last executing test programs: 3m57.907937051s ago: executing program 4 (id=5): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x280000, 0x4, 0xe}, 0x18) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x20) getpeername$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getuid() mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000280)={[{@xattr}, {@name={'name', 0x3d, '@\'[,&9+*#'}}, {@subsystem='cpuacct'}, {@clone_children}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '$$-)'}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, 0x0, 0x4000) r2 = socket$inet6(0xa, 0x6, 0x400) r3 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r3, 0x1) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000580)=""/250, &(0x7f0000000680)=0xfa) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, 0x0, &(0x7f0000000700)) mount$overlay(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x800000, &(0x7f00000007c0)={[{@metacopy_on}, {@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}]}) r4 = open(&(0x7f0000000880)='./file0/file0\x00', 0x201000, 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x50, r4, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000008c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0xa, 0x1b, 0x0, 0x4, 0x0, 0x0, {0x0, r7}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000940)={'wg0\x00', @ifru_settings={0x7, 0x7f, @raw_hdlc=&(0x7f0000000900)={0x8, 0x4}}}) write$FUSE_INIT(r4, &(0x7f0000000980)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xe3, 0x1000, 0x7, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x4, 0x1ff}}, 0x50) syz_open_dev$evdev(&(0x7f0000000a00), 0x8, 0xc00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x10800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000a80)=0x4) connect$caif(r4, &(0x7f0000000ac0), 0x18) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000b40)={0x2, &(0x7f0000000b00)=[{0x4, 0x18}, {0x76, 0x5}]}) 3m53.977708944s ago: executing program 4 (id=15): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) poll(&(0x7f0000000100), 0x0, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r7 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r8 = dup(r7) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r8, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9af9f0d288d9ae0600268374f470670f5cc3f30f1ec9821f08baa000b000ee8fc9e00274000f01cfb830010f00d0", 0x2e}], 0x1, 0x22, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r9 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000600), 0xfec8) 3m48.666601335s ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000002340)=""/4096, 0x1000, 0x80) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x0, 0xfffffffe}}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fanotify_init(0xf00, 0x40000) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3m46.831082235s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0xbfff, 0x0, 0x5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e320"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffff8, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x6, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6, 0xffffffffffffffff]}, &(0x7f0000000000)=0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) setrlimit(0xd, &(0x7f00000000c0)={0x40, 0x1}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x40, 0x17, 0x0, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m31.380105878s ago: executing program 32 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0xbfff, 0x0, 0x5) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e320"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffff8, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x6, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6, 0xffffffffffffffff]}, &(0x7f0000000000)=0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) setrlimit(0xd, &(0x7f00000000c0)={0x40, 0x1}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x40, 0x17, 0x0, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m9.864378766s ago: executing program 0 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) write$UHID_INPUT(r6, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m8.3444699s ago: executing program 0 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ee, &(0x7f0000000300)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x81, 0x200000000000008, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3m7.164428784s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000400)={{&(0x7f0000feb000/0x13000)=nil, 0x13000}, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x2, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x2b, 0x1, 0x0) listen(r8, 0x6) 3m5.487938615s ago: executing program 0 (id=78): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x26}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2c, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8000000000000000, 0x8005, 0x0, 0x0, 0x6, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035d47c6780820d1cbf704000000cf335263bd9bffbcc2542ded71078259ca171ce1a311ef54ec32d71e14ef3d0d77e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3, 0xffffffffffffff80]}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x4c20068d, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x45ed, 0xfffffffd, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@end]}}}}}) 3m1.693305239s ago: executing program 0 (id=81): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x32, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$unix(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)='~', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) io_uring_enter(r0, 0x3516, 0x0, 0x20, 0x0, 0x0) 3m0.609151868s ago: executing program 0 (id=83): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffa) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000800)={0x5838, 0x2}) shmctl$IPC_RMID(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(r7, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) 3m0.139014618s ago: executing program 33 (id=83): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffa) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000800)={0x5838, 0x2}) shmctl$IPC_RMID(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(r7, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) 4.731378656s ago: executing program 2 (id=453): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.393379076s ago: executing program 2 (id=455): unshare(0x28020600) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 4.195133121s ago: executing program 2 (id=457): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 3.663457449s ago: executing program 1 (id=460): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x320c8cc, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$eJzslc+q00AUxr+ZxKT3Ij6AGxde8LowbXJB3Fy4d+PKheCfiwvBYtNSTa20XdiCaJ/AvTsXPoaiWxf6BlIF0U3dqOuRyUwmQ0mrMS0Knh90+k3m5MyZM5MzIAjiv+Xjhx8z8X3/cw3AcezA18+/OLkNt+zf174+fH3p4tGTm8/f+LNgq8inEL8/vwvg1aGDd+ZdIWynO/r/KrjR18BxVusjMARa3wLHda1jMNzQ+o6l+9I+CNrdJA5u95OWFA3ZhLKJ2t2EuYvxzacMLSs+Zo0Px5O7zSSJBxsUv8rf/JBj38SHmj1+ASrahpW/EByh1ntguGJs/Sw3KiXW+k+6+fqdlev3UHHZnwDkT9oFNrzqFJnw5FTLbbKFFgwBbF17H52o7ifb87KvO0iFU/p1rtIiT8XmP4AKAu7aHAq/4CT4q85PdfH2pRZ8pfGLA7V/JtRHql9u0oMlQ15JPzrzpj6JZwxnrPqpSsnT9Kqpj3r368Px5Fy31+zEnfheFO2db2wDiOppIVLtsvLnA1tpfdrO/RfeSRKPeXjQHI0GoWpNP1JtUcXlcDGfcuyexjHZl9XUW/D7zdIs/cmvgz1WvV27XConBEEQ/wCnwNKanNblTOjbxAwIEV3+y3ESBEEQBEEQBEEQBPHn/AwAAP//W8NQxQ==") open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) 3.378056051s ago: executing program 2 (id=464): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_EXPIRES={0x8, 0x17, 0x1}]}, 0x24}}, 0x0) 3.313362993s ago: executing program 1 (id=465): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c30816040102030109025000010000000009041f0000ff0100000a2401", @ANYRES8=r0], 0x0) 3.17031697s ago: executing program 2 (id=466): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x402, 0x4d, 0x4b, 0x3a, 0x40, 0x5cc, 0x3352, 0xb57e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x7, 0xa0, 0x0, [{{0x9, 0x4, 0x90, 0x3, 0x0, 0x8e, 0xc9, 0x25, 0x15}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000280)=ANY=[], 0x0) 3.018885995s ago: executing program 6 (id=467): mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 2.849728992s ago: executing program 5 (id=469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x20000000) 2.820465208s ago: executing program 6 (id=470): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x4000000000000004, &(0x7f0000000140)) 2.577612075s ago: executing program 1 (id=472): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x905, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x815, 0xfe, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "18"}, @global=@item_4={0x3, 0x1, 0x9}]}}, 0x0}, 0x0) 2.577266623s ago: executing program 6 (id=473): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 2.537082927s ago: executing program 5 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x10, 0x2f, 0x0, @empty, @mcast2, {[], {0x2000, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xa0, 0xff00}}}}}}}}, 0x0) 2.461938552s ago: executing program 3 (id=475): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.313345315s ago: executing program 5 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.313143384s ago: executing program 6 (id=477): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) 2.313066908s ago: executing program 3 (id=478): creat(&(0x7f00000001c0)='./bus\x00', 0x77) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) finit_module(r0, 0x0, 0x0) 2.246248781s ago: executing program 5 (id=479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) 2.216930331s ago: executing program 6 (id=480): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b68090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 2.116692943s ago: executing program 3 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ee, &(0x7f0000000300)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x81, 0x200000000000008, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1.052314649s ago: executing program 5 (id=482): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x4007, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0xfffffffd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r1, r6}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getrusage(0x1, &(0x7f00000005c0)) sendmmsg$inet(r7, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.051276634s ago: executing program 1 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.029241335s ago: executing program 3 (id=484): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, r1}) 849.240636ms ago: executing program 3 (id=485): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0xfffffffffffffffe, 0x0, 0x12, 0x1e, 0x11, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4ec1f6d46c7f697f20000000800", [0x1]}}) 823.217452ms ago: executing program 6 (id=486): syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5, 0x1d3, &(0x7f0000000d80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 782.715448ms ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 125.054892ms ago: executing program 5 (id=488): unshare(0x28000600) r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7c, 0x1000002}, 0x20) 97.732157ms ago: executing program 3 (id=489): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022050000009a6ca54f"], 0x0}, 0x0) 216.772µs ago: executing program 1 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setuid(0xee01) 0s ago: executing program 2 (id=491): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x23, 0x8, {0x8, 0x6, "417680d99ae4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 73.500613][ T5816] cgroup: Unknown subsys name 'net' [ 73.648666][ T5816] cgroup: Unknown subsys name 'cpuset' [ 73.658082][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.171447][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.390736][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.400890][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.408660][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.419587][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.431769][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.438788][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.439396][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.455723][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.456228][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.463939][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.470844][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.486839][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.488045][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.494095][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.502611][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.510038][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.517775][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.525716][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.537008][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.537346][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.551792][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.552020][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.566156][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.566421][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.581742][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.281755][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 80.436945][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 80.472008][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 80.488129][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 80.503270][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.604526][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.612415][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.619937][ T5826] bridge_slave_0: entered allmulticast mode [ 80.627515][ T5826] bridge_slave_0: entered promiscuous mode [ 