last executing test programs: 12.379254649s ago: executing program 1 (id=815): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000003fc0)={0x2, 0x59565955, 0x1, @discrete={0x4, 0x2}}) 12.379095406s ago: executing program 1 (id=816): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x130, &(0x7f00000003c0)={0x0, 0xc3dc, 0xa0101ae76be56fdd, 0x1, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000b80)={0x2, 0x0, 0x2008, 0x1, '\x00', 0x7}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22ffe6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r5) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"1b5f1a5952083394918c59e114fb09b8a48500"}) socket$l2tp(0x2, 0x2, 0x73) 11.443183048s ago: executing program 1 (id=834): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmget(0x3, 0x3000, 0x1000, &(0x7f0000190000/0x3000)=nil) 10.106479765s ago: executing program 1 (id=850): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 10.073539014s ago: executing program 1 (id=851): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 9.872218526s ago: executing program 1 (id=857): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}}}, 0x10, 0x0}, 0x0) 9.819594383s ago: executing program 32 (id=857): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}}}, 0x10, 0x0}, 0x0) 1.823323412s ago: executing program 5 (id=957): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) 1.813464253s ago: executing program 5 (id=958): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r1}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x3, r1, 0x1, 0x32, 0x6, @link_local}, 0x14) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000100)=0xf, 0x4) 1.24969961s ago: executing program 3 (id=968): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0xff1, 0x11) 1.249536625s ago: executing program 3 (id=969): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1.249315607s ago: executing program 3 (id=970): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x6, 0x70}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, 0x0, 0x0) write$input_event(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804cf300800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32000000001400001100010000000000000000000100000ae9de7b685d0c38adb4e07810a8d7a74da698ce426b88fd747a2a3991df65790b830554dab357"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 938.111266ms ago: executing program 2 (id=978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x3, 0x203, 0x0, 0x9}, {0x2, 0x4, 0xc}], 0x10, 0x4}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 796.774359ms ago: executing program 5 (id=981): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) 735.466393ms ago: executing program 2 (id=982): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xcb61, 0x0, 0xffffffff, 0xffdfffff}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 735.339315ms ago: executing program 0 (id=983): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000200)=@t={0x81, 0x6, 0x3b, 0x1a, @generic}) 735.086826ms ago: executing program 5 (id=984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25df9bfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x15ac}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80020) 721.446594ms ago: executing program 0 (id=985): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340), &(0x7f0000000600)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 701.291062ms ago: executing program 0 (id=986): rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x42002) ppoll(&(0x7f0000000280)=[{r0, 0x8061}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 651.505811ms ago: executing program 2 (id=987): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_clone(0xc1003000, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, r3, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xd8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 651.281829ms ago: executing program 5 (id=988): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff031}]}, 0x10) 565.042201ms ago: executing program 5 (id=989): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000010401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800fa0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf639d1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40094) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000012c0)={0x5c, r3, 'id1\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000693c1e10cd060202043e010203010902240001000000000904230002722f680009057a43ff0346090509050e"], 0x0) 531.728206ms ago: executing program 0 (id=990): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f00000000c0)) 463.550199ms ago: executing program 0 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb, 0x2, {{0x100, 0x8, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0xfa4c, 0x6c, 0x1d6, 0x80000001}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10001}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 463.36459ms ago: executing program 2 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01020000000000000000030000000900010073797a310000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000178000000030a01010000000000000000030000000900030073797a30000000000900010073797a30000000004c000480140003006d6163766c616e3100000000000000001400030069703667726530000000000000000000080001"], 0xe8}}, 0x0) 451.777406ms ago: executing program 2 (id=993): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9b}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfe9, &(0x7f0000002840)=""/4073, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 428.498361ms ago: executing program 2 (id=994): setitimer(0x1, 0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x80000) read(r1, &(0x7f0000000380)=""/149, 0x95) 363.584205ms ago: executing program 4 (id=995): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 326.67495ms ago: executing program 0 (id=996): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xf, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x8044) 213.949223ms ago: executing program 4 (id=997): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82840, 0x0) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) 103.550753ms ago: executing program 3 (id=998): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 103.307943ms ago: executing program 4 (id=999): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4ea0, 0x80000, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000032000000ff01000000000000000000000000000183"], 0x28}, 0x20000845) 103.212276ms ago: executing program 4 (id=1000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000100)=0xe) 93.704002ms ago: executing program 4 (id=1001): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/100, 0x64}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/227, 0xe3}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40012001, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 4 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r3 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10000, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3517, 0x9141, 0x52, 0x0, 0xa) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000027bd70007bdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c000280140006000000000000000000000000000000000114000700fe800000000000000000000000000041"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000080000000c0002120100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)=0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000e86700f59b72ed60838b0afb5588090300000000000005000a0000dc0000000004000400280001000100000006e406010100000031440100020000000c0500"/75], 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 23.780957][ T6536] cgroup: Unknown subsys name 'net' [ 23.941012][ T6536] cgroup: Unknown subsys name 'cpuset' [ 23.942915][ T6536] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.096857][ T6536] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 25.264592][ T6555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.266133][ T6555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.266422][ T6557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.268284][ T6557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.270697][ T6557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.270855][ T6557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.273520][ T6557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.274053][ T6557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.274138][ T6557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.275398][ T6557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.275677][ T6557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.275821][ T6557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.276130][ T6557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.276330][ T6557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.283242][ T6561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.283307][ T6561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.286524][ T6558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.287928][ T6562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.289667][ T6558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.291522][ T6557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.293216][ T6562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.294972][ T6558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.296515][ T6562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.301412][ T6562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.305634][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.442604][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 25.501568][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 25.506962][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 25.534402][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.535865][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.537333][ T6553] bridge_slave_0: entered allmulticast mode [ 25.539047][ T6553] bridge_slave_0: entered promiscuous mode [ 25.551888][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.551990][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.552073][ T6553] bridge_slave_1: entered allmulticast mode [ 25.552474][ T6553] bridge_slave_1: entered promiscuous mode [ 25.558021][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 25.573397][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 25.580573][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.580670][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.580727][ T6556] bridge_slave_0: entered allmulticast mode [ 25.581146][ T6556] bridge_slave_0: entered promiscuous mode [ 25.581792][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.581812][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.581855][ T6556] bridge_slave_1: entered allmulticast mode [ 25.582280][ T6556] bridge_slave_1: entered promiscuous mode [ 25.605411][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.610013][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.613276][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.613349][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.613408][ T6559] bridge_slave_0: entered allmulticast mode [ 25.613800][ T6559] bridge_slave_0: entered promiscuous mode [ 25.614481][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.614500][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.614541][ T6559] bridge_slave_1: entered allmulticast mode [ 25.614917][ T6559] bridge_slave_1: entered promiscuous mode [ 25.616111][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.616929][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.643157][ T6553] team0: Port device team_slave_0 added [ 25.651205][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.655160][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.657525][ T6556] team0: Port device team_slave_0 added [ 25.658413][ T6556] team0: Port device team_slave_1 added [ 25.659227][ T6553] team0: Port device team_slave_1 added [ 25.679269][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.679292][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.679305][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.679731][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.680431][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.680503][ T6549] bridge_slave_0: entered allmulticast mode [ 25.681322][ T6549] bridge_slave_0: entered promiscuous mode [ 25.682035][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.682055][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.682102][ T6549] bridge_slave_1: entered allmulticast mode [ 25.682572][ T6549] bridge_slave_1: entered promiscuous mode [ 25.688043][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.688068][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.688127][ T6548] bridge_slave_0: entered allmulticast mode [ 25.688582][ T6548] bridge_slave_0: entered promiscuous mode [ 25.699403][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.699425][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.699896][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.700445][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.700453][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.700466][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.713821][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.713882][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.714320][ T6548] bridge_slave_1: entered allmulticast mode [ 25.715030][ T6548] bridge_slave_1: entered promiscuous mode [ 25.719422][ T6559] team0: Port device team_slave_0 added [ 25.724171][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.724195][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.724210][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.727310][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.728507][ T6559] team0: Port device team_slave_1 added [ 25.734801][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.736069][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.745305][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.756444][ T6553] hsr_slave_0: entered promiscuous mode [ 25.756798][ T6553] hsr_slave_1: entered promiscuous mode [ 25.764340][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.764359][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.764373][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.764913][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.764921][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.764933][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.779620][ T6548] team0: Port device team_slave_0 added [ 25.780873][ T6548] team0: Port device team_slave_1 added [ 25.786227][ T6549] team0: Port device team_slave_0 added [ 25.801101][ T6549] team0: Port device team_slave_1 added [ 25.806547][ T6556] hsr_slave_0: entered promiscuous mode [ 25.807826][ T6556] hsr_slave_1: entered promiscuous mode [ 25.809010][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 25.809910][ T6556] Cannot create hsr debugfs directory [ 25.815547][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.815574][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.815587][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.816192][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.816199][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.816211][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.833642][ T6559] hsr_slave_0: entered promiscuous mode [ 25.834938][ T6559] hsr_slave_1: entered promiscuous mode [ 25.836129][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 25.837104][ T6559] Cannot create hsr debugfs directory [ 25.844663][ T6548] hsr_slave_0: entered promiscuous mode [ 25.844934][ T6548] hsr_slave_1: entered promiscuous mode [ 25.845116][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 25.845124][ T6548] Cannot create hsr debugfs directory [ 25.851595][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.852819][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.856785][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.871130][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.871152][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.871169][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.899723][ T6549] hsr_slave_0: entered promiscuous mode [ 25.900201][ T6549] hsr_slave_1: entered promiscuous mode [ 25.900407][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 25.900417][ T6549] Cannot create hsr debugfs directory [ 25.995536][ T6553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.999737][ T6553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.002499][ T6553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.006569][ T6553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.021902][ T6556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.028146][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.028190][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.028358][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.028388][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.030978][ T6556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.033089][ T6556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.040606][ T6556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.052307][ T6559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.060174][ T6559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.064498][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.064530][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.064603][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.064634][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.069720][ T6559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.071723][ T6559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.097303][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.097336][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.097400][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.097428][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.113436][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.117127][ T6548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.118136][ T6548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.123539][ T6548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.128597][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.132249][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.133644][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.134994][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.136281][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.137817][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.139297][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.147138][ T6548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.156530][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.166375][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.177576][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.177600][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.196685][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.198463][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.201095][ T6549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.206365][ T2144] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.206406][ T2144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.206747][ T2144] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.206762][ T2144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.207067][ T2144] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.207084][ T2144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.207680][ T2144] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.207698][ T2144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.216794][ T6549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.219109][ T6549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.235530][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.235666][ T6549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.259538][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.266476][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.278631][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.292633][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.294391][ T915] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.294425][ T915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.296837][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.300626][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.300663][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.308975][ T6553] veth0_vlan: entered promiscuous mode [ 26.312933][ T2144] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.312969][ T2144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.317724][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.317762][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.322890][ T6553] veth1_vlan: entered promiscuous mode [ 26.345416][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.349109][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.349138][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.366826][ T6556] veth0_vlan: entered promiscuous mode [ 26.380741][ T6556] veth1_vlan: entered promiscuous mode [ 26.387623][ T6553] veth0_macvtap: entered promiscuous mode [ 26.393039][ T6553] veth1_macvtap: entered promiscuous mode [ 26.396282][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.397776][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.401404][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.413770][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.413803][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.416628][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.416656][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.422322][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.422534][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.422550][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.422564][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.428451][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.428910][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.432598][ T6556] veth0_macvtap: entered promiscuous mode [ 26.434564][ T6556] veth1_macvtap: entered promiscuous mode [ 26.449272][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.469218][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.484392][ T6652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.484437][ T6652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.484507][ T6652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.484550][ T6652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.506051][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.506079][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.530837][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.532993][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.533026][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.535599][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.535608][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.541361][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.546197][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.557521][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.557552][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.584637][ T6559] veth0_vlan: entered promiscuous mode [ 26.589624][ T6559] veth1_vlan: entered promiscuous mode [ 26.596407][ T6548] veth0_vlan: entered promiscuous mode [ 26.597996][ T6548] veth1_vlan: entered promiscuous mode [ 26.607573][ T6553] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.619294][ T6548] veth0_macvtap: entered promiscuous mode [ 26.632686][ T6549] veth0_vlan: entered promiscuous mode [ 26.638531][ T6548] veth1_macvtap: entered promiscuous mode [ 26.644043][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.649714][ T6549] veth1_vlan: entered promiscuous mode [ 26.654322][ T6559] veth0_macvtap: entered promiscuous mode [ 26.659508][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.668937][ T6549] veth0_macvtap: entered promiscuous mode [ 26.672335][ T6559] veth1_macvtap: entered promiscuous mode [ 26.682953][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.683094][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.683146][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.683165][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.703307][ T6549] veth1_macvtap: entered promiscuous mode [ 26.707513][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.708474][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.716668][ T6652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.716723][ T6652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.716759][ T6652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.716776][ T6652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.734818][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.735726][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.747157][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.747202][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.747220][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.747233][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.776062][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.776100][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.792719][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.792749][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.818374][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.818400][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.825509][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.825533][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.831814][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.831838][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.851454][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.851480][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.886512][ T6678] loop3: detected capacity change from 0 to 128 [ 26.886894][ T6678] vfat: Bad value for 'shortname' [ 26.979219][ T6681] loop1: detected capacity change from 0 to 32768 [ 26.982426][ T6599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.997062][ T6680] loop4: detected capacity change from 0 to 40427 [ 26.997585][ T6680] ======================================================= [ 26.997585][ T6680] WARNING: The mand mount option has been deprecated and [ 26.997585][ T6680] and is ignored by this kernel. Remove the mand [ 26.997585][ T6680] option from the mount to silence this warning. [ 26.997585][ T6680] ======================================================= [ 27.063647][ T6678] loop3: detected capacity change from 0 to 32768 [ 27.068496][ T6680] F2FS-fs (loop4): invalid crc value [ 27.079281][ T6678] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9 (6678) [ 27.079601][ T6680] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 27.084478][ T6680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.086772][ T6678] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 27.086840][ T6678] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 27.104204][ T6681] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 27.161447][ T6681] XFS (loop1): Ending clean mount [ 27.175170][ T6678] BTRFS info (device loop3): enabling ssd optimizations [ 27.175196][ T6678] BTRFS info (device loop3): turning on async discard [ 27.175209][ T6678] BTRFS info (device loop3): enabling free space tree [ 27.175223][ T6678] BTRFS info (device loop3): use lzo compression, level 1 [ 27.183600][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.199619][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.200388][ T6548] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 27.241902][ T6556] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 27.244201][ T6599] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 27.244240][ T6599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.246397][ T6599] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 27.246412][ T6599] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 27.246420][ T6599] usb 1-1: Manufacturer: syz [ 27.256986][ T6599] usb 1-1: config 0 descriptor?? [ 27.265046][ T6725] fuse: Bad value for 'fd' [ 27.272824][ T6599] Registered IR keymap rc-hauppauge [ 27.290238][ T6555] Bluetooth: hci4: command tx timeout [ 27.325112][ T6732] binfmt_misc: register: failed to install interpreter file . [ 27.339920][ T6599] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 27.341328][ T6599] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 27.341823][ T6599] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 27.349724][ T6734] loop1: detected capacity change from 0 to 256 [ 27.356185][ T6734] exfat: Deprecated parameter 'utf8' [ 27.356229][ T6734] exfat: Deprecated parameter 'utf8' [ 27.367320][ T6734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 27.370006][ T6555] Bluetooth: hci1: command tx timeout [ 27.371189][ T6562] Bluetooth: hci0: command tx timeout [ 27.371306][ T6562] Bluetooth: hci2: command tx timeout [ 27.379886][ T53] Bluetooth: hci3: command tx timeout [ 27.426356][ T6742] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23'. [ 27.471092][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 27.472580][ T6599] usb 1-1: USB disconnect, device number 2 [ 27.494753][ T6747] loop1: detected capacity change from 0 to 4096 [ 27.511519][ T6750] loop3: detected capacity change from 0 to 128 [ 27.521879][ T6750] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.557565][ T6754] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.567905][ T6750] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 27.579620][ T6750] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 27.591625][ T6556] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.673424][ T6762] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.697297][ T6764] loop1: detected capacity change from 0 to 8 [ 27.697645][ T6764] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 27.703832][ T6764] netlink: 27 bytes leftover after parsing attributes in process `syz.1.32'. [ 27.719425][ T6540] udevd[6540]: incorrect cramfs checksum on /dev/loop1 [ 27.728070][ T6540] udevd[6540]: incorrect cramfs checksum on /dev/loop1 [ 27.736424][ T6540] udevd[6540]: incorrect cramfs checksum on /dev/loop1 [ 27.764945][ T6766] loop1: detected capacity change from 0 to 64 [ 27.792621][ T6760] loop3: detected capacity change from 0 to 65536 [ 27.826329][ T6760] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 27.846528][ T6778] binder: tried to use weak ref as strong ref [ 27.847872][ T6778] binder: 6777:6778 Release 1 refcount change on invalid ref 0 ret -22 [ 27.852961][ T6760] XFS (loop3): Ending clean mount [ 27.860754][ T6760] XFS (loop3): Quotacheck needed: Please wait. [ 27.883437][ T6760] XFS (loop3): Quotacheck: Done. [ 27.900713][ T6556] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 27.925421][ T6784] loop1: detected capacity change from 0 to 1024 [ 27.962732][ T6652] hfsplus: b-tree write err: -5, ino 4 [ 27.994255][ T6786] can: request_module (can-proto-3) failed. [ 28.114044][ T6793] loop3: detected capacity change from 0 to 32768 [ 28.128626][ T6804] loop1: detected capacity change from 0 to 8 [ 28.136469][ T6804] unable to read inode lookup table [ 28.137656][ T6801] loop0: detected capacity change from 0 to 1024 [ 28.141317][ T6793] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 28.156005][ T6793] XFS (loop3): Ending clean mount [ 28.166089][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.174838][ T6556] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 28.206481][ T6743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 28.209002][ T6815] netlink: 'syz.3.45': attribute type 2 has an invalid length. [ 28.211399][ T6743] block device autoloading is deprecated and will be removed. [ 28.218202][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 28.228329][ T6815] : entered promiscuous mode [ 28.249026][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.334706][ T6823] loop4: detected capacity change from 0 to 64 [ 28.339274][ T6817] loop1: detected capacity change from 0 to 4096 [ 28.352945][ T6817] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 28.357571][ T6819] loop3: detected capacity change from 0 to 32768 [ 28.360668][ T6819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.49 (6819) [ 28.368256][ T6819] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 28.368306][ T6819] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 28.376635][ T6817] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 28.381609][ T6817] ntfs3(loop1): Failed to load $Extend (-22). [ 28.381643][ T6817] ntfs3(loop1): Failed to initialize $Extend. [ 28.418578][ T6819] BTRFS info (device loop3): enabling ssd optimizations [ 28.418607][ T6819] BTRFS info (device loop3): turning on async discard [ 28.418632][ T6819] BTRFS info (device loop3): enabling free space tree [ 28.446073][ T6556] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 28.517228][ T6842] loop4: detected capacity change from 0 to 32768 [ 28.655009][ T6859] loop1: detected capacity change from 0 to 164 [ 28.674898][ T6862] capability: warning: `syz.4.59' uses deprecated v2 capabilities in a way that may be insecure [ 28.677642][ T6857] loop3: detected capacity change from 0 to 2048 [ 28.681517][ T6863] mmap: syz.0.60 (6863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.707633][ T6857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 28.728681][ T6870] loop4: detected capacity change from 0 to 512 [ 28.738653][ T6870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0042] [ 28.738703][ T6870] System zones: 1-12 [ 28.743461][ T6870] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.62: Directory hole found for htree index block 0 [ 28.747667][ T6870] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 28.749371][ T6870] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.62: Directory hole found for htree index block 0 [ 28.752756][ T6870] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 28.754368][ T6873] loop0: detected capacity change from 0 to 512 [ 28.754648][ T6873] EXT4-fs: Ignoring removed bh option [ 28.757694][ T6870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.761534][ T6873] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.761568][ T6873] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.761588][ T6873] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 28.827599][ T6875] loop1: detected capacity change from 0 to 32768 [ 28.832989][ T6875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.64 (6875) [ 28.836457][ T6875] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 28.836521][ T6875] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 28.847186][ T6873] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 28.849969][ T6870] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 28.850260][ T6873] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 28.863085][ T6873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.882029][ T6887] Invalid ELF header type: 3 != 1 [ 28.896053][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.904197][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.954379][ T6901] loop4: detected capacity change from 0 to 1024 [ 28.960968][ T6902] loop2: detected capacity change from 0 to 8 [ 28.961417][ T6902] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 28.963984][ T6875] BTRFS info (device loop1): enabling ssd optimizations [ 28.964006][ T6875] BTRFS info (device loop1): turning on async discard [ 28.964028][ T6875] BTRFS info (device loop1): enabling free space tree [ 28.964041][ T6875] BTRFS info (device loop1): use lzo compression, level 1 [ 28.980628][ T6901] hfsplus: unable to load nls mapping "9so88u9-2" [ 28.991395][ T6901] openvswitch: netlink: Tunnel attr 15933 out of range max 16 [ 29.031266][ T6548] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 29.062356][ T6701] udevd[6701]: incorrect cramfs checksum on /dev/loop2 [ 29.100759][ T6667] udevd[6667]: incorrect cramfs checksum on /dev/loop2 [ 29.106391][ T6749] udevd[6749]: incorrect cramfs checksum on /dev/loop2 [ 29.147051][ T6922] capability: warning: `syz.2.76' uses 32-bit capabilities (legacy support in use) [ 29.150627][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 29.285697][ T6924] loop1: detected capacity change from 0 to 40427 [ 29.287182][ T6924] F2FS-fs (loop1): build fault injection rate: 14 [ 29.287192][ T6924] F2FS-fs (loop1): build fault injection type: 0xe4 [ 29.290959][ T6924] F2FS-fs (loop1): invalid crc value [ 29.295574][ T6924] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 29.299723][ T6931] loop0: detected capacity change from 0 to 8 [ 29.308675][ T6931] SQUASHFS error: zlib decompression failed, data probably corrupt [ 29.308711][ T6931] SQUASHFS error: Failed to read block 0x9b: -5 [ 29.308722][ T6931] SQUASHFS error: Unable to read metadata cache entry [99] [ 29.308732][ T6931] SQUASHFS error: Unable to read inode 0x127 [ 29.308956][ T6924] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 29.309604][ T6924] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.313405][ T6924] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x674/0x1820 [ 29.348534][ T6923] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 29.349533][ T6931] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 29.349545][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 29.351531][ T6931] : entered promiscuous mode [ 29.356803][ T6938] process 'syz.4.83' launched './file1' with NULL argv: empty string added [ 29.370163][ T53] Bluetooth: hci4: command tx timeout [ 29.400238][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.86'. [ 29.403229][ T6548] syz-executor: attempt to access beyond end of device [ 29.403229][ T6548] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.407852][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 29.407870][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 29.407875][ T6548] Call trace: [ 29.407879][ T6548] show_stack+0x2c/0x3c (C) [ 29.407892][ T6548] __dump_stack+0x30/0x40 [ 29.407901][ T6548] dump_stack_lvl+0xd8/0x12c [ 29.407906][ T6548] dump_stack+0x1c/0x28 [ 29.407911][ T6548] f2fs_handle_critical_error+0x34c/0x4b8 [ 29.407919][ T6548] f2fs_stop_checkpoint+0x5c/0x70 [ 29.407924][ T6548] f2fs_write_end_io+0x768/0xa70 [ 29.407931][ T6548] bio_endio+0x858/0x894 [ 29.407936][ T6548] submit_bio_noacct+0xd64/0x186c [ 29.407943][ T6548] submit_bio+0x3b4/0x550 [ 29.407948][ T6548] f2fs_submit_write_bio+0x13c/0x324 [ 29.407954][ T6548] __submit_merged_bio+0x254/0x704 [ 29.407960][ T6548] __submit_merged_write_cond+0x23c/0x4ac [ 29.407966][ T6548] f2fs_write_data_pages+0x1d28/0x2634 [ 29.407972][ T6548] do_writepages+0x270/0x468 [ 29.407980][ T6548] filemap_fdatawrite+0x14c/0x1f4 [ 29.407985][ T6548] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 29.407990][ T6548] f2fs_write_checkpoint+0x70c/0x1c30 [ 29.407996][ T6548] kill_f2fs_super+0x228/0x594 [ 29.408002][ T6548] deactivate_locked_super+0xc4/0x12c [ 29.408017][ T6548] deactivate_super+0xe0/0x100 [ 29.408023][ T6548] cleanup_mnt+0x31c/0x3ac [ 29.408031][ T6548] __cleanup_mnt+0x20/0x30 [ 29.408037][ T6548] task_work_run+0x1dc/0x260 [ 29.408043][ T6548] exit_to_user_mode_loop+0xfc/0x178 [ 29.408050][ T6548] el0_svc+0x170/0x254 [ 29.408058][ T6548] el0t_64_sync_handler+0x84/0x12c [ 29.408064][ T6548] el0t_64_sync+0x198/0x19c [ 29.430600][ T6548] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 29.443145][ T6944] loop4: detected capacity change from 0 to 4096 [ 29.449965][ T53] Bluetooth: hci3: command tx timeout [ 29.450801][ T53] Bluetooth: hci1: command tx timeout [ 29.450817][ T53] Bluetooth: hci2: command tx timeout [ 29.450830][ T53] Bluetooth: hci0: command tx timeout [ 29.458437][ T6946] loop2: detected capacity change from 0 to 256 [ 29.486301][ T6948] loop0: detected capacity change from 0 to 512 [ 29.495048][ T6946] FAT-fs (loop2): Directory bread(block 64) failed [ 29.495081][ T6946] FAT-fs (loop2): Directory bread(block 65) failed [ 29.495117][ T6946] FAT-fs (loop2): Directory bread(block 66) failed [ 29.495133][ T6946] FAT-fs (loop2): Directory bread(block 67) failed [ 29.495158][ T6946] FAT-fs (loop2): Directory bread(block 68) failed [ 29.495171][ T6946] FAT-fs (loop2): Directory bread(block 69) failed [ 29.495195][ T6946] FAT-fs (loop2): Directory bread(block 70) failed [ 29.495208][ T6946] FAT-fs (loop2): Directory bread(block 71) failed [ 29.495231][ T6946] FAT-fs (loop2): Directory bread(block 72) failed [ 29.495244][ T6946] FAT-fs (loop2): Directory bread(block 73) failed [ 29.500188][ T6948] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.89: bad orphan inode 15 [ 29.500602][ T6948] ext4_test_bit(bit=14, block=5) = 0 [ 29.501058][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.503796][ T6944] ntfs3(loop4): failed to convert "0080" to macromanian [ 29.504576][ T6944] ntfs3(loop4): failed to convert name for inode 1e. [ 29.504695][ T6944] ntfs3(loop4): ino=1f, mi_enum_attr [ 29.504707][ T6944] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 29.510823][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 29.554942][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.634404][ T6953] loop3: detected capacity change from 0 to 4096 [ 29.666862][ T6963] loop0: detected capacity change from 0 to 512 [ 29.667192][ T6963] EXT4-fs: Ignoring removed orlov option [ 29.681030][ T6963] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 29.689285][ T6963] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.95: corrupted in-inode xattr: e_value size too large [ 29.691722][ T6963] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 29.692430][ T6963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.706511][ T6967] loop1: detected capacity change from 0 to 4096 [ 29.736115][ T6967] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 29.762044][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.764387][ T6972] loop4: detected capacity change from 0 to 512 [ 29.771378][ T6972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.778803][ T6972] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.788787][ T6972] EXT4-fs (loop4): 1 truncate cleaned up [ 29.789255][ T6972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.831134][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 29.892291][ T6980] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 29.929155][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.942432][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 29.945090][ T6982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 30.054252][ T6996] loop1: detected capacity change from 0 to 256 [ 30.084327][ T7002] loop0: detected capacity change from 0 to 64 [ 30.146160][ T588] ntfs3(loop3): ino=5, mi_enum_attr [ 30.152746][ T7001] loop2: detected capacity change from 0 to 32768 [ 30.154828][ T6996] FAT-fs (loop1): Directory bread(block 64) failed [ 30.154879][ T6996] FAT-fs (loop1): Directory bread(block 65) failed [ 30.154958][ T6996] FAT-fs (loop1): Directory bread(block 66) failed [ 30.154977][ T6996] FAT-fs (loop1): Directory bread(block 67) failed [ 30.155011][ T6996] FAT-fs (loop1): Directory bread(block 68) failed [ 30.155035][ T6996] FAT-fs (loop1): Directory bread(block 69) failed [ 30.155066][ T6996] FAT-fs (loop1): Directory bread(block 70) failed [ 30.155084][ T6996] FAT-fs (loop1): Directory bread(block 71) failed [ 30.155122][ T6996] FAT-fs (loop1): Directory bread(block 72) failed [ 30.155138][ T6996] FAT-fs (loop1): Directory bread(block 73) failed [ 30.160424][ T7001] (syz.2.109,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 30.161456][ T7001] (syz.2.109,7001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 30.188967][ T7001] JBD2: Ignoring recovery information on journal [ 30.203599][ T7001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 30.224151][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 30.353910][ T6559] ocfs2: Unmounting device (7,2) on (node local) [ 30.423230][ T6599] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.453463][ T7024] loop0: detected capacity change from 0 to 32768 [ 30.455312][ T7024] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.121 (7024) [ 30.458559][ T7024] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 30.458606][ T7024] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 30.471561][ T6599] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.528341][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.124'. [ 30.566902][ T7024] BTRFS info (device loop0): rebuilding free space tree [ 30.616324][ T7024] BTRFS info (device loop0): disabling free space tree [ 30.616362][ T7024] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 30.616383][ T7024] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 30.623309][ T7024] BTRFS info (device loop0): setting nodatasum [ 30.623334][ T7024] BTRFS info (device loop0): setting nodatacow [ 30.623353][ T7024] BTRFS info (device loop0): turning off barriers [ 30.623366][ T7024] BTRFS info (device loop0): turning on async discard [ 30.623379][ T7024] BTRFS info (device loop0): force clearing of disk cache [ 30.628830][ T7034] fido_id[7034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.794859][ T6553] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 30.811002][ T6995] overlayfs: statfs failed on './file0' [ 30.943807][ T7077] loop0: detected capacity change from 0 to 4096 [ 31.065896][ T7081] loop1: detected capacity change from 0 to 65536 [ 31.073371][ T7077] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 31.080584][ T7081] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 31.085577][ T7077] ntfs3(loop0): Failed to load $Extend (-22). [ 31.085608][ T7077] ntfs3(loop0): Failed to initialize $Extend. [ 31.097485][ T7081] XFS (loop1): Ending clean mount [ 31.100039][ T7081] XFS (loop1): Quotacheck needed: Please wait. [ 31.120761][ T7081] XFS (loop1): Quotacheck: Done. [ 31.124876][ T7091] loop4: detected capacity change from 0 to 256 [ 31.126215][ T7091] exfat: Deprecated parameter 'utf8' [ 31.137540][ T7091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 31.153319][ T6548] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 31.173880][ T7093] loop0: detected capacity change from 0 to 256 [ 31.174318][ T7093] exfat: Deprecated parameter 'namecase' [ 31.174330][ T7093] exfat: Deprecated parameter 'namecase' [ 31.174345][ T7093] exfat: Deprecated parameter 'utf8' [ 31.195514][ T7093] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 31.222444][ T7095] loop4: detected capacity change from 0 to 16 [ 31.222768][ T7095] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 31.391859][ T7108] loop0: detected capacity change from 0 to 512 [ 31.404387][ T7108] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.146: inode has both inline data and extents flags [ 31.407366][ T7108] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.146: couldn't read orphan inode 15 (err -117) [ 31.420666][ T7108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.442016][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.450278][ T53] Bluetooth: hci4: command tx timeout [ 31.530393][ T53] Bluetooth: hci0: command tx timeout [ 31.530426][ T53] Bluetooth: hci2: command tx timeout [ 31.530451][ T53] Bluetooth: hci1: command tx timeout [ 31.530468][ T53] Bluetooth: hci3: command tx timeout [ 31.654177][ T7130] loop2: detected capacity change from 0 to 32768 [ 31.664890][ T7140] loop0: detected capacity change from 0 to 1764 [ 31.697587][ T7130] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 31.699640][ T7144] sp0: Synchronizing with TNC [ 31.790153][ T7153] loop0: detected capacity change from 0 to 32768 [ 31.803696][ T7130] XFS (loop2): Ending clean mount [ 31.804476][ T7130] XFS (loop2): Quotacheck needed: Please wait. [ 31.822870][ T7152] loop3: detected capacity change from 0 to 40427 [ 31.824211][ T7152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 31.824229][ T7152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 31.832051][ T7144] Falling back ldisc for ptm0. [ 31.843506][ T7153] JBD2: Ignoring recovery information on journal [ 31.846604][ T7152] F2FS-fs (loop3): invalid crc value [ 31.854910][ T7153] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 31.862701][ T7130] XFS (loop2): Quotacheck: Done. [ 31.873994][ T7152] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 31.880990][ T7152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.881024][ T7152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.904224][ T6553] ocfs2: Unmounting device (7,0) on (node local) [ 31.908371][ T6559] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 32.003912][ T7166] mkiss: ax0: crc mode is auto. [ 32.075790][ T7172] loop0: detected capacity change from 0 to 8 [ 32.092897][ T7166] Falling back ldisc for ptm0. [ 32.210328][ T7178] loop4: detected capacity change from 0 to 32768 [ 32.210710][ T7178] XFS (loop4): sunit and swidth options incompatible with the noalign option [ 32.248204][ T7184] loop2: detected capacity change from 0 to 7 [ 32.249407][ T7184] loop2: [ 32.253242][ T7184] loop2: partition table partially beyond EOD, truncated [ 32.272329][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272356][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272374][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272382][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272388][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272395][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272401][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272407][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.272414][ T6599] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 32.295462][ T6599] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 32.522591][ T1857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.526211][ T7227] __nla_validate_parse: 4 callbacks suppressed [ 32.526245][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 32.623787][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.624129][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.669884][ T1857] usb 1-1: Using ep0 maxpacket: 8 [ 32.671597][ T1857] usb 1-1: config 0 has no interfaces? [ 32.673679][ T1857] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 32.673707][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.673738][ T1857] usb 1-1: Product: syz [ 32.673753][ T1857] usb 1-1: Manufacturer: syz [ 32.673763][ T1857] usb 1-1: SerialNumber: syz [ 32.678151][ T1857] usb 1-1: config 0 descriptor?? [ 32.915665][ T6612] usb 1-1: USB disconnect, device number 3 [ 33.222021][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.225160][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.530620][ T6562] Bluetooth: hci4: command 0x0419 tx timeout [ 33.603840][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.606604][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.609865][ T6562] Bluetooth: hci3: command tx timeout [ 33.609896][ T6562] Bluetooth: hci1: command tx timeout [ 33.609931][ T6562] Bluetooth: hci2: command tx timeout [ 33.609950][ T6562] Bluetooth: hci0: command tx timeout [ 33.779707][ T31] audit: type=1326 audit(33.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7261 comm="syz.3.205" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb755b9e8 code=0x0 [ 34.092942][ T1857] IPVS: starting estimator thread 0... [ 34.189978][ T7280] IPVS: using max 69 ests per chain, 165600 per kthread [ 34.213381][ T7289] ip6gretap0: entered promiscuous mode [ 34.290631][ T7289] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 34.333918][ T7290] Zero length message leads to an empty skb [ 34.355391][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.358776][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.736924][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.737090][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.056071][ T7335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.232'. [ 35.058098][ T7335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.232'. [ 35.059942][ T7335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.232'. [ 35.112160][ T1857] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.206584][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.236'. [ 35.621570][ T6555] Bluetooth: hci4: command 0x0419 tx timeout [ 35.718669][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.241'. [ 35.718702][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.241'. [ 35.738527][ T7359] erspan0: entered promiscuous mode [ 35.739000][ T7359] gretap0: entered promiscuous mode [ 35.918239][ T7380] loop2: detected capacity change from 0 to 7 [ 35.919582][ T6540] Dev loop2: unable to read RDB block 7 [ 35.919618][ T6540] loop2: AHDI p1 p2 p3 [ 35.919632][ T6540] loop2: partition table partially beyond EOD, truncated [ 35.919714][ T6540] loop2: p1 start 1601398130 is beyond EOD, truncated [ 35.919722][ T6540] loop2: p2 start 1702059890 is beyond EOD, truncated [ 35.931194][ T7380] Dev loop2: unable to read RDB block 7 [ 35.934323][ T7380] loop2: AHDI p1 p2 p3 [ 35.935547][ T7380] loop2: partition table partially beyond EOD, truncated [ 35.937252][ T7380] loop2: p1 start 1601398130 is beyond EOD, truncated [ 35.938454][ T7380] loop2: p2 start 1702059890 is beyond EOD, truncated [ 36.017990][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 36.063053][ T7392] "syz.4.255" (7392) uses obsolete ecb(arc4) skcipher [ 36.090958][ T6612] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.106615][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.106786][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.142976][ T7411] netlink: 'syz.2.263': attribute type 3 has an invalid length. [ 36.176963][ T7415] syz.2.265 uses obsolete (PF_INET,SOCK_PACKET) [ 36.259901][ T6612] usb 1-1: Using ep0 maxpacket: 32 [ 36.264568][ T6612] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 36.267240][ T6612] usb 1-1: config 1 interface 0 has no altsetting 0 [ 36.270778][ T6612] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 36.272328][ T6612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.273887][ T6612] usb 1-1: Product: syz [ 36.274609][ T6612] usb 1-1: Manufacturer: syz [ 36.275606][ T6612] usb 1-1: SerialNumber: syz [ 36.485489][ T6612] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4 [ 36.491021][ T6612] usb 1-1: USB disconnect, device number 4 [ 36.541203][ T6612] appletouch 1-1:1.0: input: appletouch disconnected [ 36.611333][ T7422] fuse: root generation should be zero [ 36.613999][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 36.733540][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.734760][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.865940][ T7438] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 37.061844][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.199470][ T7444] bridge_slave_1 (unregistering): left allmulticast mode [ 37.199495][ T7444] bridge_slave_1 (unregistering): left promiscuous mode [ 37.199528][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.563474][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.570075][ T2362] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.572081][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.577596][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.577773][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.719806][ T2362] usb 1-1: Using ep0 maxpacket: 8 [ 37.723640][ T2362] usb 1-1: config index 0 descriptor too short (expected 804, got 36) [ 37.725234][ T2362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.727136][ T2362] usb 1-1: config 1 has no interfaces? [ 37.729030][ T2362] usb 1-1: config index 1 descriptor too short (expected 804, got 36) [ 37.730760][ T2362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.732686][ T2362] usb 1-1: config 1 has no interfaces? [ 37.735286][ T2362] usb 1-1: config index 2 descriptor too short (expected 804, got 36) [ 37.736837][ T2362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.738876][ T2362] usb 1-1: config 1 has no interfaces? [ 37.742534][ T2362] usb 1-1: string descriptor 0 read error: -22 [ 37.743823][ T2362] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 37.745582][ T2362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.971768][ T6612] usb 1-1: USB disconnect, device number 5 [ 38.567889][ T7527] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 39.080541][ T6612] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.229799][ T6612] usb 1-1: Using ep0 maxpacket: 32 [ 39.237548][ T6612] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.238908][ T6612] usb 1-1: config 0 has no interface number 0 [ 39.241629][ T6612] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.243121][ T6612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.244417][ T6612] usb 1-1: Product: syz [ 39.245109][ T6612] usb 1-1: Manufacturer: syz [ 39.245863][ T6612] usb 1-1: SerialNumber: syz [ 39.247995][ T6612] usb 1-1: config 0 descriptor?? [ 39.252906][ T6612] smsc95xx v2.0.0 [ 39.253564][ T6612] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 39.255420][ T6612] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 39.482290][ T6612] usb 1-1: USB disconnect, device number 6 [ 39.707488][ T7571] usb usb8: usbfs: process 7571 (syz.4.321) did not claim interface 0 before use [ 39.721718][ T7571] xt_connbytes: Forcing CT accounting to be enabled [ 39.723347][ T7571] Cannot find del_set index 1 as target [ 40.148568][ T7586] mmap: syz.0.328 (7586): VmData 37507072 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 40.164692][ T7588] syz_tun: entered allmulticast mode [ 40.185406][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 40.187376][ T24] hid_parser_main: 7 callbacks suppressed [ 40.187386][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 