last executing test programs: 16m24.156565463s ago: executing program 3 (id=342): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m19.313300551s ago: executing program 3 (id=348): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x90) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002cc0)) dup(r5) 16m17.546683963s ago: executing program 3 (id=352): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3174181bb6607e6d010000400000000000000c0000ffff08000100", @ANYRES32=r3, @ANYBLOB="1c0003801400038010000180090002000021b4002000000004000100"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x31, 0x5, 0xcd3, 0x1000, 0x7}, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x3b, 0x0}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m13.72133208s ago: executing program 3 (id=362): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x90) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) 16m11.331931918s ago: executing program 3 (id=364): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}, @in={0x2, 0x4e20, @multicast2}], 0x2c) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r5) 16m9.902715886s ago: executing program 3 (id=367): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000200)=0xb) 15m54.315372653s ago: executing program 32 (id=367): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000200)=0xb) 12m22.698664612s ago: executing program 4 (id=675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830080000a732db46e65972"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaafe8000000000000000000000000000bb00"/28], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f004000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001b527eff0100000035b0f4ff00000000bf91000000000000b70200000300000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) 12m20.644368216s ago: executing program 4 (id=678): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 12m20.345607407s ago: executing program 4 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 12m20.176620773s ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) getpriority(0x2, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x44044}, 0x2000c000) sendmsg$nl_crypto(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="e00000001500000826bd7000fbdbdf2561656769733235362d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000c86ee1fe9222800d78769de4d567f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001678913b5d58f027a1000000000000000000000000000000000000060000000000000000000000000004"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x59c, &(0x7f0000000400)="$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") r5 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 12m17.001071401s ago: executing program 4 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0xa, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000380), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000380)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 12m9.869997755s ago: executing program 4 (id=691): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5d6, &(0x7f0000001e00)="$eJzs3c9rFO0dAPDv7CabbAp5932NP2oLBgtFFDW7EdtCoWmRkoOI0IvX0KwmuImSrGX1UNLiH2IP6clDL0UoPXjw3IP/QMBjodBj6CVlZmc3q8aYxCS7ef188Nl5Js/Md77zdeYhOxvYAL5as/dieC2SmL1yu5Wub6xPNzbWp5c6/YgYiYhC9i+G0u67iOLziMlot/hhRCR5uORTx3lVe3n+7Z3WpfZaIW/Z9sXd9tubtbzFTJ7kzCHGe/PF8ZLuGaZBb3WCD4Ktz/vvER6+eISx2YfkE/8XlYixiBjN54HOhVs43uwO38DcgAAAAHCEvtmMzWjFeL/zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMk//7/d+1u9v3+6TKZjKTz/f+l/GeR90+01/1OAAAAAAAAAAAOwYXN2IxWjHfWt5LsM/+L2cpE9vqDeBKrUY+VuBatmItmNGMlqhFR6QlUas01myvVPexZ23HP2gFPYPiA+wEAAAAAAADA98ufY3b7838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgESUSxvcjaRKdficJQRIxGRCndbi3in53+Sfa63wkAAADAMfhmMzajFeOd9a0ke89/JnvfPxpPYjmasRjNaEQ95rNnAe13/YWN9enGxvr0Uto+jvvr/+wrjSxitJ897HzkqWyL0909ZuO38bu4EpNxN1ZiMf4Qc9GMekzGraw3F0lU8qcXlU6eO+c7897a3c/lei7LpBz3YzHL7Vr8Ph5FI+ajkJ1Dts3uR/xTWp3kV7k91mg+XyYRyY/yMxsMlawiw92KTOW1T6vx7e6V2Od18uGRqlHoPoOaOIKaj+XLtOajA13zWs/Vd2b3SkRcbf79wkJj+eHC/dUrg3NKB/RhJaZ7KnH2q6pEKa9Gexbd32x5Mdt3PBbjTjyK+ajHz+Jm1LI2nS1763p6D/daYX/32k8u5Z3vIpJyezkg0rp+21PX3pmuko31/mS7St8d/ow0dD7vFCOSoW5Og+DDSlR7KnFq90r8ZSt9XW0sP1xZmHu8x+P9NF+mc/PIQM3NpfzqHcrW3r860rFTO45Vs7GJ7ljho7HT3bHP3aml/He4jyPVsrGzO4619zvXM7bTbzkADLyxy2Ol8r/L/yq/KD8vL5Rvj/5m5OcjPy7F8JuhfxT/Vvhr4ZfJ5XgRf9x+/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzc6tNnD+cajfqKztF2xgYjDR2dvXX6PTNxHK43lx5fX3367Ori0tyD+oP68o2pWvXmjeovbly/v9ioT7Vf+50lR2X7pu93JgAAAAAAAAAAAOzHcfw5ab/PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNj9l4Mr0US1alrU+n6xvp0I22d/vaWhYgYSpf/iyg+j5iMdotKT7jkU8d5VXt5/u2d1qXtWIXO9sXd9tubtbzFTJ7kzCHGe/PF8ZLuGaZBb3WCQ7/9PwAA//+Gkh7d") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x9, 0x751295a0f60d81cf}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x398cbaf3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0xffe000, 0x88, &(0x7f0000000480)=""/136, 0x41100, 0x3d, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000840)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x8, 0x1, 0x5}, 0x10, 0x25a0a, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000009c0)=[{0x0, 0x5, 0xb, 0x5}, {0x1, 0x4, 0xe, 0xcf7c5bef8e7476d0}, {0x0, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x1, 0x2}, {0x2, 0x2, 0x10, 0x1}, {0x3, 0x2, 0xd, 0x5}, {0x1, 0x2, 0x4, 0xa}], 0x10, 0x3ff}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x22, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000003500)=[{{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000003440)=[@timestamping={{0x14, 0x1, 0x25, 0x24000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}}], 0x1, 0x48810) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11m54.563437085s ago: executing program 33 (id=691): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5d6, &(0x7f0000001e00)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x9, 0x751295a0f60d81cf}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x398cbaf3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0xffe000, 0x88, &(0x7f0000000480)=""/136, 0x41100, 0x3d, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000840)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x8, 0x1, 0x5}, 0x10, 0x25a0a, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000009c0)=[{0x0, 0x5, 0xb, 0x5}, {0x1, 0x4, 0xe, 0xcf7c5bef8e7476d0}, {0x0, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x1, 0x2}, {0x2, 0x2, 0x10, 0x1}, {0x3, 0x2, 0xd, 0x5}, {0x1, 0x2, 0x4, 0xa}], 0x10, 0x3ff}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x22, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000003500)=[{{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000003440)=[@timestamping={{0x14, 0x1, 0x25, 0x24000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}}], 0x1, 0x48810) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 14.072692235s ago: executing program 2 (id=1646): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1b0, 0x5, "", [{{0x9, 0x4, 0x0, 0x5, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc9, 0xc0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0xfb, 0x8}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x1, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x9, 0xa0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9fd7662ee7c2"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xcd4, 