80.690688][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.698204][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.705454][ T5826] bridge_slave_1: entered allmulticast mode [ 80.712532][ T5826] bridge_slave_1: entered promiscuous mode [ 80.836218][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.896281][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.917997][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.925934][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.933182][ T5839] bridge_slave_0: entered allmulticast mode [ 80.942682][ T5839] bridge_slave_0: entered promiscuous mode [ 80.951238][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.958622][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.966028][ T5829] bridge_slave_0: entered allmulticast mode [ 80.973145][ T5829] bridge_slave_0: entered promiscuous mode [ 80.980774][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.988010][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.995202][ T5837] bridge_slave_0: entered allmulticast mode [ 81.002333][ T5837] bridge_slave_0: entered promiscuous mode [ 81.020688][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.027933][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.035086][ T5827] bridge_slave_0: entered allmulticast mode [ 81.042613][ T5827] bridge_slave_0: entered promiscuous mode [ 81.050467][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.057880][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.065111][ T5839] bridge_slave_1: entered allmulticast mode [ 81.072668][ T5839] bridge_slave_1: entered promiscuous mode [ 81.079657][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.087310][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.094462][ T5829] bridge_slave_1: entered allmulticast mode [ 81.102041][ T5829] bridge_slave_1: entered promiscuous mode [ 81.109158][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.116368][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.123547][ T5837] bridge_slave_1: entered allmulticast mode [ 81.131157][ T5837] bridge_slave_1: entered promiscuous mode [ 81.149796][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.157016][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.164933][ T5827] bridge_slave_1: entered allmulticast mode [ 81.174072][ T5827] bridge_slave_1: entered promiscuous mode [ 81.233519][ T5826] team0: Port device team_slave_0 added [ 81.285542][ T5826] team0: Port device team_slave_1 added [ 81.293897][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.306835][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.318777][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.330914][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.353956][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.365578][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.377164][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.388532][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.458671][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.466031][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.492129][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.555068][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.562467][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.589755][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.603634][ T5827] team0: Port device team_slave_0 added [ 81.609906][ T5835] Bluetooth: hci1: command tx timeout [ 81.609913][ T5846] Bluetooth: hci2: command tx timeout [ 81.610170][ T5834] Bluetooth: hci0: command tx timeout [ 81.616690][ T5835] Bluetooth: hci4: command tx timeout [ 81.625470][ T5839] team0: Port device team_slave_0 added [ 81.640294][ T5829] team0: Port device team_slave_0 added [ 81.647910][ T5837] team0: Port device team_slave_0 added [ 81.655791][ T5829] team0: Port device team_slave_1 added [ 81.670252][ T5827] team0: Port device team_slave_1 added [ 81.678166][ T5839] team0: Port device team_slave_1 added [ 81.685693][ T5835] Bluetooth: hci3: command tx timeout [ 81.695826][ T5837] team0: Port device team_slave_1 added [ 81.796577][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.803561][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.829878][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.908230][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.915241][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.942441][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.956248][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.963213][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.990510][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.005591][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.012538][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.039066][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.052374][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.060479][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.086974][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.119745][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.126774][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.153052][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.166615][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.173585][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.200094][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.212101][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.219273][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.246442][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.263661][ T5826] hsr_slave_0: entered promiscuous mode [ 82.270583][ T5826] hsr_slave_1: entered promiscuous mode [ 82.388793][ T5829] hsr_slave_0: entered promiscuous mode [ 82.395765][ T5829] hsr_slave_1: entered promiscuous mode [ 82.402126][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 82.408518][ T5829] Cannot create hsr debugfs directory [ 82.465074][ T5837] hsr_slave_0: entered promiscuous mode [ 82.472201][ T5837] hsr_slave_1: entered promiscuous mode [ 82.479015][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 82.484938][ T5837] Cannot create hsr debugfs directory [ 82.501474][ T5827] hsr_slave_0: entered promiscuous mode [ 82.508174][ T5827] hsr_slave_1: entered promiscuous mode [ 82.514305][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 82.520105][ T5827] Cannot create hsr debugfs directory [ 82.531175][ T5839] hsr_slave_0: entered promiscuous mode [ 82.538198][ T5839] hsr_slave_1: entered promiscuous mode [ 82.544366][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 82.550457][ T5839] Cannot create hsr debugfs directory [ 83.138503][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.156818][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.168205][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.194398][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.268519][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.283762][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.295054][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.314030][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.431599][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.448634][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.464334][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.493396][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.578883][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.601152][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.613532][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.653362][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.685566][ T5834] Bluetooth: hci2: command tx timeout [ 83.691494][ T5846] Bluetooth: hci1: command tx timeout [ 83.696551][ T5841] Bluetooth: hci4: command tx timeout [ 83.698410][ T5835] Bluetooth: hci0: command tx timeout [ 83.765260][ T5835] Bluetooth: hci3: command tx timeout [ 83.786235][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.800979][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.818847][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.835021][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.848062][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.897075][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.950262][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.957532][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.981662][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.004759][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.011925][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.081083][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.128920][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.136163][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.154080][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.175535][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.182670][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.202120][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.273190][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.298522][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.305717][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.323595][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.381295][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.388562][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.408828][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.459923][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.493326][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.518844][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.525986][ T5027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.534873][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.542144][ T5027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.600732][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.608069][ T5027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.620463][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.627714][ T5027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.713038][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.820204][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.831894][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.893135][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.079687][ T5826] veth0_vlan: entered promiscuous mode [ 85.173481][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.186853][ T5826] veth1_vlan: entered promiscuous mode [ 85.216993][ T5829] veth0_vlan: entered promiscuous mode [ 85.261108][ T5829] veth1_vlan: entered promiscuous mode [ 85.284502][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.294952][ T5826] veth0_macvtap: entered promiscuous mode [ 85.322382][ T5826] veth1_macvtap: entered promiscuous mode [ 85.334900][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.358896][ T5827] veth0_vlan: entered promiscuous mode [ 85.414889][ T5827] veth1_vlan: entered promiscuous mode [ 85.429096][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.459175][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.496659][ T5829] veth0_macvtap: entered promiscuous mode [ 85.513432][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.542593][ T5829] veth1_macvtap: entered promiscuous mode [ 85.551737][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.564256][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588833][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.701854][ T5837] veth0_vlan: entered promiscuous mode [ 85.741496][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.764780][ T5827] veth0_macvtap: entered promiscuous mode [ 85.770937][ T5835] Bluetooth: hci0: command tx timeout [ 85.770962][ T5841] Bluetooth: hci1: command tx timeout [ 85.776867][ T5834] Bluetooth: hci4: command tx timeout [ 85.783676][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.787695][ T5846] Bluetooth: hci2: command tx timeout [ 85.812154][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.819879][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.845670][ T5841] Bluetooth: hci3: command tx timeout [ 85.857283][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866415][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.881020][ T5837] veth1_vlan: entered promiscuous mode [ 85.889996][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.899139][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.908682][ T5827] veth1_macvtap: entered promiscuous mode [ 85.916907][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.931895][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.987581][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.019179][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.047664][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.081718][ T5837] veth0_macvtap: entered promiscuous mode [ 86.136362][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.183486][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.196097][ T5837] veth1_macvtap: entered promiscuous mode [ 86.203430][ T5839] veth0_vlan: entered promiscuous mode [ 86.212309][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.225328][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.233248][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.268965][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.299642][ T5839] veth1_vlan: entered promiscuous mode [ 86.437738][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.450438][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.470500][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.028566][ T9] cfg80211: failed to load regulatory.db [ 87.096783][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.110967][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132645][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.265371][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.274608][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.340530][ T5839] veth0_macvtap: entered promiscuous mode [ 