkaller #0 [ 284.393151][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.403237][ T7864] Call Trace: [ 284.406722][ T7864] [ 284.409665][ T7864] dump_stack_lvl+0x18c/0x250 [ 284.414404][ T7864] ? show_regs_print_info+0x20/0x20 [ 284.419636][ T7864] ? load_image+0x420/0x420 [ 284.424174][ T7864] panic+0x2ca/0x720 [ 284.428117][ T7864] ? bpf_jit_dump+0xd0/0xd0 [ 284.432679][ T7864] __warn+0x2e0/0x470 [ 284.436689][ T7864] ? u32_change+0x1ce8/0x2690 [ 284.441399][ T7864] ? u32_change+0x1ce8/0x2690 [ 284.446103][ T7864] report_bug+0x2be/0x4f0 [ 284.450455][ T7864] ? u32_change+0x1ce8/0x2690 [ 284.455153][ T7864] ? u32_change+0x1ce8/0x2690 [ 284.459863][ T7864] ? u32_change+0x1cea/0x2690 [ 284.464606][ T7864] handle_bug+0xcf/0x120 [ 284.468934][ T7864] exc_invalid_op+0x1a/0x50 [ 284.473643][ T7864] asm_exc_invalid_op+0x1a/0x20 [ 284.478536][ T7864] RIP: 0010:u32_change+0x1ce8/0x2690 [ 284.483871][ T7864] Code: f8 eb 59 e8 1a 49 da f8 c6 05 d3 ed c8 05 01 b9 10 00 00 00 48 c7 c7 00 8e c7 8b 4c 89 fe 48 c7 c2 80 8e c7 8b e8 18 22 a4 f8 <0f> 0b e9 1f f0 ff ff e8 ec 48 da f8 eb 24 e8 e5 48 da f8 c6 05 63 [ 284.503508][ T7864] RSP: 0018:ffffc90003676d60 EFLAGS: 00010246 [ 284.509619][ T7864] RAX: fd542a7a36307900 RBX: ffff88805dbd4400 RCX: 0000000000080000 [ 284.517618][ T7864] RDX: ffffc9000d5ca000 RSI: 0000000000006bed RDI: 0000000000006bee [ 284.525624][ T7864] RBP: ffffc90003676ef8 R08: ffffc90003676967 R09: 1ffff920006ced2c [ 284.533668][ T7864] R10: dffffc0000000000 R11: fffff520006ced2d R12: 1ffff920006cedbc [ 284.541692][ T7864] R13: ffff888030dde8e8 R14: ffff888030c9bb80 R15: 0000000000000020 [ 284.549702][ T7864] ? u32_get+0x370/0x370 [ 284.554005][ T7864] tc_new_tfilter+0x1109/0x1820 [ 284.558921][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.564953][ T7864] ? rcu_read_unlock+0x8c/0xa0 [ 284.569927][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.576025][ T7864] ? tcf_proto_signal_destroying+0x240/0x240 [ 284.582027][ T7864] rtnetlink_rcv_msg+0x892/0xf90 [ 284.586990][ T7864] ? rtnetlink_rcv_msg+0x220/0xf90 [ 284.592154][ T7864] ? rtnetlink_bind+0x80/0x80 [ 284.596892][ T7864] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.602933][ T7864] ? lock_chain_count+0x20/0x20 [ 284.607905][ T7864] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.613312][ T7864] ? lockdep_hardirqs_on+0x98/0x150 [ 284.618636][ T7864] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.624072][ T7864] ? _local_bh_enable+0xa0/0xa0 [ 284.628967][ T7864] ? __dev_queue_xmit+0x275/0x3630 [ 284.634162][ T7864] ? __dev_queue_xmit+0x1bc2/0x3630 [ 284.639405][ T7864] ? __dev_queue_xmit+0x275/0x3630 [ 284.644676][ T7864] ? ref_tracker_free+0x686/0x830 [ 284.649745][ T7864] netlink_rcv_skb+0x235/0x4c0 [ 284.654564][ T7864] ? rtnetlink_bind+0x80/0x80 [ 284.659290][ T7864] ? netlink_ack+0x1160/0x1160 [ 284.664121][ T7864] ? __lock_acquire+0x7d80/0x7d80 [ 284.669211][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.674534][ T7864] netlink_unicast+0x7b1/0x930 [ 284.679331][ T7864] netlink_sendmsg+0x8d0/0xbf0 [ 284.684228][ T7864] ? netlink_getsockopt+0x590/0x590 [ 284.689447][ T7864] ? aa_sock_msg_perm+0x94/0x150 [ 284.694410][ T7864] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.699731][ T7864] ? security_socket_sendmsg+0x80/0xa0 [ 284.705317][ T7864] ? netlink_getsockopt+0x590/0x590 [ 284.710568][ T7864] ____sys_sendmsg+0x61b/0x980 [ 284.715403][ T7864] ? __asan_memset+0x22/0x40 [ 284.720200][ T7864] ? __sys_sendmsg_sock+0x30/0x30 [ 284.725270][ T7864] ? __import_iovec+0x5f2/0x850 [ 284.730249][ T7864] ? import_iovec+0x73/0xa0 [ 284.734827][ T7864] ___sys_sendmsg+0x2a6/0x360 [ 284.739533][ T7864] ? __sys_sendmsg+0x2b0/0x2b0 [ 284.744355][ T7864] __sys_sendmmsg+0x2ca/0x510 [ 284.749071][ T7864] ? __ia32_sys_sendmsg+0x90/0x90 [ 284.754118][ T7864] ? __ia32_sys_get_robust_list+0x110/0x110 [ 284.760036][ T7864] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.766032][ T7864] ? lock_chain_count+0x20/0x20 [ 284.770900][ T7864] __x64_sys_sendmmsg+0xa0/0xb0 [ 284.775787][ T7864] do_syscall_64+0x55/0xb0 [ 284.780234][ T7864] ? clear_bhb_loop+0x40/0x90 [ 284.784973][ T7864] ? clear_bhb_loop+0x40/0x90 [ 284.789665][ T7864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.795581][ T7864] RIP: 0033:0x7f047919ce59 [ 284.800181][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.821814][ T7864] RSP: 002b:00007f0479f73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.830386][ T7864] RAX: ffffffffffffffda RBX: 00007f0479415fa0 RCX: 00007f047919ce59 [ 284.838416][ T7864] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 284.846421][ T7864] RBP: 00007f0479232e6f R08: 0000000000000000 R09: 0000000000000000 [ 284.854426][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.862436][ T7864] R13: 00007f0479416038 R14: 00007f0479415fa0 R15: 00007ffc2a35f5f8 [ 284.870453][ T7864] [ 284.874098][ T7864] Kernel Offset: disabled [ 284.878614][ T7864] Rebooting in 86400 seconds..