0x7f, 0x8c3, 0xf}, {0x6, 0x24, 0x1a, 0x6, 0xe}, [@dmm={0x7, 0x24, 0x14, 0xc8, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x22, 0x7f, 0x10, 0x7f}, @country_functional={0xc, 0x24, 0x7, 0xfc, 0x1, [0xfe00, 0xa, 0x7f]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x2, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xdf, 0x5, 0x85, 0xff, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0xd0, &(0x7f0000000240)=@string={0xd0, 0x3, "e69c292bb02a72c16059239c1db7a6e939eacfcad484caa5484119cc831d1bd4f25f33e7fc1598b1b4d4b26ff125b4f18b7b9315574ca1b2b337c358710a55e3a57164aa1601ef34b05b73dcb24a63281fc8cc929f9712aea8f5f0e91ca79c3bc5010efa3aa9226a2008fb381374ed5776b8b675307286ec827e179cae1d47fa67662f3044782a90e65d8ef511877be1acf0f199e8a7fcad3fa0dab8231de7c40bef2246a6ea853c4db5157c57b826888c31befd1c82389b87d248e2a1bf2d9822203b008e85743815d318ee2d20"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x9a, &(0x7f00000003c0)=@string={0x9a, 0x3, "6d7f77ef52062c5769a199b61fa62bccc29dd7ca3d41dcb2d921eb4d1a8a75196dda3c63764fe7db69788a1cccc84eb76610cbafbc0cdaad884f2be586b50ab2a1a9166425a7535d44b2c80bf6b9baacb0ad887dc1441642221dc1d5340a99eeacee46719d17a56a2cc0745a9262c997697918e9382c1bcdf3a70160f33cec577d6e1e7e1d3d658e7c8909973dc1457b8d5a377414d374fa"}}]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) unshare(0x40400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) landlock_restrict_self(r3, 0xe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.363240509s ago: executing program 2 (id=1654): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0xf, 0x7ff, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0xb, [{@multicast1, 0x6}]}, @rr={0x7, 0x17, 0x91, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1, @remote]}, @rr={0x7, 0x13, 0xd2, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x6, "78c312ba"}]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bind$xdp(r2, &(0x7f0000000440)={0x2c, 0x4, r3, 0x1a, r4}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000e0c4a5380000000800", @ANYRES32=r8, @ANYBLOB="24005a8020000180140003000000000003000800010000000000000005000400"], 0x40}}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x8006, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) fsopen(&(0x7f0000000480)='sockfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbf\x9c\xe3\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9N\xc2\x11\x8a\xa0\x18\xd0\x00w\\\xf2\xba\xa4\x05\x00\x00\x00\x00\x00\x00\x00\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.\xb7\xbd!\xbf\xa5\xfa^\xd4\r\x81U\xbdv\x18\xfb\xc7\xc9\xbc\x88\xcd\x1ah\xac\x1b8\x9d\x88\x8d`\x8b\xaa\xba\xc2N\x02\x7fV\xe0F\xb7\xee\x9eo\xeb\xb3T\xed\xcd\xbd\xbb\xa8YQf\xe2k7\xce\xa3~\x17\x0f\x18\xfa\xd4\xef\b\x17\xad\x19\x03\x81!\x91\x84a\x93\xe9\x80\x83\x1bn\xb7[\xeb\xa6\x82*\xc5\xd51\xef\v\xda@\xbe\x9c\xdbr\xd8U\xbba\xb2\xa5xo\xd6\xc7\x1b}\x03\xe7\xc9\xef<\x8b\x91\xbe\x1c\xbe\xa5?\xaf|sZPx\xbds\xb4\xf9\xf2\x06\x00\x8dv*~v$\x88\xdb\xaf\xb6\v\xe5\xb2\xd6&\xc3\xe3\xf6ju\x87.\x97|\xb2\xb4\xfe\xd1U\x06\x83\x03ZJ\xa4\xfa)\xdaa\xc3-teP\xbbg+\x9f\xb1F\rh\xfdI\xa1\xe7D\x01X\xb7\x8c\x035\xca\x87\x1cU\xd3\x92\x19\x06\xde^\xa7>\x04\xd8\x8a_\x97\xb0\x9b\x10\xd6\xab+\xf6={\xc4\x9f+L\"Ui\x15\xed\xa9A\x81\xf1C\xc4\xe5[\"\xfa<\xa3\v\x1aE\xe5\x9c\xcd\ap\x10\x11\xd8|\xf3\x8f\xf1\x8dA\x9d\x82gr\\E!fsJ#\xc1\x0eU\xb3xwT\xe5I\xb1\xf9\xa3\xe5\x97Z\xf8\xc7w\x0egh\xdb \xbd\xeek*4\x00\xd1\xd0N\x86\xd92J\xf7\xf2\xd7\xe1\xad\xa1\xd7\xb1#\xfb%\"^\x82\x1e\xf1\x00\xd2 \xd7\r\xd2&N\x88;\x9cH-\x91#\x1c6\xa57<\xa1,oU\xa4MJV\xe2v_VN\xee\xeb\xe6\xb4\xc0\x8a\x89\xb1w\x90\xc1\xae\xe8E\xad8\xc8`\x1b,|-\xf2Z@', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.153122906s ago: executing program 0 (id=1656): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x6, 0x0) 5.581583037s ago: executing program 0 (id=1660): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xffffffa4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x48}}, 0x4040) 5.577485944s ago: executing program 2 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0x7, 0x7f, 0x2, 0x10, 0x5, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/pid\x00') mmap$IORING_OFF_SQ_RING(&(0x7f000029b000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8958b224cf29f21, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000600)={0x9, 0x1, &(0x7f00000028c0)=[0x0], &(0x7f0000002880), 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2ac, 0x940c, 0x3002, 0x2ac, 0x2c0, 0x3b8, 0x3d8, 0x3d8, 0x3b8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2ac, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4dc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x801) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x111, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 4.443227675s ago: executing program 1 (id=1663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 4.117865197s ago: executing program 2 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0x7, 0x7f, 0x2, 0x10, 0x5, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/pid\x00') mmap$IORING_OFF_SQ_RING(&(0x7f000029b000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8958b224cf29f21, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000600)={0x9, 0x1, &(0x7f00000028c0)=[0x0], &(0x7f0000002880), 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2ac, 0x940c, 0x3002, 0x2ac, 0x2c0, 0x3b8, 0x3d8, 0x3d8, 0x3b8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2ac, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4dc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x801) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x111, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) 4.070455221s ago: executing program 1 (id=1665): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3.693945109s ago: executing program 0 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x2, 0x3, 0xd96, 0x0, r0}) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.378774251s ago: executing program 2 (id=1667): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x170, r1, 0x800, 0x70bd2a, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40008, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x30}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.992892121s ago: executing program 1 (id=1668): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x6, 0x0) 964.48723ms ago: executing program 1 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd31, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x2d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000019}, 0x200140c0) 856.783935ms ago: executing program 0 (id=1670): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) 727.175559ms ago: executing program 2 (id=1671): timer_create(0x6, &(0x7f00000000c0)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000090) r3 = epoll_create1(0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x101000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@ll={0x11, 0x16, 0x0, 0x1, 0x40, 0x6, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="b611", 0x2}, {0x0, 0x2f}], 0x2}, 0x20000010) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0), 0x0, 0x8000007) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1, 0x2, 0x10001, 0x2}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 493.231256ms ago: executing program 0 (id=1672): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) 492.68573ms ago: executing program 1 (id=1673): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/177, 0xb0}], 0x1, &(0x7f0000000480)=""/2, 0x2}, 0x7fff}, {{&(0x7f00000004c0)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/7, 0x7}], 0x1, &(0x7f0000000640)=""/94, 0x5e}, 0x7f}, {{0x0, 0x0, &(0x7f0000002bc0), 0x6}, 0xe251}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002c00)=""/32, 0x20}, {&(0x7f0000002c40)=""/254, 0xfe}, {&(0x7f0000002d40)=""/129, 0x81}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/130, 0x82}, {&(0x7f0000002f40)=""/249, 0x13f}], 0x1fffffffffffffa9, &(0x7f0000004800)=""/4098, 0xff5}, 0x7}, {{&(0x7f0000004080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)=""/5, 0x5}], 0x1, &(0x7f0000004180)=""/195, 0xc3}, 0xfffffffc}, {{&(0x7f0000004280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004300)=""/109, 0x6d}, {&(0x7f0000004380)=""/119, 0x7f}, {&(0x7f0000004400)=""/11, 0xb}, {&(0x7f0000000b80)=""/197, 0xbe}, {&(0x7f0000000980)=""/259, 0xff9a}, {&(0x7f0000000400)=""/127}, {&(0x7f0000004740)=""/76}], 0x5, &(0x7f0000000380)=""/19, 0x13}, 0xa}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) close(r1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x2, 0x3, 0x98d, 0xfffffffffffffffd}) 170.254868ms ago: executing program 0 (id=1674): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'bridge0\x00'}) 0s ago: executing program 1 (id=1675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "ff1506c501fff2c5", "379fcbee5f20617d254bfc5618c5b30b98cb6bc7bf3f14df321f20272331fef6", "3e4458b9", "7b1041fb52f34a61"}, 0x38) sendto$inet6(r0, &(0x7f0000000540)="c66a", 0x2, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0xfdd6) kernel console output (not intermixed with test programs): de [ 880.802488][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.848145][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.208823][T12053] loop2: detected capacity change from 0 to 1024 [ 883.140464][ T1523] team0 (unregistering): Port device team_slave_1 removed [ 883.210748][ T1523] team0 (unregistering): Port device team_slave_0 removed [ 883.471919][T12059] veth33: entered allmulticast mode [ 883.897318][T11858] hsr_slave_0: entered promiscuous mode [ 883.911118][T11858] hsr_slave_1: entered promiscuous mode [ 883.918615][T11858] debugfs: 'hsr0' already exists in 'hsr' [ 883.918638][T11858] Cannot create hsr debugfs directory [ 885.158520][T12073] loop0: detected capacity change from 0 to 32768 [ 885.208855][T12073] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 885.275590][T12073] XFS (loop0): Ending clean mount [ 885.280768][T12073] XFS (loop0): Quotacheck needed: Please wait. [ 886.079290][T12073] XFS (loop0): Quotacheck: Done. [ 886.354704][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 886.355291][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.355660][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.355939][T11923] bridge_slave_0: entered allmulticast mode [ 886.359221][T11923] bridge_slave_0: entered promiscuous mode [ 886.388036][ T38] audit: type=1800 audit(1780326671.135:56): pid=12094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1096" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 886.463000][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.463370][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.463642][T11923] bridge_slave_1: entered allmulticast mode [ 886.468740][T11923] bridge_slave_1: entered promiscuous mode [ 886.691184][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 887.000330][T12103] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1095'. [ 887.000681][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 888.149532][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.204877][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.701407][T12114] loop2: detected capacity change from 0 to 1024 [ 889.356243][T11923] team0: Port device team_slave_0 added [ 889.990344][T11923] team0: Port device team_slave_1 added [ 890.204824][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.204842][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.204867][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.251526][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.251543][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.251570][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.295868][T12129] loop1: detected capacity change from 0 to 4096 [ 891.308563][T12129] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 891.575800][T12142] loop0: detected capacity change from 0 to 1024 [ 891.596226][T12129] ntfs3(loop1): ino=19, mi_enum_attr [ 891.596257][T12129] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 892.278361][T12151] loop2: detected capacity change from 0 to 32768 [ 892.774540][T12151] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 892.995999][T12151] XFS (loop2): Ending clean mount [ 893.008633][T12151] XFS (loop2): Quotacheck needed: Please wait. [ 893.550118][T12151] XFS (loop2): Quotacheck: Done. [ 893.864021][ T38] audit: type=1800 audit(1780326678.625:57): pid=12171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1106" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 893.888193][T11923] hsr_slave_0: entered promiscuous mode [ 893.891036][T11923] hsr_slave_1: entered promiscuous mode [ 893.893105][T11923] debugfs: 'hsr0' already exists in 'hsr' [ 893.893128][T11923] Cannot create hsr debugfs directory [ 894.311975][T12173] loop0: detected capacity change from 0 to 32768 [ 894.350822][T12173] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 894.396731][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 894.468014][T12173] XFS (loop0): Ending clean mount [ 894.484882][T12173] XFS (loop0): Quotacheck needed: Please wait. [ 894.995974][T12173] XFS (loop0): Quotacheck: Done. [ 895.730724][ T38] audit: type=1800 audit(1780326680.185:58): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 896.068734][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 896.233087][T12191] loop2: detected capacity change from 0 to 1024 [ 897.454256][T12200] loop2: detected capacity change from 0 to 4096 [ 897.482716][T12200] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 897.556650][T12200] ntfs3(loop2): ino=19, mi_enum_attr [ 897.556679][T12200] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 899.075592][T12208] loop0: detected capacity change from 0 to 32768 [ 899.134844][T12208] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 899.184719][T12208] XFS (loop0): Ending clean mount [ 899.186898][T12208] XFS (loop0): Quotacheck needed: Please wait. [ 899.788012][T12208] XFS (loop0): Quotacheck: Done. [ 899.981049][T12207] loop2: detected capacity change from 0 to 32768 [ 900.002177][ T38] audit: type=1800 audit(1780326684.765:59): pid=12217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1117" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 900.264239][T12207] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 900.307810][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 900.522605][T12207] XFS (loop2): Ending clean mount [ 900.570637][T12207] XFS (loop2): Quotacheck needed: Please wait. [ 900.867300][T12232] syzkaller0: entered promiscuous mode [ 