87.388277][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.583768][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.613923][ T5839] veth1_macvtap: entered promiscuous mode [ 87.624886][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.905550][ T5846] Bluetooth: hci2: command tx timeout [ 87.911206][ T5835] Bluetooth: hci0: command tx timeout [ 87.917205][ T5834] Bluetooth: hci4: command tx timeout [ 87.922784][ T5841] Bluetooth: hci1: command tx timeout [ 87.935278][ T5841] Bluetooth: hci3: command tx timeout [ 88.154917][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.202335][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.241343][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.342794][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.408891][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.447599][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.460041][ T5968] loop1: detected capacity change from 0 to 16 [ 88.471359][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.481341][ T5027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.499417][ T5027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.518109][ T5968] erofs (device loop1): mounted with root inode @ nid 36. [ 88.634536][ T5970] loop3: detected capacity change from 0 to 2048 [ 88.766874][ T5970] ======================================================= [ 88.766874][ T5970] WARNING: The mand mount option has been deprecated and [ 88.766874][ T5970] and is ignored by this kernel. Remove the mand [ 88.766874][ T5970] option from the mount to silence this warning. [ 88.766874][ T5970] ======================================================= [ 88.829875][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 88.921279][ T5974] syz.1.7: attempt to access beyond end of device [ 88.921279][ T5974] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 88.935785][ T5974] erofs (device loop1): read error -5 @ 43 of nid 36 [ 89.397400][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.422274][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.462866][ T5970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.527103][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.534989][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.547779][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.560701][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.775720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.760286][ T5982] IPVS: length: 250 != 8 [ 90.809252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.876111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.876774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.517736][ T5869] IPVS: starting estimator thread 0... [ 91.597703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.615904][ T5994] IPVS: using max 30 ests per chain, 72000 per kthread [ 91.616722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.781349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.927361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.054196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.054237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.561398][ T6003] pim6reg: entered allmulticast mode [ 92.884710][ T6009] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 92.884832][ T6009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9'. [ 93.119329][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.119344][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.119361][ T6005] netlink: 'syz.0.1': attribute type 20 has an invalid length. [ 93.485694][ T6016] loop3: detected capacity change from 0 to 512 [ 93.670228][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.670323][ T6016] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.794615][ T6030] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 98.062996][ T6043] loop0: detected capacity change from 0 to 32768 [ 98.119043][ T6043] [ 98.119043][ T6043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.119043][ T6043] [ 99.268234][ T6049] ERROR: (device loop0): diWrite: ixpxd invalid [ 99.268234][ T6049] [ 99.602864][ T6049] ERROR: (device loop0): txCommit: [ 99.602864][ T6049] [ 99.704434][ T6056] pim6reg: entered allmulticast mode [ 99.731541][ T5844] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.795073][ T6056] pim6reg: left allmulticast mode [ 99.853537][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.911019][ T5844] usb 1-1: device descriptor read/64, error -71 [ 101.599425][ T5837] [ 101.599425][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.599425][ T5837] [ 101.631098][ T5837] [ 101.631098][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.631098][ T5837] [ 102.000986][ T6069] loop3: detected capacity change from 0 to 512 [ 102.070198][ T6069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 102.078981][ T6069] System zones: 1-12 [ 102.107249][ T6069] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.21: Directory hole found for htree index block 0 [ 102.123253][ T6069] EXT4-fs (loop3): Remounting filesystem read-only [ 102.130899][ T6069] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 102.139868][ T6069] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 102.159364][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.367075][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.389370][ T6074] Zero length message leads to an empty skb [ 103.745680][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.808483][ T6081] add_ndev_hash(lo) on ffff88807e1cc000 done [ 103.817320][ T6081] lo speed is unknown, defaulting to 1000 [ 103.824042][ T6081] lo speed is unknown, defaulting to 1000 [ 103.849902][ T6081] lo speed is unknown, defaulting to 1000 [ 103.889641][ T6081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.966870][ T6081] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.314485][ T6081] lo speed is unknown, defaulting to 1000 [ 104.322449][ T6081] lo speed is unknown, defaulting to 1000 [ 104.329639][ T6081] lo speed is unknown, defaulting to 1000 [ 104.337403][ T6081] lo speed is unknown, defaulting to 1000 [ 104.346299][ T6081] lo speed is unknown, defaulting to 1000 [ 104.371430][ T6083] loop0: detected capacity change from 0 to 128 [ 105.716077][ T6093] affs: No valid root block on device nullb0 [ 105.835280][ T5907] IPVS: starting estimator thread 0... [ 105.925431][ T6094] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.083158][ T9] usb 3-1: device descriptor read/64, error -110 [ 110.657040][ T6119] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.729264][ T6121] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 112.266162][ T6118] overlayfs: failed to clone upperpath [ 112.333074][ T6121] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.395405][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 112.838674][ T6133] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.951250][ T6132] loop3: detected capacity change from 0 to 4096 [ 114.126012][ T6142] loop2: detected capacity change from 0 to 1024 [ 114.145426][ T6007] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.346366][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 114.389272][ T6007] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.866795][ T6144] afs: Bad value for 'source' [ 114.879305][ T6007] usb 5-1: config 0 has no interface number 0 [ 114.908328][ T6007] usb 5-1: config 0 interface 184 has no altsetting 0 [ 115.313250][ T6007] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.324464][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.333796][ T6007] usb 5-1: Product: syz [ 115.345294][ T6007] usb 5-1: Manufacturer: syz [ 115.365853][ T6007] usb 5-1: SerialNumber: syz [ 115.389660][ T6148] ntfs3: Cannot use different iocharset when remounting! [ 115.423169][ T6007] usb 5-1: config 0 descriptor?? [ 115.491013][ T6007] smsc75xx v1.0.0 [ 115.553810][ T2999] hfsplus: b-tree write err: -5, ino 4 [ 115.810976][ T6153] loop2: detected capacity change from 0 to 64 [ 115.950345][ T6154] binfmt_misc: register: failed to install interpreter file ./file0 [ 115.972978][ T6154] netlink: 80 bytes leftover after parsing attributes in process `syz.2.40'. [ 116.040200][ T6007] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 116.653072][ T6007] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 117.049472][ T6007] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 117.147692][ T6007] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 117.832934][ T6160] loop3: detected capacity change from 0 to 1024 [ 118.532892][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.553522][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.563843][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.578954][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.589326][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.740677][ T6172] loop2: detected capacity change from 0 to 512 [ 118.793851][ T6172] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.901011][ T6172] EXT4-fs error (device loop2): __ext4_fill_super:5553: inode #2: comm syz.2.43: casefold flag without casefold feature [ 119.056390][ T6172] EXT4-fs (loop2): get root inode failed [ 119.061658][ T6007] usb 5-1: USB disconnect, device number 2 [ 119.078953][ T6167] lo speed is unknown, defaulting to 1000 [ 119.246807][ T6172] EXT4-fs (loop2): mount failed [ 120.039000][ T6183] process 'syz.2.43' launched '/dev/fd/9/./file0' with NULL argv: empty string added [ 120.652001][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.728123][ T5841] Bluetooth: hci5: command tx timeout [ 121.010775][ T6195] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 121.037976][ T6195] CIFS mount error: No usable UNC path provided in device string! [ 121.037976][ T6195] [ 121.048920][ T6195] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 122.028120][ T6196] overlayfs: missing 'lowerdir' [ 122.844698][ T5841] Bluetooth: hci5: command tx timeout [ 123.031425][ T6199] loop0: detected capacity change from 0 to 512 [ 123.726125][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.48: inode has both inline data and extents flags [ 123.778362][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.821022][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.48: couldn't read orphan inode 15 (err -117) [ 123.848728][ T6214] syz_tun: entered allmulticast mode [ 123.863838][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.041732][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.330019][ T30] audit: type=1804 audit(1765955831.561:2): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.48" name="/newroot/10/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 124.465053][ T6199] Invalid ELF header magic: != ELF [ 124.503885][ T30] audit: type=1800 audit(1765955831.561:3): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 124.925674][ T5841] Bluetooth: hci5: command tx timeout [ 125.065380][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.203556][ T6226] loop3: detected capacity change from 0 to 128 [ 125.893467][ T6235] loop2: detected capacity change from 0 to 2048 [ 125.904580][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.986522][ T6235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.324161][ T5841] Bluetooth: hci5: command tx timeout [ 127.384607][ T30] audit: type=1326 audit(1765955834.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 127.424752][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 127.552361][ T6244] loop3: detected capacity change from 0 to 128 [ 127.568635][ T6244] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 127.591703][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.354058][ T30] audit: type=1326 audit(1765955834.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 130.382810][ T30] audit: type=1326 audit(1765955834.211:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 130.408987][ T30] audit: type=1326 audit(1765955834.211:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8998d8f783 code=0x7ffc0000 [ 130.431132][ T30] audit: type=1326 audit(1765955834.231:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8998d8e1ff code=0x7ffc0000 [ 130.459791][ T6246] fuse: Bad value for 'fd' [ 130.514053][ T30] audit: type=1326 audit(1765955834.231:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8998d8f7d7 code=0x7ffc0000 [ 130.540255][ T30] audit: type=1326 audit(1765955834.251:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8998d8df90 code=0x7ffc0000 [ 130.573128][ T30] audit: type=1326 audit(1765955834.