40.189041][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.549202][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.643224][ T7601] tipc: Started in network mode [ 40.643253][ T7601] tipc: Node identity d2aab7148b75, cluster identity 4711 [ 40.643350][ T7601] tipc: Enabled bearer , priority 0 [ 40.645119][ T7601] syzkaller0: entered promiscuous mode [ 40.645138][ T7601] syzkaller0: entered allmulticast mode [ 40.702812][ T24] usb 1-1: config 0 has no interfaces? [ 40.706147][ T7605] tipc: Resetting bearer [ 40.708340][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.708841][ T7600] tipc: Resetting bearer [ 40.711714][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.713238][ T24] usb 1-1: SerialNumber: syz [ 40.717303][ T7600] tipc: Disabling bearer [ 40.718799][ T24] usb 1-1: config 0 descriptor?? [ 40.738882][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.739084][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.966496][ T24] IPVS: starting estimator thread 0... [ 41.050833][ T7618] IPVS: using max 66 ests per chain, 158400 per kthread [ 41.755093][ T7644] loop3: detected capacity change from 0 to 1024 [ 41.774365][ T7644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.785496][ T7644] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.347: inode #4: comm syz.3.347: iget: illegal inode # [ 41.789713][ T7644] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.347: error while reading EA inode 4 err=-117 [ 41.810919][ T6556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845353][ T7649] netlink: 56 bytes leftover after parsing attributes in process `syz.3.348'. [ 41.874300][ T7651] loop3: detected capacity change from 0 to 8 [ 42.264677][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.266521][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.204803][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.218417][ T2362] usb 1-1: USB disconnect, device number 7 [ 43.606407][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.606575][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.559393][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.559555][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.042301][ T7776] batadv0: entered promiscuous mode [ 46.045431][ T7776] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 46.152643][ T7784] netlink: 'syz.4.397': attribute type 13 has an invalid length. [ 46.265011][ T31] audit: type=1326 audit(46.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7785 comm="syz.1.399" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x0 [ 46.620327][ T7806] ksmbd: Unknown IPC event: 0, ignore. [ 47.320441][ T7823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.320619][ T7823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.332798][ T7823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.339460][ T7823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.339500][ T7823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.342479][ T7823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.344340][ T7823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.344387][ T7823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.348946][ T7823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.351880][ T7823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 47.351908][ T7823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.355556][ T7823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.357794][ T7823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 47.357825][ T7823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 47.363780][ T7823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 47.797799][ T7865] sctp: [Deprecated]: syz.4.429 (pid 7865) Use of int in max_burst socket option deprecated. [ 47.797799][ T7865] Use struct sctp_assoc_value instead [ 47.896426][ T7877] vcan0: tx address claim with dlc 0 [ 48.129698][ T7881] hub 9-0:1.0: USB hub found [ 48.131134][ T7881] hub 9-0:1.0: 8 ports detected [ 48.734851][ T7906] binder: 7905:7906 tried to acquire reference to desc 0, got 1 instead [ 48.737688][ T7906] tipc: Started in network mode [ 48.738900][ T7906] tipc: Node identity 2e7e3f72d564, cluster identity 4711 [ 48.741221][ T7906] tipc: Enabled bearer , priority 0 [ 48.742876][ T7906] syzkaller0: entered promiscuous mode [ 48.744034][ T7906] syzkaller0: entered allmulticast mode [ 48.748837][ T7906] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 48.765888][ T7906] tipc: Resetting bearer [ 48.769018][ T7905] tipc: Resetting bearer [ 48.776011][ T7905] tipc: Disabling bearer [ 48.814935][ T1857] binder: send failed reply for transaction 7 to 7905:7906 [ 48.830499][ T1857] binder: undelivered TRANSACTION_COMPLETE [ 48.831755][ T1857] binder: undelivered TRANSACTION_ERROR: 29189 [ 49.369860][ T6555] Bluetooth: hci4: command 0x0419 tx timeout [ 49.369874][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.369911][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 49.369934][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 49.369951][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 50.067832][ T7959] input: syz1 as /devices/virtual/input/input5 [ 50.309402][ T31] audit: type=1326 audit(50.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.1.475" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x0 [ 50.403216][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.403397][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.730850][ T8006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.482'. [ 51.450249][ T6555] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.450260][ T6562] Bluetooth: hci4: command 0x0419 tx timeout [ 51.450283][ T6562] Bluetooth: hci1: command 0x0c1a tx timeout [ 51.450315][ T6562] Bluetooth: hci2: command 0x0c1a tx timeout [ 51.450336][ T6562] Bluetooth: hci3: command 0x0c1a tx timeout [ 51.549810][ T6589] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.622294][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.622457][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.750985][ T6589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.751019][ T6589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.751043][ T6589] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.751066][ T6589] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.751081][ T6589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.778670][ T6589] usb 1-1: config 0 descriptor?? [ 52.214192][ T6589] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.271399][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.271563][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.550452][ T6599] usb 1-1: USB disconnect, device number 8 [ 52.875012][ T8066] loop1: detected capacity change from 0 to 40427 [ 52.876548][ T8066] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 52.898478][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 52.925456][ T8070] netlink: 7 bytes leftover after parsing attributes in process `syz.1.506'. [ 53.166676][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.167004][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.529828][ T6555] Bluetooth: hci0: command 0x0c1a tx timeout [ 53.543842][ T6555] Bluetooth: hci3: command 0x0c1a tx timeout [ 53.545293][ T6555] Bluetooth: hci2: command 0x0c1a tx timeout [ 53.546993][ T6555] Bluetooth: hci1: command 0x0c1a tx timeout [ 53.547999][ T6555] Bluetooth: hci4: command 0x0419 tx timeout [ 53.577352][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'. [ 53.649912][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 53.802245][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.804156][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.806000][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.807718][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.815087][ T8081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.821664][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.027621][ T24] usb 1-1: USB disconnect, device number 9 [ 54.840780][ T8170] netlink: 71 bytes leftover after parsing attributes in process `syz.3.546'. [ 55.071225][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 55.074867][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 55.647416][ T8213] tunl0: Caught tx_queue_len zero misconfig [ 56.452364][ T8250] loop5: detected capacity change from 0 to 9127 [ 56.457838][ T6540] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 56.461538][ T6540] Buffer I/O error on dev loop5, logical block 1140, async page read [ 56.466189][ T6540] Buffer I/O error on dev loop5, logical block 1140, async page read [ 56.470606][ T8250] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 56.474385][ T6540] Buffer I/O error on dev loop5, logical block 1140, async page read [ 56.578057][ T6190] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 56.592811][ T6540] Buffer I/O error on dev loop5, logical block 1140, async page read [ 56.605970][ T6540] Buffer I/O error on dev loop5, logical block 1140, async page read [ 57.188819][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.188994][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.788329][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 57.789903][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 57.790884][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 57.791105][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 58.320900][ T31] audit: type=1326 audit(58.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.324861][ T31] audit: type=1326 audit(58.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340134][ T31] audit: type=1326 audit(58.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340179][ T31] audit: type=1326 audit(58.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340202][ T31] audit: type=1326 audit(58.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340220][ T31] audit: type=1326 audit(58.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340236][ T31] audit: type=1326 audit(58.