900.867324][T12232] syzkaller0: entered allmulticast mode [ 901.117410][T12207] XFS (loop2): Quotacheck: Done. [ 901.316526][ T38] audit: type=1800 audit(1780326686.065:60): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 901.547686][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 901.867303][T11858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 901.929355][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.259392][T11858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 902.561597][T12263] loop1: detected capacity change from 0 to 1024 [ 902.634122][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.677192][T11858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 902.806942][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.063100][T11858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 903.099152][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.073694][T12282] loop2: detected capacity change from 0 to 32768 [ 904.166743][T12282] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 904.225326][T12282] XFS (loop2): Ending clean mount [ 904.238088][T12282] XFS (loop2): Quotacheck needed: Please wait. [ 904.533445][T12300] loop0: detected capacity change from 0 to 32768 [ 904.611568][T12300] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 904.670793][T12300] XFS (loop0): Ending clean mount [ 904.678012][T12300] XFS (loop0): Quotacheck needed: Please wait. [ 904.775659][ T1523] bridge_slave_1: left allmulticast mode [ 904.775692][ T1523] bridge_slave_1: left promiscuous mode [ 904.775954][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.866918][T12282] XFS (loop2): Quotacheck: Done. [ 905.162071][T12300] XFS (loop0): Quotacheck: Done. [ 906.018241][ T5713] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 906.055011][ T38] audit: type=1800 audit(1780326690.615:61): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1126" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 906.271179][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 906.273388][ T5713] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 906.273413][ T5713] usb 2-1: config 0 has no interface number 0 [ 906.275598][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 906.275623][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.275643][ T5713] usb 2-1: Product: syz [ 906.275656][ T5713] usb 2-1: Manufacturer: syz [ 906.275670][ T5713] usb 2-1: SerialNumber: syz [ 906.349089][ T1523] bridge_slave_0: left allmulticast mode [ 906.349121][ T1523] bridge_slave_0: left promiscuous mode [ 906.349376][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.374501][ T5713] usb 2-1: config 0 descriptor?? [ 906.379520][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 906.416244][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 906.795926][ T5713] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 906.795955][ T5713] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 907.412131][T12327] loop0: detected capacity change from 0 to 4096 [ 909.182784][ T5713] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 909.183120][ T5713] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 909.218902][ T5713] usb 2-1: USB disconnect, device number 10 [ 909.272289][T12327] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 909.297683][T12327] ntfs3(loop0): ino=1a, mi_enum_attr [ 909.297817][T12327] ntfs3(loop0): ino=1a, mi_enum_attr [ 909.297835][T12327] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 909.570681][ T1523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.653023][ T1523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.693217][ T1523] bond0 (unregistering): Released all slaves [ 909.796035][T12330] veth15: entered allmulticast mode [ 911.189844][ T1523] hsr_slave_0: left promiscuous mode [ 911.233447][ T1523] hsr_slave_1: left promiscuous mode [ 911.234472][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.270885][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.571435][ T1523] veth1_vlan: left promiscuous mode [ 912.571568][ T1523] veth0_vlan: left promiscuous mode [ 913.744157][T12374] loop2: detected capacity change from 0 to 32768 [ 913.777708][T12374] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 913.821025][T12374] XFS (loop2): Ending clean mount [ 913.828346][T12374] XFS (loop2): Quotacheck needed: Please wait. [ 914.130726][T12384] loop1: detected capacity change from 0 to 32768 [ 914.220448][T12384] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 914.305840][T12384] XFS (loop1): Ending clean mount [ 914.312576][T12384] XFS (loop1): Quotacheck needed: Please wait. [ 914.613333][T12374] XFS (loop2): Quotacheck: Done. [ 914.818645][ T38] audit: type=1800 audit(1780326699.575:62): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1135" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 915.016661][T12384] XFS (loop1): Quotacheck: Done. [ 915.210158][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 915.269006][ T38] audit: type=1800 audit(1780326700.025:63): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 915.686543][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 915.883274][ T1523] team0 (unregistering): Port device team_slave_1 removed [ 916.004692][ T1523] team0 (unregistering): Port device team_slave_0 removed [ 916.948853][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 917.560127][ T57] Bluetooth: Error in BCSP hdr checksum [ 918.136074][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.208645][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.303128][ T3363] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.303221][ T3363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.319938][ T9950] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 919.349568][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.349918][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.818637][T12442] loop0: detected capacity change from 0 to 1024 [ 923.188966][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 923.261816][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 923.270082][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 923.276888][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 923.281671][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 923.705539][T12458] loop2: detected capacity change from 0 to 32768 [ 923.773013][T12458] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 923.895974][T12458] XFS (loop2): Ending clean mount [ 923.902673][T12458] XFS (loop2): Quotacheck needed: Please wait. [ 924.510442][T12458] XFS (loop2): Quotacheck: Done. [ 924.757491][ T38] audit: type=1800 audit(1780326709.515:64): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1146" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 925.116618][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 925.432708][ T9950] Bluetooth: hci5: command tx timeout [ 926.148127][T12483] loop0: detected capacity change from 0 to 4096 [ 926.256961][T12483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 926.637511][T12483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.943266][ T1477] Bluetooth: Error in BCSP hdr checksum [ 927.078620][ T38] audit: type=1800 audit(1780326711.835:65): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1148" name="bus" dev="loop0" ino=22 res=0 