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8998d8f34b code=0x7ffc0000 [ 130.595661][ T30] audit: type=1326 audit(1765955834.251:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8998d8f34b code=0x7ffc0000 [ 130.595709][ T30] audit: type=1326 audit(1765955834.251:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8998dc2005 code=0x7ffc0000 [ 130.595743][ T30] audit: type=1326 audit(1765955834.251:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8998d8f34b code=0x7ffc0000 [ 130.651164][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 130.672516][ T6246] bridge_slave_0: left allmulticast mode [ 130.672544][ T6246] bridge_slave_0: left promiscuous mode [ 130.673416][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.473310][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 131.792486][ T6260] add_ndev_hash(lo) on ffff8880795a0000 done [ 131.798933][ T6260] siw: device registration error -23 [ 132.981907][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.007955][ T36] bridge_slave_1: left allmulticast mode [ 134.049559][ T36] bridge_slave_1: left promiscuous mode [ 134.069247][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.470832][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.872178][ T57] IPVS: starting estimator thread 0... [ 134.923349][ T6284] comedi comedi2: board detection failed [ 135.066036][ T6287] IPVS: using max 25 ests per chain, 60000 per kthread [ 136.157447][ T36] bridge_slave_0: left allmulticast mode [ 136.176637][ T36] bridge_slave_0: left promiscuous mode [ 136.182629][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.254857][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.266707][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.276645][ T36] bond0 (unregistering): Released all slaves [ 140.050272][ T5920] lo speed is unknown, defaulting to 1000 [ 140.056541][ T5920] syz0: Port: 1 Link DOWN [ 140.143326][ T6341] loop2: detected capacity change from 0 to 1024 [ 140.286994][ T6341] ext4: Unknown parameter 'dont_hash' [ 143.073844][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.101970][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.153105][ T6368] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.209843][ T6167] bridge_slave_0: entered allmulticast mode [ 143.226986][ T6368] loop0: detected capacity change from 0 to 512 [ 143.392214][ T6167] bridge_slave_0: entered promiscuous mode [ 143.432681][ T6368] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.78: bg 0: block 393: padding at end of block bitmap is not set [ 143.458561][ T6368] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 143.478343][ T6368] EXT4-fs (loop0): 2 truncates cleaned up [ 143.493550][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.707694][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.758846][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.310644][ T6374] netlink: 72 bytes leftover after parsing attributes in process `syz.2.79'. [ 145.157489][ T6167] bridge_slave_1: entered allmulticast mode [ 146.202647][ T6167] bridge_slave_1: entered promiscuous mode [ 146.778362][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.850727][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.120406][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.375881][ T6203] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 147.643098][ T36] hsr_slave_0: left promiscuous mode [ 147.649735][ T36] hsr_slave_1: left promiscuous mode [ 147.657842][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.718091][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.766127][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.782672][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.796154][ T6389] loop2: detected capacity change from 0 to 64 [ 147.822966][ T36] veth1_macvtap: left promiscuous mode [ 147.829603][ T36] veth0_macvtap: left promiscuous mode [ 147.837839][ T36] veth1_vlan: left promiscuous mode [ 147.846765][ T36] veth0_vlan: left promiscuous mode [ 147.866224][ T6203] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 147.895788][ T6203] usb 4-1: config 0 has no interface number 0 [ 147.915312][ T6203] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 147.951760][ T6203] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 147.999427][ T6203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.013957][ T6390] binfmt_misc: register: failed to install interpreter file ./file0 [ 148.047482][ T6203] usb 4-1: Product: syz [ 148.051683][ T6203] usb 4-1: Manufacturer: syz [ 148.057620][ T6203] usb 4-1: SerialNumber: syz [ 148.067990][ T6203] usb 4-1: config 0 descriptor?? [ 148.075983][ T6385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.086535][ T6203] ums-karma 4-1:0.46: USB Mass Storage device detected [ 148.198684][ T6203] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 148.305738][ T6385] loop3: detected capacity change from 0 to 64 [ 148.600738][ T6399] openvswitch: netlink: IP tunnel dst address not specified [ 149.974485][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.984818][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.996792][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.045704][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.055262][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.105558][ T6007] usb 4-1: USB disconnect, device number 2 [ 151.465007][ T36] team0 (unregistering): Port device team_slave_1 removed [ 151.513804][ T36] team0 (unregistering): Port device team_slave_0 removed [ 151.585522][ T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.755969][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 151.777610][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 151.788734][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.830983][ T37] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 151.845632][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.853749][ T37] usb 4-1: Product: syz [ 151.862821][ T37] usb 4-1: Manufacturer: syz [ 151.872282][ T37] usb 4-1: SerialNumber: syz [ 151.904699][ T37] usb 4-1: config 0 descriptor?? [ 151.928172][ T37] empeg 4-1:0.0: empeg converter detected [ 151.934250][ T37] usb 4-1: active config #0 != 1 ?? [ 152.021210][ T6390] netlink: 80 bytes leftover after parsing attributes in process `syz.2.80'. [ 152.105915][ T5834] Bluetooth: hci3: command tx timeout [ 153.414893][ T5950] usb 4-1: USB disconnect, device number 3 [ 153.489568][ T6167] team0: Port device team_slave_0 added [ 153.549285][ T6167] team0: Port device team_slave_1 added [ 154.435301][ T5834] Bluetooth: hci3: command tx timeout [ 154.525772][ T6403] lo speed is unknown, defaulting to 1000 [ 154.884241][ T6430] capability: warning: `syz.1.89' uses 32-bit capabilities (legacy support in use) [ 155.627538][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.654050][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.716050][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.854669][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.862331][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.912115][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.270360][ T6167] hsr_slave_0: entered promiscuous mode [ 156.279353][ T6167] hsr_slave_1: entered promiscuous mode [ 156.291361][ T6167] debugfs: 'hsr0' already exists in 'hsr' [ 156.297680][ T6167] Cannot create hsr debugfs directory [ 156.485336][ T5834] Bluetooth: hci3: command tx timeout [ 156.920318][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.034143][ T6449] loop2: detected capacity change from 0 to 256 [ 157.046679][ T6449] exfat: Deprecated parameter 'utf8' [ 157.052055][ T6449] exfat: Unexpected value for 'utf8' [ 158.085886][ T6456] loop3: detected capacity change from 0 to 512 [ 158.187589][ T6456] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 158.227124][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.240421][ T6456] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.539031][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.565331][ T5834] Bluetooth: hci3: command tx timeout [ 158.861809][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.020494][ T6470] mmap: syz.2.94 (6470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.032429][ T6403] chnl_net:caif_netlink_parms(): no params data found [ 159.800536][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.810133][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.975471][ T6466] loop2: detected capacity change from 0 to 4096 [ 161.183357][ T6486] kAFS: unable to lookup cell 'Þ({^ú@' [ 161.985588][ T6466] ntfs3(loop2): Primary boot: invalid index size -128. [ 162.060486][ T6466] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 162.079429][ T6491] loop3: detected capacity change from 0 to 512 [ 162.087154][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.135427][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.155213][ T6491] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 162.185542][ T6403] bridge_slave_0: entered allmulticast mode [ 162.207366][ T6403] bridge_slave_0: entered promiscuous mode [ 162.311778][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.328572][ T6491] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.99: iget: bogus i_mode (5) [ 162.355839][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.363139][ T6403] bridge_slave_1: entered allmulticast mode [ 162.403750][ T6491] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.99: couldn't read orphan inode 15 (err -117) [ 162.452067][ T6403] bridge_slave_1: entered promiscuous mode [ 162.477522][ T6491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.546658][ T6491] ext2 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.496250][ T6167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.551672][ T6167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.650356][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.919150][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.947407][ T6167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.056877][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.131546][ T6167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.532699][ T6516] xt_l2tp: v2 sid > 0xffff: 1114112 [ 165.188624][ T6403] team0: Port device team_slave_0 added [ 165.301822][ T6403] team0: Port device team_slave_1 added [ 165.307789][ T36] bridge_slave_1: left allmulticast mode [ 165.313474][ T36] bridge_slave_1: left promiscuous mode [ 165.330763][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.370350][ T36] bridge_slave_0: left allmulticast mode [ 165.867473][ T36] bridge_slave_0: left promiscuous mode [ 165.873381][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.918532][ T6534] ceph: No mds server is up or the cluster is laggy [ 165.927614][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 165.937585][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 167.497770][ T6549] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 167.902646][ T6547] 9p: Bad value for 'rfdno' [ 167.916209][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.421736][ T6557] ceph: No mds server is up or the cluster is laggy [ 168.428727][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 168.434827][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 168.468422][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.504439][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 168.544837][ T36] bond0 (unregistering): Released all slaves [ 168.579368][ T36] bond1 (unregistering): Released all slaves [ 169.631388][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.655693][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.704615][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.875125][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.883609][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.435303][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.913036][ T6403] hsr_slave_0: entered promiscuous mode [ 170.938436][ T6403] hsr_slave_1: entered promiscuous mode [ 170.959094][ T6403] debugfs: 'hsr0' already exists in 'hsr' [ 170.975258][ T6403] Cannot create hsr debugfs directory [ 171.173192][ T36] hsr_slave_0: left promiscuous mode [ 171.183760][ T36] hsr_slave_1: left promiscuous mode [ 171.190111][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.198795][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.211033][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.819879][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.011822][ T36] veth1_macvtap: left promiscuous mode [ 172.019069][ T36] veth0_macvtap: left promiscuous mode [ 172.024732][ T36] veth1_vlan: left promiscuous mode [ 172.133242][ T6593] loop2: detected capacity change from 0 to 1024 [ 172.145412][ T36] veth0_vlan: left promiscuous mode [ 172.580923][ T6598] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.670203][ T77] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.405964][ T6611] loop3: detected capacity change from 0 to 1024 [ 173.522841][ T6611] hfsplus: invalid file type 0120411 for inode 2 [ 173.551117][ T6611] hfsplus: failed to load root directory [ 174.645505][ T5834] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 174.754072][ T5986] hfsplus: b-tree write err: -5, ino 4 [ 174.802281][ T36] team0 (unregistering): Port device team_slave_1 removed [ 175.056458][ T36] team0 (unregistering): Port device team_slave_0 removed [ 177.033821][ T6625] vlan2: entered promiscuous mode [ 177.038953][ T6625] macvtap0: entered promiscuous mode [ 177.309593][ T6637] loop2: detected capacity change from 0 to 128 [ 177.356298][ T6637] EXT4-fs: Ignoring removed nobh option [ 177.497359][ T6637] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.551212][ T6637] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.630679][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.645437][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.657135][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.668367][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.688350][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.126607][ T6645] overlayfs: missing 'lowerdir' [ 178.397786][ T6649] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 179.307831][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.335784][ T6640] lo speed is unknown, defaulting to 1000 [ 180.515013][ T6667] loop3: detected capacity change from 0 to 256 [ 180.556413][ T6667] msdos: Bad value for 'gid' [ 180.561056][ T6667] msdos: Bad value for 'gid' [ 180.751674][ T6676] mkiss: ax0: crc mode is auto. [ 180.965782][ T5841] Bluetooth: hci4: command tx timeout [ 182.034984][ T6403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.050962][ T5841] Bluetooth: hci4: command tx timeout [ 183.489839][ T6403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.000243][ T6403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.706796][ T6709] loop2: detected capacity change from 0 to 40427 [ 184.706849][ T6403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.732971][ T6709] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.741782][ T6709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.762225][ T6709] F2FS-fs (loop2): invalid crc value [ 185.282393][ T5841] Bluetooth: hci4: command tx timeout [ 185.393480][ T6709] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.529547][ T6709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 185.536938][ T6709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.789310][ T6728] loop3: detected capacity change from 0 to 512 [ 185.796575][ T6728] EXT4-fs: Ignoring removed oldalloc option [ 187.133097][ T6728] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 