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340252][ T31] audit: type=1326 audit(58.300:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340268][ T31] audit: type=1326 audit(58.300:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.340283][ T31] audit: type=1326 audit(58.300:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 58.788444][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 58.820762][ T6621] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 58.971842][ T6621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.971869][ T6621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.971896][ T6621] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 58.971910][ T6621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.979577][ T6621] usb 1-1: config 0 descriptor?? [ 59.391864][ T6621] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 59.394262][ T6621] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 59.591112][ T6621] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 59.837989][ T8353] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 59.840166][ T8353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 59.998942][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999004][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999049][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999076][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999100][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999123][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999145][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999166][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999201][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999221][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999242][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999263][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999283][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999304][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999324][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999344][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999375][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999395][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999416][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999436][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999456][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999477][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999497][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999518][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999538][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999559][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999580][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999600][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999621][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 59.999641][ T6621] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 60.066352][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 60.119484][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.120873][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.124551][ T8380] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 60.197064][ T8305] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 60.198527][ T6621] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 60.203580][ T6621] usb 1-1: USB disconnect, device number 10 [ 60.297462][ T8396] input: syz0 as /devices/virtual/input/input6 [ 60.454464][ T8407] lo: entered allmulticast mode [ 61.110080][ T8442] Cannot find del_set index 1 as target [ 62.299864][ T6589] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 62.327037][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 62.348538][ T8490] veth3: entered promiscuous mode [ 62.352359][ T8490] bond2: (slave veth3): Enslaving as an active interface with an up link [ 62.355334][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 62.356393][ T8490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.438520][ T8505] syzkaller1: entered promiscuous mode [ 62.439650][ T8505] syzkaller1: entered allmulticast mode [ 62.442767][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 62.450912][ T6589] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 62.450943][ T6589] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 62.450963][ T6589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.457089][ T6589] usb 1-1: config 0 descriptor?? [ 62.459097][ T8476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.665079][ T6589] ath6kl: Failed to submit usb control message: -71 [ 62.665110][ T6589] ath6kl: unable to send the bmi data to the device: -71 [ 62.665128][ T6589] ath6kl: Unable to send get target info: -71 [ 62.669290][ T6589] ath6kl: Failed to init ath6kl core: -71 [ 62.673841][ T6589] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 62.676955][ T6589] usb 1-1: USB disconnect, device number 11 [ 62.944955][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.945126][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.549241][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 63.662293][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 64.491273][ T9] cfg80211: failed to load regulatory.db [ 64.501207][ T2448] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501256][ T2448] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.226932][ T8609] misc userio: Can't change port type on an already running userio instance [ 65.273959][ T8619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 65.273996][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 65.274007][ T8619] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 65.280640][ T8620] ucma_write: process 295 (syz.1.724) changed security contexts after opening file descriptor, this is not allowed. [ 65.345468][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 65.353031][ T8636] dummy0: entered promiscuous mode [ 65.353107][ T8636] macvtap1: entered promiscuous mode [ 65.353166][ T8636] macvtap1: entered allmulticast mode [ 65.353172][ T8636] dummy0: entered allmulticast mode [ 65.391393][ T8636] dummy0: left allmulticast mode [ 65.391496][ T8636] dummy0: left promiscuous mode [ 65.416294][ T8638] erspan0: entered promiscuous mode [ 65.416447][ T8638] macsec1: entered allmulticast mode [ 65.416457][ T8638] erspan0: entered allmulticast mode [ 65.417721][ T8638] erspan0: left allmulticast mode [ 65.417767][ T8638] erspan0: left promiscuous mode [ 65.503474][ T8655] syzkaller1: entered promiscuous mode [ 65.503502][ T8655] syzkaller1: entered allmulticast mode [ 65.610877][ T8676] geneve1: entered promiscuous mode [ 65.614060][ T8676] geneve1: left promiscuous mode [ 65.952318][ T8706] syzkaller0: entered promiscuous mode [ 65.952350][ T8706] syzkaller0: entered allmulticast mode [ 66.123904][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.124114][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.155139][ T8718] ip6gretap0: entered promiscuous mode [ 66.156869][ T8718] bridge0: port 3(macvlan2) entered blocking state [ 66.158226][ T8718] bridge0: port 3(macvlan2) entered disabled state [ 66.160777][ T8718] macvlan2: entered allmulticast mode [ 66.162153][ T8718] ip6gretap0: entered allmulticast mode [ 66.163816][ T8718] macvlan2: entered promiscuous mode [ 66.165310][ T8718] bridge0: port 3(macvlan2) entered blocking state [ 66.165367][ T8718] bridge0: port 3(macvlan2) entered forwarding state [ 66.313349][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.313510][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.819792][ T6589] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 67.000170][ T8770] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 67.017292][ T8774] Cannot find set identified by id 65534 to match [ 67.042417][ T8777] syzkaller1: entered promiscuous mode [ 67.043511][ T8777] syzkaller1: entered allmulticast mode [ 67.311272][ T8818] @: renamed from vlan0 (while UP) [ 67.435720][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 67.437825][ T8835] vlan0: entered promiscuous mode [ 67.438314][ T8835] syz_tun: entered promiscuous mode [ 67.541426][ T6589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.543120][ T6589] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 67.545202][ T6589] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 67.546584][ T6589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.548440][ T8839] syzkaller1: entered promiscuous mode [ 67.548467][ T8839] syzkaller1: entered allmulticast mode [ 67.551375][ T6589] usb 1-1: config 0 descriptor?? [ 67.755424][ T6589] usbhid 1-1:0.0: can't add hid device: -71 [ 67.756524][ T6589] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.759563][ T6589] usb 1-1: USB disconnect, device number 12 [ 68.077470][ T8866] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 68.240557][ T8876] usb usb8: usbfs: process 8876 (syz.4.821) did not claim interface 0 before use [ 68.354118][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.354289][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.920257][ T8905] vlan0: entered promiscuous mode [ 68.981172][ T8910] Option ' ' to dns_resolver key: bad/missing value [ 69.910853][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 70.625676][ T6555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.627847][ T6555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.630279][ T6555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.632490][ T6555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.633556][ T6555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.704651][ T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.743734][ T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.827612][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 70.854662][ T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.873004][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.873083][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.873134][ T8978] bridge_slave_0: entered allmulticast mode [ 70.873573][ T8978] bridge_slave_0: entered promiscuous mode [ 70.874549][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.874590][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.874635][ T8978] bridge_slave_1: entered allmulticast mode [ 70.875205][ T8978] bridge_slave_1: entered promiscuous mode [ 70.889323][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.892429][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.899585][ T8978] team0: Port device team_slave_0 added [ 70.906174][ T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.909964][ T6589] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 70.915496][ T8978] team0: Port device team_slave_1 added [ 70.926948][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.928378][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.930645][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.936139][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.937359][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.941671][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.954504][ T8978] hsr_slave_0: entered promiscuous mode [ 70.955963][ T8978] hsr_slave_1: entered promiscuous mode [ 70.957251][ T8978] debugfs: 'hsr0' already exists in 'hsr' [ 70.958327][ T8978] Cannot create hsr debugfs directory [ 71.023029][ T15] bridge_slave_1: left allmulticast mode [ 71.024311][ T15] bridge_slave_1: left promiscuous mode [ 71.025971][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.030522][ T15] bridge_slave_0: left allmulticast mode [ 71.031492][ T15] bridge_slave_0: left promiscuous mode [ 71.032530][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.061095][ T6589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.063020][ T6589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.064853][ T6589] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 71.066610][ T6589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.069509][ T6589] usb 1-1: config 0 descriptor?? [ 71.336345][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.362405][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.400931][ T15] bond0 (unregistering): Released all slaves [ 71.412500][ T8978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.416483][ T8978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.424407][ T8978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.426163][ T8978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.480588][ T6589] itetech 0003:06CB:2968.0007: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.0-1/input0 [ 71.531252][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.543999][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.574118][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.578582][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.583087][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.583125][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.674091][ T2144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.674128][ T2144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.917577][ T15] hsr_slave_0: left promiscuous mode [ 71.918630][ T15] hsr_slave_1: left promiscuous mode [ 