errno=0 [ 927.146935][T12483] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 927.247155][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.726706][ T5618] Bluetooth: hci5: command tx timeout [ 928.065599][T12511] loop0: detected capacity change from 0 to 32768 [ 928.760193][ T5618] Bluetooth: hci2: command 0x1003 tx timeout [ 928.796349][ T9950] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 928.892929][T12511] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 929.098989][ T9950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 929.111037][T12511] XFS (loop0): Ending clean mount [ 929.123259][T12511] XFS (loop0): Quotacheck needed: Please wait. [ 929.249486][ T9950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 929.264030][ T9950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 929.304634][ T9950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 929.334097][ T9950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 929.487518][T12530] netlink: 436 bytes leftover after parsing attributes in process `syz.2.1153'. [ 929.487553][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'. [ 929.879390][ T9950] Bluetooth: hci5: command tx timeout [ 930.835625][T12511] XFS (loop0): Quotacheck: Done. [ 930.974419][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 931.455641][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.455742][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.879873][ T9950] Bluetooth: hci5: command tx timeout [ 932.072180][T12540] loop1: detected capacity change from 0 to 32768 [ 932.138989][T12540] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 932.247848][T12540] XFS (loop1): Ending clean mount [ 932.263516][T12540] XFS (loop1): Quotacheck needed: Please wait. [ 932.764450][ T9950] Bluetooth: hci6: command tx timeout [ 933.630793][T12557] PKCS7: Unknown OID: [4] 0.0 [ 933.630833][T12557] PKCS7: Only support pkcs7_signedData type [ 934.345823][T12540] XFS (loop1): Quotacheck: Done. [ 934.496603][ T38] audit: type=1800 audit(1780326719.255:66): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1155" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 934.650727][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 934.662223][T12557] veth23: entered allmulticast mode [ 934.846102][ T9950] Bluetooth: hci6: command tx timeout [ 936.245019][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.246102][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.247889][T12449] bridge_slave_0: entered allmulticast mode [ 936.270188][T12449] bridge_slave_0: entered promiscuous mode [ 936.357750][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.447012][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.545126][T12449] bridge_slave_1: entered allmulticast mode [ 937.026998][T12449] bridge_slave_1: entered promiscuous mode [ 937.185863][ T9950] Bluetooth: hci6: command tx timeout [ 937.440059][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.509411][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.616044][T12449] team0: Port device team_slave_0 added [ 937.661361][T12449] team0: Port device team_slave_1 added [ 937.740287][T12595] loop2: detected capacity change from 0 to 32768 [ 937.773451][T12595] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 937.823958][T12595] XFS (loop2): Ending clean mount [ 937.832591][T12595] XFS (loop2): Quotacheck needed: Please wait. [ 938.001484][ T57] bridge_slave_1: left allmulticast mode [ 938.001516][ T57] bridge_slave_1: left promiscuous mode [ 938.046241][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.259229][ T9950] Bluetooth: hci6: command tx timeout [ 939.335532][ T57] bridge_slave_0: left allmulticast mode [ 939.416765][ T57] bridge_slave_0: left promiscuous mode [ 939.509354][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.594215][T12595] XFS (loop2): Quotacheck: Done. [ 939.830658][ T38] audit: type=1800 audit(1780326724.595:67): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1162" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 942.700969][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 943.870739][T12626] loop2: detected capacity change from 0 to 32768 [ 943.947483][T12626] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 943.974622][T12626] XFS (loop2): Ending clean mount [ 943.981778][T12626] XFS (loop2): Quotacheck needed: Please wait. [ 944.185729][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.245446][T12639] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1168'. [ 944.245835][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'. [ 945.301021][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.302007][T12626] XFS (loop2): Quotacheck: Done. [ 945.455053][ T38] audit: type=1800 audit(1780326730.215:68): pid=12626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 945.562233][ T57] bond0 (unregistering): Released all slaves [ 945.593898][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 945.700134][T12617] veth25: entered allmulticast mode [ 945.812786][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.812802][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.812827][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.313663][T12650] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1172'. [ 947.313791][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 948.252205][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.252220][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.252246][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.815987][T12663] loop2: detected capacity change from 0 to 1024 [ 949.434457][T12449] hsr_slave_0: entered promiscuous mode [ 949.436892][T12449] hsr_slave_1: entered promiscuous mode [ 949.441293][T12449] debugfs: 'hsr0' already exists in 'hsr' [ 949.441316][T12449] Cannot create hsr debugfs directory [ 949.717485][ T57] hsr_slave_0: left promiscuous mode [ 949.794507][ T57] hsr_slave_1: left promiscuous mode [ 949.795216][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.862667][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.057479][T12689] loop1: detected capacity change from 0 to 32768 [ 951.092858][T12689] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 951.130954][T12689] XFS (loop1): Ending clean mount [ 951.135717][T12689] XFS (loop1): Quotacheck needed: Please wait. [ 952.913478][ T57] team0 (unregistering): Port device team_slave_1 removed [ 953.030525][ T57] team0 (unregistering): Port device team_slave_0 removed [ 953.087723][T12689] XFS (loop1): Quotacheck: Done. [ 953.324635][ T38] audit: type=1800 audit(1780326738.085:69): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1175" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 953.561183][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 954.208571][T12706] loop2: detected capacity change from 0 to 32768 [ 954.380864][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 954.394782][T12706] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 954.534657][T12706] XFS (loop2): Ending clean mount [ 954.539696][T12706] XFS (loop2): Quotacheck needed: Please wait. [ 954.794440][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.794738][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.795007][T12514] bridge_slave_0: entered allmulticast mode [ 954.797123][T12514] bridge_slave_0: entered promiscuous mode [ 954.872628][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.872941][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.895822][T12514] bridge_slave_1: entered allmulticast mode [ 954.911154][T12514] bridge_slave_1: entered promiscuous mode [ 955.106592][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.280380][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.288817][T12706] XFS (loop2): Quotacheck: Done. [ 955.604625][ T38] audit: type=1800 audit(1780326740.305:70): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1177" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 955.614290][T12719] loop1: detected capacity change from 0 to 1024 [ 956.710395][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 956.977827][T12514] team0: Port device team_slave_0 added [ 957.400596][T12514] team0: Port device team_slave_1 added [ 958.838237][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.838252][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.838271][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.844091][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 958.846966][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.846979][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.847004][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.366110][T12514] hsr_slave_0: entered promiscuous mode [ 961.410031][T12514] hsr_slave_1: entered promiscuous mode [ 961.412183][T12514] debugfs: 'hsr0' already exists in 'hsr' [ 961.412328][T12514] Cannot create hsr debugfs directory [ 963.217129][T12778] loop1: detected capacity change from 0 to 32768 [ 963.238170][T12778] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 963.310275][T12778] XFS (loop1): Ending clean mount [ 963.316534][T12778] XFS (loop1): Quotacheck needed: Please wait. [ 964.117460][T12778] XFS (loop1): Quotacheck: Done. [ 964.127317][ T38] audit: type=1800 audit(1780326748.885:71): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1188" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 964.255306][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 969.805695][T12831] loop0: detected capacity change from 0 to 32768 [ 970.522886][T12831] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 970.834462][T12831] XFS (loop0): Ending clean mount [ 970.842419][T12831] XFS (loop0): Quotacheck needed: Please wait. [ 973.636744][T12831] XFS (loop0): Quotacheck: Done. [ 973.894751][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 976.709437][ T57] bridge_slave_1: left allmulticast mode [ 976.709483][ T57] bridge_slave_1: left promiscuous mode [ 976.723885][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.122054][ T57] bridge_slave_0: left allmulticast mode [ 977.122088][ T57] bridge_slave_0: left promiscuous mode [ 977.122347][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.966500][T12920] block nbd2: NBD_DISCONNECT [ 980.122647][T12925] loop2: detected capacity change from 0 to 4096 [ 980.145092][T12925] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 980.235185][T12925] ntfs3(loop2): ino=19, mi_enum_attr [ 980.235206][T12925] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 980.993691][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.372571][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.452287][ T57] bond0 (unregistering): Released all slaves [ 984.932354][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 985.010544][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 985.032439][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 985.094727][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 985.108106][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 985.370401][ T57] hsr_slave_0: left promiscuous mode [ 985.575220][T12979] loop2: detected capacity change from 0 to 32768 [ 985.591204][T12979] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 985.610080][ T57] hsr_slave_1: left promiscuous mode [ 985.612797][T12979] XFS (loop2): Ending clean mount [ 985.613384][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.626481][T12979] XFS (loop2): Quotacheck needed: Please wait. [ 985.653496][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.078078][T12979] XFS (loop2): Quotacheck: Done. [ 987.159956][ T9950] Bluetooth: hci2: command tx timeout [ 987.234038][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 987.380816][ T57] team0 (unregistering): Port device team_slave_1 removed [ 987.436260][ T57] team0 (unregistering): Port device team_slave_0 removed [ 989.251024][ T9950] Bluetooth: hci2: command tx timeout [ 990.275183][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 990.337893][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 990.349304][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 990.510625][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 990.514150][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.320991][ T9950] Bluetooth: hci2: command tx timeout [ 992.768828][ T9950] Bluetooth: hci4: command tx timeout [ 992.851769][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.851866][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.590384][ T9950] Bluetooth: hci2: command tx timeout [ 994.676966][T13067] loop0: detected capacity change from 0 to 4096 [ 994.695738][T13067] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 994.827037][T13067] ntfs3(loop0): ino=19, mi_enum_attr [ 994.827064][T13067] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 994.841060][ T5618] Bluetooth: hci4: command tx timeout [ 996.929191][ T5618] Bluetooth: hci4: command tx timeout [ 998.369051][ T5715] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 998.534779][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 998.537223][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.537245][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 998.551244][ T5715] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 998.551272][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.551291][ T5715] usb 3-1: Product: syz [ 998.551305][ T5715] usb 3-1: Manufacturer: syz [ 998.551319][ T5715] usb 3-1: SerialNumber: syz [ 998.576976][ T5715] usb 3-1: config 0 descriptor?? [ 1000.093288][ T5618] Bluetooth: hci4: command tx timeout [ 1000.107491][ T57] bridge_slave_1: left allmulticast mode [ 1000.107524][ T57] bridge_slave_1: left promiscuous mode [ 1000.107808][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.263577][ T57] bridge_slave_0: left allmulticast mode [ 1000.263601][ T57] bridge_slave_0: left promiscuous mode [ 1000.263783][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.147843][ T5713] usb 3-1: USB disconnect, device number 15 [ 1001.375125][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.801726][T13127] loop2: detected capacity change from 0 to 1024 [ 1002.381957][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.465190][ T57] bond0 (unregistering): Released all slaves [ 1002.540659][T13132] loop1: detected capacity change from 0 to 1024 [ 1008.101655][T13153] block nbd0: NBD_DISCONNECT [ 1009.059841][ T57] hsr_slave_0: left promiscuous mode [ 1010.045116][T13159] PKCS7: Unknown OID: [4] 0.0 [ 1010.045153][T13159] PKCS7: Only support pkcs7_signedData type [ 1010.603934][ T57] hsr_slave_1: left promiscuous mode [ 