187.365257][ T5841] Bluetooth: hci4: command tx timeout [ 187.367504][ T6640] chnl_net:caif_netlink_parms(): no params data found [ 189.675227][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 190.375121][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.437078][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.458418][ T6640] bridge_slave_0: entered allmulticast mode [ 190.481359][ T6640] bridge_slave_0: entered promiscuous mode [ 190.957528][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.000115][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.145919][ T6640] bridge_slave_1: entered allmulticast mode [ 191.165040][ T6640] bridge_slave_1: entered promiscuous mode [ 191.432605][ T6769] syz.3.139 (6769): drop_caches: 2 [ 191.978105][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.781195][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.107438][ T36] bridge_slave_1: left allmulticast mode [ 193.114405][ T36] bridge_slave_1: left promiscuous mode [ 193.129909][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.131112][ T6790] libceph: resolve '4..' (ret=-3): failed [ 194.336611][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357279][ T36] bridge_slave_0: left allmulticast mode [ 194.362960][ T36] bridge_slave_0: left promiscuous mode [ 194.493523][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.310186][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.344032][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.373569][ T36] bond0 (unregistering): Released all slaves [ 196.460936][ T6640] team0: Port device team_slave_0 added [ 196.483242][ T6804] batadv_slave_1: entered promiscuous mode [ 196.508509][ T6640] team0: Port device team_slave_1 added [ 196.575396][ T6803] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 196.587536][ T6803] netlink: 'syz.3.144': attribute type 2 has an invalid length. [ 196.607978][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.614953][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.729610][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.751294][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.763225][ T6811] binder: 6802:6811 ioctl c0d05604 2000000001c0 returned -22 [ 196.775690][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.811753][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.928446][ T36] hsr_slave_0: left promiscuous mode [ 196.934392][ T36] hsr_slave_1: left promiscuous mode [ 196.942541][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.957386][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.248558][ T36] team0 (unregistering): Port device team_slave_1 removed [ 197.309159][ T36] team0 (unregistering): Port device team_slave_0 removed [ 199.507106][ T6828] serio: Serial port ttyS3 [ 199.528066][ T6808] batadv_slave_1: left promiscuous mode [ 199.574230][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.077302][ T6832] ceph: No mds server is up or the cluster is laggy [ 200.144811][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.152458][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.264976][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.277391][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.577329][ T6640] hsr_slave_0: entered promiscuous mode [ 200.606129][ T6640] hsr_slave_1: entered promiscuous mode [ 200.619393][ T6640] debugfs: 'hsr0' already exists in 'hsr' [ 200.634870][ T6640] Cannot create hsr debugfs directory [ 200.670759][ T5986] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.718753][ T5986] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.756780][ T5986] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.801177][ T5986] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.879216][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.700283][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.707562][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.968817][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.976111][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.089680][ T6866] loop2: detected capacity change from 0 to 256 [ 203.437863][ T6866] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d) [ 206.459546][ T6892] loop3: detected capacity change from 0 to 1024 [ 206.901020][ T6897] ubi31: attaching mtd0 [ 206.959980][ T6897] ubi31: scanning is finished [ 206.964773][ T6897] ubi31: empty MTD device detected [ 207.264634][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 207.270850][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 207.416156][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.541782][ T6897] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 207.669467][ T6064] hfsplus: b-tree write err: -5, ino 4 [ 209.385482][ T6640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.460106][ T6640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.511551][ T6640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.528781][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.538512][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.547166][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.559124][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.568142][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.651552][ T6640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.102557][ T6929] lo speed is unknown, defaulting to 1000 [ 210.162929][ T6924] comedi comedi0: reset error (fatal) [ 210.428135][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 210.437718][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 211.028396][ T6948] 9p: Bad value for 'source' [ 211.079034][ T6948] batadv_slave_0: entered promiscuous mode [ 211.084884][ T6948] batadv_slave_0: entered allmulticast mode [ 211.091332][ T6948] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 211.564987][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.605865][ T5841] Bluetooth: hci5: command tx timeout [ 211.669023][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 212.649729][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.676168][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.683422][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.690827][ T6971] loop2: detected capacity change from 0 to 1024 [ 212.717637][ T6971] hfsplus: invalid file type 0120411 for inode 2 [ 212.724101][ T6971] hfsplus: failed to load root directory [ 213.685662][ T5841] Bluetooth: hci5: command tx timeout [ 214.090748][ T6980] Invalid ELF header magic: != ELF [ 214.903083][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.922385][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.024913][ T6929] bridge_slave_0: entered allmulticast mode [ 215.033250][ T6929] bridge_slave_0: entered promiscuous mode [ 215.066848][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.074069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.122529][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.132343][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.103780][ T6929] bridge_slave_1: entered allmulticast mode [ 216.163754][ T5834] Bluetooth: hci5: command tx timeout [ 216.287730][ T6929] bridge_slave_1: entered promiscuous mode [ 216.604364][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.743315][ T36] bridge_slave_1: left allmulticast mode [ 216.756729][ T36] bridge_slave_1: left promiscuous mode [ 216.764267][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.774822][ T6997] loop2: detected capacity change from 0 to 512 [ 216.831171][ T6997] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.171: inode has both inline data and extents flags [ 216.870232][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 217.316060][ T6997] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.171: couldn't read orphan inode 15 (err -117) [ 217.329979][ T36] bridge_slave_0: left allmulticast mode [ 217.346361][ T36] bridge_slave_0: left promiscuous mode [ 217.359709][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.447253][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.687526][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 219.687582][ T30] audit: type=1804 audit(1765955925.741:108): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.171" name="/newroot/45/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 219.734481][ T5834] Bluetooth: hci5: command tx timeout [ 219.764374][ T7005] Invalid ELF header magic: != ELF [ 220.055832][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.229371][ T30] audit: type=1800 audit(1765955925.741:109): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.171" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 220.814310][ T7015] syz.2.173 uses obsolete (PF_INET,SOCK_PACKET) [ 220.842785][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.258958][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.278120][ T36] bond0 (unregistering): Released all slaves [ 221.299799][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.553045][ T6929] team0: Port device team_slave_0 added [ 222.129060][ T36] hsr_slave_0: left promiscuous mode [ 222.137121][ T7026] loop2: detected capacity change from 0 to 64 [ 222.143427][ T36] hsr_slave_1: left promiscuous mode [ 222.150008][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.160596][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.184498][ T7026] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 222.215326][ T7026] hfs: get root inode failed [ 222.649344][ T7028] futex_wake_op: syz.2.176 tries to shift op by -1; fix this program [ 223.048452][ T36] team0 (unregistering): Port device team_slave_1 removed [ 223.098779][ T36] team0 (unregistering): Port device team_slave_0 removed [ 223.376473][ T7034] loop3: detected capacity change from 0 to 64 [ 224.842226][ T6929] team0: Port device team_slave_1 added [ 225.495078][ T7030] tipc: Started in network mode [ 225.500234][ T7030] tipc: Node identity 080211000001, cluster identity 4711 [ 225.507667][ T7030] tipc: Enabled bearer , priority 0 [ 225.963110][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.003114][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.029849][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.227420][ T7040] loop2: detected capacity change from 0 to 512 [ 226.342785][ T7040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 226.356905][ T7040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.425628][ T7040] EXT4-fs (loop2): 1 truncate cleaned up [ 226.432245][ T7040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.476335][ T7040] syz.2.179 (pid 7040) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 226.512962][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.541249][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.578614][ T7047] block device autoloading is deprecated and will be removed. [ 226.607921][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.125444][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 227.287093][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.297149][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.307311][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.318204][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.345473][ T6054] tipc: Node number set to 134418688 [ 227.353878][ T5920] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 227.378895][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.398262][ T5920] usb 4-1: Product: syz [ 227.418563][ T5920] usb 4-1: Manufacturer: syz [ 227.428698][ T5920] usb 4-1: SerialNumber: syz [ 227.452915][ T5920] usb 4-1: config 0 descriptor?? [ 227.472535][ T5920] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 227.568620][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.573890][ T5920] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 227.586800][ T5920] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 228.314736][ T7081] Invalid ELF header magic: != ELF [ 228.954055][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 229.050041][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.428104][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.435955][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.353730][ T7058] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 230.393269][ T7058] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 230.409729][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.427364][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.775875][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 232.492190][ T6929] hsr_slave_0: entered promiscuous mode [ 232.499684][ T6929] hsr_slave_1: entered promiscuous mode [ 232.507429][ T5920] usb 4-1: USB disconnect, device number 4 [ 232.507650][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 232.521513][ T6929] Cannot create hsr debugfs directory [ 232.536609][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.185'. [ 232.715181][ T77] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.724134][ T77] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.142233][ T7123] random: crng reseeded on system resumption [ 235.956557][ T77] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.700717][ T77] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.095667][ T7142] loop3: detected capacity change from 0 to 40427 [ 238.102735][ T7142] f2fs: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ01777777777777777777777' [ 238.528653][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 238.537687][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 238.603550][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.724263][ T7146] loop3: detected capacity change from 0 to 64 [ 238.735735][ T7146] hfs: Unknown parameter 'ÿ' [ 238.787750][ T5992] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.251337][ T5992] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.439947][ T6825] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.515867][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.535027][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.546201][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.554346][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.576510][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.969591][ T5834] Bluetooth: hci3: command tx timeout [ 242.035715][ T7177] add_ndev_hash(lo) on ffff88807c890000 done [ 242.042078][ T7177] siw: device registration error -23 [ 242.639853][ T7149] lo speed is unknown, defaulting to 1000 [ 244.085216][ T5834] Bluetooth: hci3: command tx timeout [ 246.165348][ T5834] Bluetooth: hci3: command tx timeout [ 246.323776][ T7197] loop2: detected capacity change from 0 to 1764 [ 247.031073][ T7205] trusted_key: syz.2.199 sent an empty control message without MSG_MORE. [ 247.123838][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 248.034129][ T7217] mkiss: ax0: crc mode is auto. [ 248.320952][ T5834] Bluetooth: hci3: command tx timeout [ 248.369938][ T7228] add_ndev_hash(lo) on ffff888028e98000 done [ 248.475537][ T7228] siw: device registration error -23 [ 251.910379][ T7256] loop2: detected capacity change from 0 to 512 [ 252.041035][ T7256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.134691][ T7256] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.208: iget: bad i_size value: 38620345925642 [ 252.239348][ T7256] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.208: couldn't read orphan inode 15 (err -117) [ 252.368781][ T7256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.020515][ T5992] bridge_slave_1: left allmulticast mode [ 253.050482][ T5992] bridge_slave_1: left promiscuous mode [ 253.076320][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.315858][ T5992] bridge_slave_0: left allmulticast mode [ 253.321546][ T5992] bridge_slave_0: left promiscuous mode [ 253.895531][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.687669][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.956165][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 254.965869][ T7291] unsupported nlmsg_type 40 [ 255.637943][ T7293] loop2: detected capacity change from 0 to 128 [ 255.740629][ T7293] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 255.776101][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779261][ T7293] hpfs: filesystem error: improperly stopped [ 255.789062][ T7293] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 255.797949][ T7293] hpfs: You really don't want any checks? You are crazy... [ 255.808261][ T7293] hpfs: hpfs_map_sector(): read error [ 255.915993][ T7293] hpfs: code page support is disabled [ 255.923643][ T7293] hpfs: hpfs_map_4sectors(): unaligned read [ 255.973596][ T7293] hpfs: hpfs_map_4sectors(): unaligned read [ 256.026632][ T7293] hpfs: filesystem error: unable to find root dir [ 256.766414][ T7303] hpfs: hpfs_map_4sectors(): unaligned read [ 256.776004][ T5834] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 257.147982][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.161327][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.163686][ T5992] bond0 (unregistering): Released all slaves [ 257.329650][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.350060][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.369713][ T7268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.491320][ T7308] add_ndev_hash(lo) on ffff888055a2c000 done [ 257.497938][ T7308] siw: device registration error -23 [ 258.055398][ T5869] lo speed is unknown, defaulting to 1000 [ 258.061203][ T5869] syz0: Port: 1 Link ACTIVE [ 258.215479][ T5992] hsr_slave_0: left promiscuous mode [ 258.226328][ T5992] hsr_slave_1: left promiscuous mode [ 258.241370][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.858525][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.711059][ T7325] overlayfs: failed to resolve './file1/file0': -2 [ 260.416014][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 260.437634][ T7327] loop3: detected capacity change from 0 to 1024 [ 260.447345][ T7327] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 260.461521][ T7327] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 260.472959][ T7327] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.502150][ T7327] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.220: inode #512: comm syz.3.220: iget: illegal inode # [ 260.502725][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 260.523361][ T7327] EXT4-fs (loop3): no journal found [ 260.529448][ T7327] EXT4-fs (loop3): can't get journal size [ 260.551633][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.595053][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.986148][ T7332] overlayfs: workdir and upperdir must be separate subtrees [ 261.540771][ T7149] chnl_net:caif_netlink_parms(): no params data found [ 261.597480][ T6929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.610711][ T6929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.623267][ T6929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.635832][ T6929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.900197][ T7345] loop3: detected capacity change from 0 to 256 [ 261.914898][ T7342] loop2: detected capacity change from 0 to 1024 [ 261.944920][ T7345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 262.361501][ T7345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 262.635316][ T7345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 262.643096][ T7345] UDF-fs: Scanning with blocksize 512 failed [ 262.753824][ T7345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 262.820165][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.122423][ T7363] ubi31: attaching mtd0 [ 263.169586][ T7363] ubi31: scanning is finished [ 263.779678][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.364374][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.378088][ T7363] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 264.505460][ T7149] bridge_slave_0: entered allmulticast mode [ 264.513474][ T7149] bridge_slave_0: entered promiscuous mode [ 265.193541][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.219289][ T50] hfsplus: b-tree write err: -5, ino 4 [ 265.236614][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.277255][ T7149] bridge_slave_1: entered allmulticast mode [ 265.320294][ T7149] bridge_slave_1: entered promiscuous mode [ 265.521096][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.589328][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.766308][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 265.777278][ T7149] team0: Port device team_slave_0 added [ 266.086135][ T7397] overlayfs: failed to clone lowerpath [ 266.337714][ T7395] overlayfs: failed to clone upperpath [ 266.369279][ T7149] team0: Port device team_slave_1 added [ 266.563169][ T7401] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 266.728419][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 267.086817][ T37] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 267.095252][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 267.111590][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 267.148323][ T37] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 267.175306][ T37] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 267.183401][ T37] usb 3-1: Product: syz [ 267.195259][ T37] usb 3-1: SerialNumber: syz [ 267.215852][ T37] r8152-cfgselector 3-1: Unknown version 0x0000 [ 267.222296][ T37] r8152-cfgselector 3-1: config 0 descriptor?? [ 267.238423][ T37] hub 3-1:0.0: bad descriptor, ignoring hub [ 267.244413][ T37] hub 3-1:0.0: probe with driver hub failed with error -5 [ 267.257539][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.752298][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.770175][ T37] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 267.791222][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.842912][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.860073][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.888085][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.006073][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.067618][ T7149] hsr_slave_0: entered promiscuous mode [ 268.074655][ T7149] hsr_slave_1: entered promiscuous mode [ 268.106575][ T7149] debugfs: 'hsr0' already exists in 'hsr' [ 268.112357][ T7149] Cannot create hsr debugfs directory [ 268.368196][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.514222][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.521631][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.762370][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.769684][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.852099][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.855194][ T30] audit: type=1326 audit(1765955977.951:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 270.863823][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.928863][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.937040][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.945292][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.953551][ T30] audit: type=1326 audit(1765955977.951:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.255521][ T30] audit: type=1326 audit(1765955977.951:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.278005][ T30] audit: type=1326 audit(1765955977.951:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.362410][ T7454] can: request_module (can-proto-3) failed. [ 271.414795][ T30] audit: type=1326 audit(1765955977.951:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.685088][ T30] audit: type=1326 audit(1765955977.951:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.739175][ T7449] lo speed is unknown, defaulting to 1000 [ 271.802923][ T30] audit: type=1326 audit(1765955977.951:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 271.918793][ T30] audit: type=1326 audit(1765955977.951:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 272.025220][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 272.068325][ T30] audit: type=1326 audit(1765955977.951:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 272.135658][ T30] audit: type=1326 audit(1765955977.951:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 272.325341][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 272.335917][ T5920] usb 4-1: config index 0 descriptor too short (expected 94, got 36) [ 273.017609][ T5920] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 273.077499][ T5920] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 8.3f [ 273.206876][ T5841] Bluetooth: hci4: command tx timeout [ 273.238019][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.025106][ T7149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.065957][ T5920] ch9200 4-1:2.0: probe with driver ch9200 failed with error -22 [ 274.190412][ T7149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.262739][ T5920] usb 4-1: USB disconnect, device number 5 [ 274.356582][ T7149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.092972][ T7149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.231711][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 275.285618][ T5841] Bluetooth: hci4: command tx timeout [ 276.123499][ T7510] Bluetooth: MGMT ver 1.23 [ 277.365857][ T5841] Bluetooth: hci4: command tx timeout [ 277.375314][ T7511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 278.191040][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.260'. [ 278.991336][ T7549] loop2: detected capacity change from 0 to 2048 [ 279.005481][ T7549] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 279.032410][ T7533] NFSD: Failed to start, no listeners configured. [ 279.070548][ T7549] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 279.104037][ T7549] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 279.428031][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.445279][ T5841] Bluetooth: hci4: command tx timeout [ 279.869640][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.917999][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.939583][ T7449] bridge_slave_0: entered allmulticast mode [ 279.972944][ T7449] bridge_slave_0: entered promiscuous mode [ 280.040393][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.047829][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.055090][ T7449] bridge_slave_1: entered allmulticast mode [ 280.073880][ T7449] bridge_slave_1: entered promiscuous mode [ 281.197121][ T7576] kernel profiling enabled (shift: 63) [ 281.210340][ T7576] profiling shift: 63 too large [ 281.271373][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.375497][ T7567] loop2: detected capacity change from 0 to 4096 [ 281.458498][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.480292][ T7567] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 281.525436][ T7567] UDF-fs: Scanning with blocksize 512 failed [ 281.714150][ T7449] team0: Port device team_slave_0 added [ 281.729956][ T7449] team0: Port device team_slave_1 added [ 281.744828][ T2209] bridge_slave_1: left allmulticast mode [ 281.756104][ T2209] bridge_slave_1: left promiscuous mode [ 281.767455][ T2209] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.787452][ T7567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.898801][ T2209] bridge_slave_0: left allmulticast mode [ 281.955964][ T2209] bridge_slave_0: left promiscuous mode [ 281.972073][ T2209] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.155081][ T7595] loop3: detected capacity change from 0 to 1024 [ 282.865871][ T12] hfsplus: b-tree write err: -5, ino 4 [ 284.918221][ T7623] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 285.695718][ T2209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.713456][ T2209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.729708][ T2209] bond0 (unregistering): Released all slaves [ 287.418269][ T2209] hsr_slave_0: left promiscuous mode [ 287.515069][ T2209] hsr_slave_1: left promiscuous mode [ 287.543369][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.597947][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.446935][ T7666] netlink: 148 bytes leftover after parsing attributes in process `syz.1.291'. [ 289.459012][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.291'. [ 