71.918976][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.918994][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.921004][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.921014][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.929031][ T15] veth1_macvtap: left promiscuous mode [ 71.929101][ T15] veth0_macvtap: left promiscuous mode [ 71.929564][ T15] veth1_vlan: left promiscuous mode [ 71.929631][ T15] veth0_vlan: left promiscuous mode [ 72.105441][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 72.105480][ T31] audit: type=1326 audit(72.080:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 72.106717][ T31] audit: type=1326 audit(72.080:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 72.106755][ T31] audit: type=1326 audit(72.080:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 72.106776][ T31] audit: type=1326 audit(72.080:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 72.106790][ T31] audit: type=1326 audit(72.080:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x7ffc0000 [ 72.159849][ T15] team0 (unregistering): Port device team_slave_1 removed [ 72.184216][ T15] team0 (unregistering): Port device team_slave_0 removed [ 72.360546][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.466884][ T8978] veth0_vlan: entered promiscuous mode [ 72.468550][ T8978] veth1_vlan: entered promiscuous mode [ 72.474426][ T8978] veth0_macvtap: entered promiscuous mode [ 72.476047][ T8978] veth1_macvtap: entered promiscuous mode [ 72.482518][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.484893][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.517812][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.524777][ T915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.524787][ T915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.536013][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.539286][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.539283][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.539307][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.539325][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.649890][ T53] Bluetooth: hci0: command tx timeout [ 73.144925][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.145106][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.243717][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.245068][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.670552][ T1857] usb 1-1: USB disconnect, device number 13 [ 73.735894][ T24] IPVS: starting estimator thread 0... [ 73.803767][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.803927][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.850599][ T9187] IPVS: using max 69 ests per chain, 165600 per kthread [ 73.929228][ T31] audit: type=1326 audit(73.900:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.5.909" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x0 [ 74.329113][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.332138][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.652232][ T9223] loop5: detected capacity change from 0 to 7 [ 74.654100][ T9223] Dev loop5: unable to read RDB block 7 [ 74.654135][ T9223] loop5: unable to read partition table [ 74.654204][ T9223] loop5: partition table beyond EOD, truncated [ 74.654223][ T9223] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.730643][ T53] Bluetooth: hci0: command tx timeout [ 74.889868][ T1857] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 75.049957][ T1857] usb 1-1: Using ep0 maxpacket: 32 [ 75.052212][ T1857] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 75.052245][ T1857] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.053615][ T1857] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 75.053625][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.053631][ T1857] usb 1-1: Product: syz [ 75.053636][ T1857] usb 1-1: Manufacturer: syz [ 75.053641][ T1857] usb 1-1: SerialNumber: syz [ 75.259805][ T9221] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 75.259918][ T9221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.262464][ T1857] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 75.267497][ T1857] usb 1-1: USB disconnect, device number 14 [ 75.320535][ T1857] appletouch 1-1:1.0: input: appletouch disconnected [ 75.965067][ T31] audit: type=1326 audit(75.940:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9245 comm="syz.2.928" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb5b9e8 code=0x0 [ 76.017838][ T9248] fuse: Unknown parameter '00000000000000000006' [ 76.029839][ T6621] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 76.179831][ T6621] usb 1-1: Using ep0 maxpacket: 32 [ 76.181099][ T6621] usb 1-1: too many configurations: 175, using maximum allowed: 8 [ 76.183013][ T6621] usb 1-1: config 0 has no interfaces? [ 76.184055][ T6621] usb 1-1: config 0 has no interfaces? [ 76.185445][ T6621] usb 1-1: config 0 has no interfaces? [ 76.187100][ T6621] usb 1-1: config 0 has no interfaces? [ 76.188746][ T6621] usb 1-1: config 0 has no interfaces? [ 76.189512][ T6621] usb 1-1: config 0 has no interfaces? [ 76.191110][ T6621] usb 1-1: config 0 has no interfaces? [ 76.191827][ T6621] usb 1-1: config 0 has no interfaces? [ 76.193110][ T6621] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=14.f0 [ 76.193281][ T6621] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=0 [ 76.193298][ T6621] usb 1-1: Product: syz [ 76.193305][ T6621] usb 1-1: Manufacturer: syz [ 76.196847][ T6621] usb 1-1: config 0 descriptor?? [ 76.454889][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.456682][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.468888][ T1857] usb 1-1: USB disconnect, device number 15 [ 76.809820][ T53] Bluetooth: hci0: command tx timeout [ 77.469596][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.469800][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.839914][ T6612] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 77.990526][ T6612] usb 1-1: Using ep0 maxpacket: 32 [ 77.994862][ T6612] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 77.996895][ T6612] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 77.998984][ T6612] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.001333][ T6612] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 78.006605][ T6612] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 78.008345][ T6612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.010348][ T6612] usb 1-1: Product: syz [ 78.011084][ T6612] usb 1-1: Manufacturer: syz [ 78.011944][ T6612] usb 1-1: SerialNumber: syz [ 78.020995][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 78.024220][ T6612] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input9 [ 78.239919][ T6612] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 78.241348][ T6612] (id 0x00) [ 78.241945][ T6612] Registered IR keymap rc-imon-pad [ 78.440185][ T6612] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 78.446017][ T6612] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input10 [ 78.452906][ T6612] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:16> initialized [ 78.627725][ T9286] imon:display_open: display port is already open [ 78.628222][ T1857] usb 1-1: USB disconnect, device number 16 [ 78.774790][ T9331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.776539][ T9331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.779507][ T9331] loop9: detected capacity change from 0 to 7 [ 78.787260][ T9331] Dev loop9: unable to read RDB block 7 [ 78.787298][ T9331] loop9: unable to read partition table [ 78.787361][ T9331] loop9: partition table beyond EOD, truncated [ 78.787378][ T9331] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.889913][ T53] Bluetooth: hci0: command tx timeout [ 79.148582][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 79.166592][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 79.214784][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.242726][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.251334][ T9356] bond0 (unregistering): Released all slaves [ 79.265011][ T9360] input: syz1 as /devices/virtual/input/input11 [ 79.903405][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 79.906147][ T9407] netlink: 72 bytes leftover after parsing attributes in process `syz.0.991'. [ 79.906190][ T9407] netem: invalid attributes len -17 [ 79.906202][ T9407] netem: change failed [ 79.967042][ T9415] syz.2.994 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.056644][ T9418] netlink: 132 bytes leftover after parsing attributes in process `syz.5.989'. [ 80.166800][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.171540][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.269516][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.273064][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.576609][ T9436] ------------[ cut here ]------------ [ 80.576622][ T9436] WARNING: CPU: 1 PID: 9436 at ./include/linux/memcontrol.h:381 folio_memcg+0x18c/0x238 [ 80.578993][ T9436] Modules linked in: [ 80.579579][ T9436] CPU: 1 UID: 0 PID: 9436 Comm: syz.4.1002 Not tainted syzkaller #0 PREEMPT [ 80.580976][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 80.582523][ T9436] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 80.583727][ T9436] pc : folio_memcg+0x18c/0x238 [ 80.584543][ T9436] lr : folio_memcg+0x18c/0x238 [ 80.585270][ T9436] sp : ffff8000a3d36c40 [ 80.585914][ T9436] x29: ffff8000a3d36c40 x28: ffff0000f5dbcbb0 x27: 0000000000000021 [ 80.587226][ T9436] x26: dfff800000000000 x25: ffff8000a3d36f60 x24: 00000000f5000000 [ 80.588454][ T9436] x23: ffff0000d0618b82 x22: dfff800000000000 x21: 0000000000000000 [ 80.589652][ T9436] x20: ffff0000d0618b80 x19: 0000000000000000 x18: 1fffe000337d9290 [ 80.590816][ T9436] x17: 3a050a98ae4f1f1e x16: ffff80008052b3c8 x15: 0000000000000001 [ 80.592096][ T9436] x14: 1fffe00018d93ad8 x13: 0000000000000000 x12: 0000000000000000 [ 80.593274][ T9436] x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a77b5000 [ 80.594510][ T9436] x8 : 0000000000080000 x7 : ffff800080b689c8 x6 : 0000000000000000 [ 80.595818][ T9436] x5 : 0000000000000001 x4 : 0000000000000000 x3 : fffffdffc3ffe000 [ 80.597118][ T9436] x2 : fffffdffc3ffe000 x1 : 0000000000000000 x0 : 0000000000000000 [ 80.598296][ T9436] Call trace: [ 80.598794][ T9436] folio_memcg+0x18c/0x238 (P) [ 80.599536][ T9436] __folio_split+0xa0/0x13a4 [ 80.600260][ T9436] split_folio_to_list+0x74/0x94 [ 80.600990][ T9436] madvise_cold_or_pageout_pte_range+0xacc/0x1f68 [ 80.602005][ T9436] walk_pgd_range+0xb4c/0x1698 [ 80.602743][ T9436] __walk_page_range+0x13c/0x654 [ 80.603462][ T9436] walk_page_range_vma+0x2d0/0x378 [ 80.604206][ T9436] madvise_vma_behavior+0x274c/0x309c [ 80.604999][ T9436] madvise_walk_vmas+0x4b4/0x950 [ 80.605763][ T9436] madvise_do_behavior+0x5f8/0x7c4 [ 80.606500][ T9436] do_madvise+0x190/0x248 [ 80.607136][ T9436] __arm64_sys_madvise+0xa4/0xc0 [ 80.607850][ T9436] invoke_syscall+0x98/0x254 [ 80.608492][ T9436] el0_svc_common+0xe8/0x23c [ 80.609148][ T9436] do_el0_svc+0x48/0x58 [ 80.609797][ T9436] el0_svc+0x5c/0x254 [ 80.610423][ T9436] el0t_64_sync_handler+0x84/0x12c [ 80.611170][ T9436] el0t_64_sync+0x198/0x19c [ 80.611788][ T9436] irq event stamp: 10890 [ 80.612404][ T9436] hardirqs last enabled at (10889): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 80.613989][ T9436] hardirqs last disabled at (10890): [] el1_brk64+0x20/0x54 [ 80.615322][ T9436] softirqs last enabled at (10866): [] scomp_acomp_comp_decomp+0x694/0xa20 [ 80.616899][ T9436] softirqs last disabled at (10862): [] crypto_acomp_lock_stream_bh+0xac/0x25c [ 80.618420][ T9436] ---[ end trace 0000000000000000 ]---