289.468280][ T7666] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 289.980148][ T7668] loop3: detected capacity change from 0 to 256 [ 290.079044][ T7668] FAT-fs (loop3): Directory bread(block 64) failed [ 290.092341][ T7668] FAT-fs (loop3): Directory bread(block 65) failed [ 290.102680][ T7668] FAT-fs (loop3): Directory bread(block 66) failed [ 290.125374][ T7668] FAT-fs (loop3): Directory bread(block 67) failed [ 290.132072][ T7668] FAT-fs (loop3): Directory bread(block 68) failed [ 290.148812][ T7668] FAT-fs (loop3): Directory bread(block 69) failed [ 290.156080][ T7668] FAT-fs (loop3): Directory bread(block 70) failed [ 290.162869][ T7668] FAT-fs (loop3): Directory bread(block 71) failed [ 290.163299][ T2209] team0 (unregistering): Port device team_slave_1 removed [ 290.170146][ T7668] FAT-fs (loop3): Directory bread(block 72) failed [ 290.183729][ T7668] FAT-fs (loop3): Directory bread(block 73) failed [ 290.231845][ T2209] team0 (unregistering): Port device team_slave_0 removed [ 290.559044][ T7672] loop3: detected capacity change from 0 to 1764 [ 290.600622][ T7672] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 290.760724][ T7674] overlayfs: failed to resolve './file1/file0': -2 [ 291.507625][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.514658][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.543845][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.625350][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.632572][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.719520][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.812147][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.008710][ T7449] hsr_slave_0: entered promiscuous mode [ 292.021211][ T7449] hsr_slave_1: entered promiscuous mode [ 292.046397][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 292.052186][ T7449] Cannot create hsr debugfs directory [ 292.229018][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.404941][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.412309][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.353427][ T7725] loop2: detected capacity change from 0 to 1024 [ 293.369082][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.376264][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.446645][ T7725] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 293.547600][ T5986] hfsplus: b-tree write err: -5, ino 4 [ 295.990993][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.291271][ T7449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.352472][ T7449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.433734][ T7449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.510553][ T7449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.803754][ T7788] overlayfs: failed to resolve './file1/file0': -2 [ 297.990867][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.120459][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.906038][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.913326][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.963562][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.978230][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.987573][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.995656][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.004751][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.068571][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.075945][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.111685][ T7805] lo speed is unknown, defaulting to 1000 [ 299.807097][ T7812] loop2: detected capacity change from 0 to 32768 [ 299.901292][ T7812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.327 (7812) [ 299.958207][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.331'. [ 300.017721][ T7812] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.086134][ T7812] BTRFS info (device loop2): using sha256 checksum algorithm [ 300.133720][ T7812] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 301.057136][ T5834] Bluetooth: hci5: command tx timeout [ 301.187224][ T7812] BTRFS info (device loop2): rebuilding free space tree [ 301.221786][ T7857] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 301.327201][ T7812] BTRFS info (device loop2): disabling free space tree [ 301.365503][ T7812] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.367232][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 301.429539][ T7812] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.487124][ T7812] BTRFS info (device loop2): enabling ssd optimizations [ 301.494481][ T7812] BTRFS info (device loop2): enabling disk space caching [ 301.585291][ T7812] BTRFS info (device loop2): force clearing of disk cache [ 301.594924][ T7812] BTRFS info (device loop2): enabling auto defrag [ 301.601866][ T7812] BTRFS info (device loop2): max_inline set to 0 [ 301.917990][ T5829] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.227753][ T7886] netlink: 21 bytes leftover after parsing attributes in process `syz.2.338'. [ 302.440399][ T7889] overlayfs: failed to resolve './file1/file0': -2 [ 303.146842][ T5834] Bluetooth: hci5: command tx timeout [ 303.170180][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.328121][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.355400][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.362710][ T7805] bridge_slave_0: entered allmulticast mode [ 303.407265][ T7805] bridge_slave_0: entered promiscuous mode [ 303.448220][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.497489][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.504798][ T7805] bridge_slave_1: entered allmulticast mode [ 303.548034][ T7805] bridge_slave_1: entered promiscuous mode [ 303.589209][ T7904] random: crng reseeded on system resumption [ 303.804320][ T7908] netlink: 'syz.2.347': attribute type 10 has an invalid length. [ 304.377982][ T7908] team0: Port device dummy0 added [ 304.397447][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.452708][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.676864][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 304.706899][ T7805] team0: Port device team_slave_0 added [ 304.767502][ T7805] team0: Port device team_slave_1 added [ 304.933490][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 304.933507][ T30] audit: type=1326 audit(1765956012.211:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 305.031370][ T30] audit: type=1326 audit(1765956012.241:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 305.088827][ T30] audit: type=1326 audit(1765956012.251:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 305.111425][ T30] audit: type=1326 audit(1765956012.251:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 305.152983][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.163150][ T30] audit: type=1326 audit(1765956012.251:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8998d8f749 code=0x7ffc0000 [ 305.178200][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.225120][ T5834] Bluetooth: hci5: command tx timeout [ 305.349190][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.377484][ T6087] bridge_slave_1: left allmulticast mode [ 305.392407][ T6087] bridge_slave_1: left promiscuous mode [ 305.400545][ T7951] comedi comedi0: Minor 4 could not be opened [ 305.412074][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.423196][ T6087] bridge_slave_0: left allmulticast mode [ 305.429455][ T6087] bridge_slave_0: left promiscuous mode [ 305.445939][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.122411][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.136183][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.147078][ T6087] bond0 (unregistering): Released all slaves [ 306.160755][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.169154][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.205833][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.242518][ T7953] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 306.314658][ T6087] hsr_slave_0: left promiscuous mode [ 306.429269][ T6087] hsr_slave_1: left promiscuous mode [ 306.439533][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.471912][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.543026][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 307.211823][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 307.301522][ T5834] Bluetooth: hci5: command tx timeout [ 307.311012][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 308.103127][ T8013] loop2: detected capacity change from 0 to 4096 [ 308.146095][ T8013] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 308.292836][ T8013] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 308.356824][ T7805] hsr_slave_0: entered promiscuous mode [ 308.437506][ T7805] hsr_slave_1: entered promiscuous mode [ 308.580297][ T8013] ntfs3(loop2): ino=19, mi_enum_attr [ 308.676976][ T7805] debugfs: 'hsr0' already exists in 'hsr' [ 308.783065][ T7805] Cannot create hsr debugfs directory [ 308.920329][ T8013] ntfs3(loop2): failed to convert "c46c" to cp850 [ 308.956105][ T8013] ntfs3(loop2): ino=20, mi_enum_attr [ 308.985791][ T8022] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 309.082744][ T8022] batman_adv: batadv0: Adding interface: netdevsim0 [ 309.098683][ T8022] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.166956][ T8022] batman_adv: batadv0: Interface activated: netdevsim0 [ 309.274598][ T7449] veth0_vlan: entered promiscuous mode [ 309.392929][ T7449] veth1_vlan: entered promiscuous mode [ 309.425831][ T5951] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 310.106445][ T8045] loop3: detected capacity change from 0 to 64 [ 310.170274][ T5951] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 310.289511][ T5951] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 310.309366][ T5951] usb 3-1: config 201 has no interface number 0 [ 310.319135][ T5951] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 310.332742][ T5951] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.345550][ T5951] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 310.362874][ T5951] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.403909][ T7449] veth0_macvtap: entered promiscuous mode [ 310.439755][ T5951] usb 3-1: config 201 interface 249 has no altsetting 0 [ 310.452671][ T7449] veth1_macvtap: entered promiscuous mode [ 310.465930][ T5951] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 310.485340][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.494556][ T5951] usb 3-1: Product: syz [ 310.546599][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.590473][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.625260][ T5951] usb 3-1: Manufacturer: syz [ 310.629911][ T5951] usb 3-1: SerialNumber: syz [ 310.655007][ T8026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.695794][ T6825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.704565][ T6825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.850805][ T6087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.872911][ T6087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.937805][ T5951] ath6kl: Failed to submit usb control message: -71 [ 310.945583][ T5951] ath6kl: unable to send the bmi data to the device: -71 [ 310.953067][ T5951] ath6kl: Unable to send get target info: -71 [ 310.964009][ T5951] ath6kl: Failed to init ath6kl core: -71 [ 310.979190][ T5951] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 310.995421][ T5951] usb 3-1: USB disconnect, device number 5 [ 311.044251][ T8062] loop3: detected capacity change from 0 to 256 [ 311.265289][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.276493][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.533133][ T7805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.577287][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.595199][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.621808][ T7805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.650560][ T7805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.711909][ T7805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.066331][ T8098] comedi comedi1: rti802: I/O port conflict (0x9,4) [ 314.169655][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.286604][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.512674][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.520015][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.267158][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.274378][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.617517][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.848424][ T8143] loop3: detected capacity change from 0 to 32768 [ 316.856048][ T8143] BTRFS warning: excessive commit interval 2147483648, use with care [ 316.864654][ T8143] btrfs: Deprecated parameter 'usebackuproot' [ 316.870976][ T8143] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.882518][ T8143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.422 (8143) [ 316.901781][ T8143] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.901836][ T8143] BTRFS info (device loop3): using crc32c checksum algorithm [ 317.114669][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 317.232064][ T8143] BTRFS error (device loop3): failed to load root extent [ 317.243650][ T8143] BTRFS warning (device loop3): try to load backup roots slot 1 [ 317.252551][ T61] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 317.316431][ T8173] erspan0: entered promiscuous mode [ 317.335320][ T8143] BTRFS warning (device loop3): couldn't read tree root [ 317.342357][ T8143] BTRFS warning (device loop3): try to load backup roots slot 2 [ 317.350582][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 317.365618][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.415357][ T8143] BTRFS warning (device loop3): couldn't read tree root [ 317.422393][ T8143] BTRFS warning (device loop3): try to load backup roots slot 3 [ 317.482593][ T8175] add_ndev_hash(lo) on ffff88807a4a0000 done [ 317.489041][ T8175] siw: device registration error -23 [ 317.675750][ T8143] BTRFS info (device loop3): rebuilding free space tree [ 317.719145][ T8143] BTRFS info (device loop3): checking UUID tree [ 317.732085][ T8143] BTRFS info (device loop3): enabling ssd optimizations [ 317.739097][ T8143] BTRFS info (device loop3): using spread ssd allocation scheme [ 317.747536][ T8143] BTRFS info (device loop3): turning off barriers [ 317.753973][ T8143] BTRFS info (device loop3): turning on flush-on-commit [ 317.761001][ T8143] BTRFS info (device loop3): turning on async discard [ 317.767893][ T8143] BTRFS info (device loop3): enabling free space tree [ 317.774667][ T8143] BTRFS info (device loop3): force clearing of disk cache [ 317.781924][ T8143] BTRFS info (device loop3): enabling auto defrag [ 317.788427][ T8143] BTRFS info (device loop3): trying to use backup root at mount time [ 318.413871][ T8182] loop2: detected capacity change from 0 to 4096 [ 318.462393][ T8182] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 318.668974][ T8182] ntfs3(loop2): ino=1a, mi_enum_attr [ 318.674337][ T8182] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 318.684693][ T7805] veth0_vlan: entered promiscuous mode [ 318.800791][ T8194] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 318.930390][ T8194] bond1 (unregistering): Released all slaves [ 319.305543][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'. [ 319.889641][ T7805] veth1_vlan: entered promiscuous mode [ 319.952962][ T7805] veth0_macvtap: entered promiscuous mode [ 319.960830][ T8210] loop2: detected capacity change from 0 to 136 [ 319.978736][ T8210] Attempt to read inode for relocated directory [ 320.008777][ T7805] veth1_macvtap: entered promiscuous mode [ 320.069925][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.112290][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.136301][ T8210] 9p: Could not find request transport: xen [ 320.339550][ T3535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.396426][ T5827] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.421436][ T8218] add_ndev_hash(lo) on ffff88807a4a4000 done [ 320.427852][ T8218] siw: device registration error -23 [ 320.848486][ T8219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.440'. [ 320.874915][ T3535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.888864][ T3535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.909982][ T3535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.915589][ T5869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 321.077654][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 321.132421][ T5869] usb 7-1: config 2 has an invalid interface number: 45 but max is 0 [ 321.174729][ T5869] usb 7-1: config 2 has no interface number 0 [ 321.199266][ T5869] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 321.223272][ T5869] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.259943][ T5869] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 321.314024][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.342851][ T5869] usb 7-1: Product: syz [ 321.353132][ T5869] usb 7-1: Manufacturer: syz [ 321.360614][ T5869] usb 7-1: SerialNumber: syz [ 321.376393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.384289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.408030][ T5869] kobil_sct 7-1:2.45: KOBIL USB smart card terminal converter detected [ 321.446519][ T5869] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 321.548709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.577861][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.631301][ T5869] usb 7-1: USB disconnect, device number 2 [ 321.689127][ T5869] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 321.713874][ T5869] kobil_sct 7-1:2.45: device disconnected [ 321.845987][ T8242] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.474259][ T8249] loop5: detected capacity change from 0 to 4096 [ 322.494114][ T8249] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 323.066954][ T8261] add_ndev_hash(lo) on ffff88807dbe4000 done [ 323.078286][ T8261] siw: device registration error -23 [ 323.594882][ T5834] Bluetooth: hci4: Invalid handle: 0xfe00 > 0x0eff [ 324.701383][ T8288] loop6: detected capacity change from 0 to 164 [ 324.829306][ T8288] Unable to read rock-ridge attributes [ 324.873132][ T8288] Unable to read rock-ridge attributes [ 324.886980][ T8288] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 325.178573][ T8300] loop5: detected capacity change from 0 to 256 [ 325.215975][ T8300] exfat: Deprecated parameter 'utf8' [ 325.256872][ T8300] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 325.442219][ T8306] loop5: detected capacity change from 0 to 256 [ 325.469658][ T30] audit: type=1326 audit(1765956032.751:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b98f749 code=0x7ffc0000 [ 325.519866][ T30] audit: type=1326 audit(1765956032.751:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b98f749 code=0x7ffc0000 [ 325.557524][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 325.592676][ T30] audit: type=1326 audit(1765956032.781:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fec9b98f749 code=0x7ffc0000 [ 325.641846][ T30] audit: type=1326 audit(1765956032.781:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.6.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b98f749 code=0x7ffc0000 [ 325.785691][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.815958][ T9] usb 3-1: config 128 has an invalid interface number: 144 but max is 0 [ 325.824348][ T9] usb 3-1: config 128 has no interface number 0 [ 325.872198][ T9] usb 3-1: config 128 interface 144 has no altsetting 0 [ 325.901368][ T9] usb 3-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=b5.7e [ 325.920972][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.930123][ T9] usb 3-1: Product: syz [ 325.936689][ T9] usb 3-1: Manufacturer: syz [ 325.964915][ T9] usb 3-1: SerialNumber: syz [ 325.988767][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 326.072966][ T8326] xt_l2tp: missing protocol rule (udp|l2tpip) [ 326.201598][ T9] usb 3-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3352) Rev (0XB57E): ADI930 [ 327.440600][ T9] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 327.639722][ T8351] support for cryptoloop has been removed. Use dm-crypt instead. [ 327.660085][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.939246][ T9] usb 3-1: device firmware changed [ 328.068805][ T8353] loop6: detected capacity change from 0 to 64 [ 328.163187][ T9] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 328.211226][ T9] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 328.239647][ T6203] usb 3-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 328.325797][ T9] usb 3-1: USB disconnect, device number 6 [ 328.345473][ T6203] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 328.404842][ T6203] ------------[ cut here ]------------ [ 328.411021][ T6203] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:12/6203 [ 328.420286][ T6203] Modules linked in: [ 328.424617][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: kworker/0:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.435840][ T6203] Tainted: [L]=SOFTLOCKUP [ 328.440268][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.450582][ T6203] Workqueue: events request_firmware_work_func [ 328.456863][ T6203] RIP: 0010:kernfs_get+0x72/0x90 [ 328.461830][ T6203] Code: e8 f3 43 5d ff 48 89 df be 04 00 00 00 e8 56 a2 c3 ff f0 ff 03 eb 05 e8 dc 43 5d ff 5b 5d c3 cc cc cc cc cc e8 cf 43 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 55 [ 328.471374][ T8358] Trying to free block not in datazone [ 328.481855][ T6203] RSP: 0018:ffffc9000512f600 EFLAGS: 00010293 [ 328.493876][ T6203] RAX: ffffffff826485b1 RBX: ffff88803114d870 RCX: ffff888025923d00 [ 328.502953][ T6203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.511853][ T6203] RBP: 0000000000000000 R08: ffff88803114d873 R09: 1ffff11006229b0e [ 328.520354][ T6203] R10: dffffc0000000000 R11: ffffed1006229b0f R12: ffff88803475c7a8 [ 328.528571][ T6203] R13: 1ffff110068eb8f6 R14: ffff88803475c7b0 R15: dffffc0000000000 [ 328.536611][ T6203] FS: 0000000000000000(0000) GS:ffff888125c2d000(0000) knlGS:0000000000000000 [ 328.545600][ T6203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.552235][ T6203] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 328.560309][ T6203] Call Trace: [ 328.563627][ T6203] [ 328.566717][ T6203] kobject_add_internal+0x72b/0xcc0 [ 328.571982][ T6203] kobject_add+0x155/0x220 [ 328.576488][ T6203] ? __pfx_kobject_add+0x10/0x10 [ 328.581455][ T6203] ? __kasan_kmalloc+0x93/0xb0 [ 328.586300][ T6203] ? kobject_init+0x83/0x1e0 [ 328.590920][ T6203] get_device_parent+0x316/0x3a0 [ 328.595990][ T6203] device_add+0x2e1/0xb80 [ 328.601208][ T6203] firmware_fallback_sysfs+0x2e4/0xa40 [ 328.607422][ T6203] ? kmem_cache_free+0x197/0x620 [ 328.612399][ T6203] _request_firmware+0xfa4/0x1680 [ 328.617553][ T6203] ? __pfx__request_firmware+0x10/0x10 [ 328.623136][ T6203] ? process_one_work+0x868/0x15a0 [ 328.628317][ T6203] request_firmware_work_func+0xaf/0x1c0 [ 328.634073][ T6203] ? process_one_work+0x868/0x15a0 [ 328.639277][ T6203] process_one_work+0x93a/0x15a0 [ 328.644268][ T6203] ? __pfx_process_one_work+0x10/0x10 [ 328.649741][ T6203] ? assign_work+0x3c7/0x5b0 [ 328.654451][ T6203] worker_thread+0x9b0/0xee0 [ 328.659248][ T6203] kthread+0x711/0x8a0 [ 328.663349][ T6203] ? __pfx_worker_thread+0x10/0x10 [ 328.668630][ T6203] ? __pfx_kthread+0x10/0x10 [ 328.673321][ T6203] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.678718][ T6203] ? lockdep_hardirqs_on+0x98/0x140 [ 328.684013][ T6203] ? __pfx_kthread+0x10/0x10 [ 328.688695][ T6203] ret_from_fork+0x599/0xb30 [ 328.693329][ T6203] ? __pfx_ret_from_fork+0x10/0x10 [ 328.698536][ T6203] ? __switch_to_asm+0x39/0x70 [ 328.704252][ T6203] ? __switch_to_asm+0x33/0x70 [ 328.709803][ T6203] ? __pfx_kthread+0x10/0x10 [ 328.714444][ T6203] ret_from_fork_asm+0x1a/0x30 [ 328.719423][ T6203] [ 328.722474][ T6203] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.729827][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: kworker/0:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.740871][ T6203] Tainted: [L]=SOFTLOCKUP [ 328.745206][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.755269][ T6203] Workqueue: events request_firmware_work_func [ 328.761446][ T6203] Call Trace: [ 328.764722][ T6203] [ 328.767655][ T6203] dump_stack_lvl+0x99/0x250 [ 328.772267][ T6203] ? __asan_memcpy+0x40/0x70 [ 328.776879][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.782083][ T6203] ? __pfx__printk+0x10/0x10 [ 328.786689][ T6203] vpanic+0x237/0x6d0 [ 328.790683][ T6203] ? __pfx_vpanic+0x10/0x10 [ 328.795182][ T6203] ? is_bpf_text_address+0x292/0x2b0 [ 328.800470][ T6203] ? is_bpf_text_address+0x26/0x2b0 [ 328.805675][ T6203] panic+0xb9/0xc0 [ 328.809403][ T6203] ? __pfx_panic+0x10/0x10 [ 328.813830][ T6203] ? ret_from_fork_asm+0x1a/0x30 [ 328.818778][ T6203] __warn+0x317/0x4b0 [ 328.822761][ T6203] ? kernfs_get+0x72/0x90 [ 328.827613][ T6203] ? kernfs_get+0x72/0x90 [ 328.831962][ T6203] __report_bug+0x288/0x500 [ 328.836488][ T6203] ? kernfs_get+0x72/0x90 [ 328.840834][ T6203] ? __pfx___report_bug+0x10/0x10 [ 328.845949][ T6203] ? preempt_schedule_thunk+0x16/0x30 [ 328.851336][ T6203] ? up_write+0x1da/0x410 [ 328.855678][ T6203] ? kernfs_get+0x72/0x90 [ 328.860014][ T6203] report_bug+0x16a/0x220 [ 328.864342][ T6203] ? kernfs_get+0x72/0x90 [ 328.868667][ T6203] ? kernfs_get+0x74/0x90 [ 328.872997][ T6203] handle_bug+0x98/0x200 [ 328.877242][ T6203] exc_invalid_op+0x1a/0x50 [ 328.881846][ T6203] asm_exc_invalid_op+0x1a/0x20 [ 328.886784][ T6203] RIP: 0010:kernfs_get+0x72/0x90 [ 328.891727][ T6203] Code: e8 f3 43 5d ff 48 89 df be 04 00 00 00 e8 56 a2 c3 ff f0 ff 03 eb 05 e8 dc 43 5d ff 5b 5d c3 cc cc cc cc cc e8 cf 43 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 55 [ 328.911338][ T6203] RSP: 0018:ffffc9000512f600 EFLAGS: 00010293 [ 328.917442][ T6203] RAX: ffffffff826485b1 RBX: ffff88803114d870 RCX: ffff888025923d00 [ 328.925440][ T6203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.933405][ T6203] RBP: 0000000000000000 R08: ffff88803114d873 R09: 1ffff11006229b0e [ 328.941373][ T6203] R10: dffffc0000000000 R11: ffffed1006229b0f R12: ffff88803475c7a8 [ 328.949339][ T6203] R13: 1ffff110068eb8f6 R14: ffff88803475c7b0 R15: dffffc0000000000 [ 328.957316][ T6203] ? kernfs_get+0x71/0x90 [ 328.961657][ T6203] kobject_add_internal+0x72b/0xcc0 [ 328.966865][ T6203] kobject_add+0x155/0x220 [ 328.971286][ T6203] ? __pfx_kobject_add+0x10/0x10 [ 328.976225][ T6203] ? __kasan_kmalloc+0x93/0xb0 [ 328.981002][ T6203] ? kobject_init+0x83/0x1e0 [ 328.985591][ T6203] get_device_parent+0x316/0x3a0 [ 328.990538][ T6203] device_add+0x2e1/0xb80 [ 328.994877][ T6203] firmware_fallback_sysfs+0x2e4/0xa40 [ 329.000342][ T6203] ? kmem_cache_free+0x197/0x620 [ 329.005281][ T6203] _request_firmware+0xfa4/0x1680 [ 329.010331][ T6203] ? __pfx__request_firmware+0x10/0x10 [ 329.015804][ T6203] ? process_one_work+0x868/0x15a0 [ 329.020918][ T6203] request_firmware_work_func+0xaf/0x1c0 [ 329.026569][ T6203] ? process_one_work+0x868/0x15a0 [ 329.031712][ T6203] process_one_work+0x93a/0x15a0 [ 329.036666][ T6203] ? __pfx_process_one_work+0x10/0x10 [ 329.042130][ T6203] ? assign_work+0x3c7/0x5b0 [ 329.046720][ T6203] worker_thread+0x9b0/0xee0 [ 329.051330][ T6203] kthread+0x711/0x8a0 [ 329.055409][ T6203] ? __pfx_worker_thread+0x10/0x10 [ 329.060519][ T6203] ? __pfx_kthread+0x10/0x10 [ 329.065132][ T6203] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.070330][ T6203] ? lockdep_hardirqs_on+0x98/0x140 [ 329.075520][ T6203] ? __pfx_kthread+0x10/0x10 [ 329.080109][ T6203] ret_from_fork+0x599/0xb30 [ 329.084695][ T6203] ? __pfx_ret_from_fork+0x10/0x10 [ 329.089822][ T6203] ? __switch_to_asm+0x39/0x70 [ 329.094604][ T6203] ? __switch_to_asm+0x33/0x70 [ 329.099383][ T6203] ? __pfx_kthread+0x10/0x10 [ 329.104001][ T6203] ret_from_fork_asm+0x1a/0x30 [ 329.108805][ T6203] [ 329.112274][ T6203] Kernel Offset: disabled [ 329.116600][ T6203] Rebooting in 86400 seconds..