1010.605006][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.662405][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.067621][T13163] loop1: detected capacity change from 0 to 32768 [ 1011.103052][T13163] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1011.157815][T13163] XFS (loop1): Ending clean mount [ 1011.163379][T13163] XFS (loop1): Quotacheck needed: Please wait. [ 1012.035919][T13163] XFS (loop1): Quotacheck: Done. [ 1012.242825][ T38] audit: type=1800 audit(1780326797.005:72): pid=13163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1253" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 1013.061100][T13179] PKCS7: Unknown OID: [4] 0.0 [ 1013.061137][T13179] PKCS7: Only support pkcs7_signedData type [ 1013.790555][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1013.856434][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1013.869617][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1014.189969][T13179] veth27: entered allmulticast mode [ 1015.008758][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.009143][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.009400][T12972] bridge_slave_0: entered allmulticast mode [ 1015.066875][T12972] bridge_slave_0: entered promiscuous mode [ 1015.072353][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.072567][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.072792][T12972] bridge_slave_1: entered allmulticast mode [ 1015.077463][T12972] bridge_slave_1: entered promiscuous mode [ 1015.434167][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.434198][T13190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.482100][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.482128][T13190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.225069][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.415926][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.654005][T12972] team0: Port device team_slave_0 added [ 1018.665421][T12972] team0: Port device team_slave_1 added [ 1018.834057][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.834072][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.834097][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.934207][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.934218][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.934233][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.401638][T12972] hsr_slave_0: entered promiscuous mode [ 1019.403819][T12972] hsr_slave_1: entered promiscuous mode [ 1019.405721][T12972] debugfs: 'hsr0' already exists in 'hsr' [ 1019.405745][T12972] Cannot create hsr debugfs directory [ 1020.907377][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.907729][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.907988][T13023] bridge_slave_0: entered allmulticast mode [ 1020.938793][T13023] bridge_slave_0: entered promiscuous mode [ 1021.288634][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.303045][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.303372][T13023] bridge_slave_1: entered allmulticast mode [ 1021.330931][T13023] bridge_slave_1: entered promiscuous mode [ 1021.637034][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.829174][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.143238][T13023] team0: Port device team_slave_0 added [ 1022.148070][T13023] team0: Port device team_slave_1 added [ 1022.259599][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.259615][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.292951][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.296396][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.296525][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.296553][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.424807][T13023] hsr_slave_0: entered promiscuous mode [ 1022.431412][T13023] hsr_slave_1: entered promiscuous mode [ 1022.447839][T13023] debugfs: 'hsr0' already exists in 'hsr' [ 1022.447863][T13023] Cannot create hsr debugfs directory [ 1025.068788][ T38] audit: type=1326 audit(1780326809.455:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.1268" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f6aa3ce59 code=0x0 [ 1025.750031][T13250] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1269'. [ 1025.750405][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'. [ 1026.861023][T13256] loop0: detected capacity change from 0 to 1024 [ 1027.306389][ T57] bridge_slave_1: left allmulticast mode [ 1027.306421][ T57] bridge_slave_1: left promiscuous mode [ 1027.306701][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.599462][ T57] bridge_slave_0: left allmulticast mode [ 1027.599484][ T57] bridge_slave_0: left promiscuous mode [ 1027.622032][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.555622][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.671929][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.753660][ T57] bond0 (unregistering): Released all slaves [ 1029.833098][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1032.436469][T13296] loop2: detected capacity change from 0 to 4096 [ 1032.493795][T13296] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1032.494316][T13296] ntfs3(loop2): Failed to load $Extend (-22). [ 1032.494338][T13296] ntfs3(loop2): Failed to initialize $Extend. [ 1032.523281][ T38] audit: type=1800 audit(1780326817.285:74): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1277" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1032.753777][ T57] hsr_slave_0: left promiscuous mode [ 1032.806194][ T57] hsr_slave_1: left promiscuous mode [ 1032.806874][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.879352][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.967242][ T5613] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1033.025534][T13298] loop0: detected capacity change from 0 to 4096 [ 1033.029105][T13298] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1033.090139][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.538834][ T38] audit: type=1800 audit(1780326819.295:75): pid=13298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1276" name="bus" dev="loop0" ino=22 res=0 errno=0 [ 1034.632267][T13298] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1034.792172][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.003310][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1035.600535][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1044.300086][T12972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1044.425951][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.457466][T12972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1044.551612][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1045.278015][T13023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1045.338159][T13023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.350980][T13023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1046.745045][T13023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.756736][T13023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1046.860733][T13023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1048.423091][T13421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1048.506530][T13421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1048.610762][T13421] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1048.626014][T13421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1048.634381][T13421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1048.925724][T13023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1048.996876][T13023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.735753][T13421] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1050.783286][T13459] Bluetooth: hci2: command tx timeout [ 1050.799184][T13461] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 1050.838466][T13461] kAFS: unable to lookup cell 'ÿ' [ 1050.838533][T13421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1050.976146][T13421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1051.983447][T13421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1051.985221][T13421] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1052.468683][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1053.261375][ T9950] Bluetooth: hci2: command tx timeout [ 1053.626946][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1053.707107][T13473] loop1: detected capacity change from 0 to 1024 [ 1054.200056][ T9950] Bluetooth: hci4: command tx timeout [ 1054.207599][ T9] usb 3-1: device descriptor read/all, error -71 [ 1054.290580][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.290684][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.043102][ T9950] Bluetooth: hci2: command tx timeout [ 1057.043115][T13421] Bluetooth: hci4: command tx timeout [ 1057.382443][T13486] loop2: detected capacity change from 0 to 1024 [ 1059.101440][ T9950] Bluetooth: hci2: command tx timeout [ 1059.101589][ T9950] Bluetooth: hci4: command tx timeout [ 1061.404346][ T9950] Bluetooth: hci4: command tx timeout [ 1061.948461][T13510] loop2: detected capacity change from 0 to 1024 [ 1063.221136][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.221299][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.221530][T13419] bridge_slave_0: entered allmulticast mode [ 1063.250703][T13419] bridge_slave_0: entered promiscuous mode [ 1063.329327][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.330187][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.330576][T13419] bridge_slave_1: entered allmulticast mode [ 1063.355881][T13419] bridge_slave_1: entered promiscuous mode [ 1063.719448][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.745171][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.168001][T13519] loop1: detected capacity change from 0 to 32768 [ 1065.264798][T13519] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1065.392064][T13519] XFS (loop1): Ending clean mount [ 1066.833053][T13519] XFS (loop1): Quotacheck needed: Please wait. [ 1067.055644][T13419] team0: Port device team_slave_0 added [ 1067.181851][T13419] team0: Port device team_slave_1 added [ 1067.456765][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.456780][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.456801][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.542186][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.542201][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.542220][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.577241][T13519] XFS (loop1): Quotacheck: Done. [ 1067.680785][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1067.702170][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 1067.939894][ T9366] bridge_slave_1: left allmulticast mode [ 1067.939927][ T9366] bridge_slave_1: left promiscuous mode [ 1067.940214][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.366397][ T9366] bridge_slave_0: left allmulticast mode [ 1068.366432][ T9366] bridge_slave_0: left promiscuous mode [ 1068.366726][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.072865][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.610688][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.718993][ T9366] bond0 (unregistering): Released all slaves [ 1076.347846][T13419] hsr_slave_0: entered promiscuous mode [ 1076.358968][T13419] hsr_slave_1: entered promiscuous mode [ 1076.368230][T13419] debugfs: 'hsr0' already exists in 'hsr' [ 1076.368255][T13419] Cannot create hsr debugfs directory [ 1076.439013][T13584] loop2: detected capacity change from 0 to 4096 [ 1076.454650][T13584] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1077.407959][T13584] ntfs3(loop2): ino=19, mi_enum_attr [ 1077.408011][T13584] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1081.128670][ T9366] hsr_slave_0: left promiscuous mode [ 1081.395847][ T9366] hsr_slave_1: left promiscuous mode [ 1081.396951][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.433314][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.864216][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 1085.455799][T13636] loop1: detected capacity change from 0 to 32768 [ 1086.331024][T13636] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1086.364541][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 1086.420897][T13636] XFS (loop1): Ending clean mount [ 1086.424683][T13636] XFS (loop1): Quotacheck needed: Please wait. [ 1086.735531][T13636] XFS (loop1): Quotacheck: Done. [ 1087.520602][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1087.526156][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1088.199898][T13421] Bluetooth: hci5: command 0x1003 tx timeout [ 1088.203896][ T9950] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1088.328557][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.328931][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.329188][T13454] bridge_slave_0: entered allmulticast mode [ 1088.354565][T13454] bridge_slave_0: entered promiscuous mode [ 1088.364815][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.365185][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.365442][T13454] bridge_slave_1: entered allmulticast mode [ 1088.456114][T13454] bridge_slave_1: entered promiscuous mode [ 1093.472502][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1093.480524][T13690] loop0: detected capacity change from 0 to 1024 [ 1093.508650][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.553810][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.677353][T13454] team0: Port device team_slave_0 added [ 1094.708262][T13454] team0: Port device team_slave_1 added [ 1097.432761][T13716] PKCS7: Unknown OID: [4] 0.0 [ 1097.432798][T13716] PKCS7: Only support pkcs7_signedData type [ 1098.179975][T13716] veth17: entered allmulticast mode [ 1099.104726][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.104737][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.104753][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.113083][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.113102][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.113127][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.641785][T13733] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1351'. [ 1103.563791][T13454] hsr_slave_0: entered promiscuous mode [ 1103.565892][T13454] hsr_slave_1: entered promiscuous mode [ 1103.588813][T13454] debugfs: 'hsr0' already exists in 'hsr' [ 1103.588839][T13454] Cannot create hsr debugfs directory [ 1104.208294][T13793] loop1: detected capacity change from 0 to 4096 [ 1104.276366][T13793] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1104.276699][T13793] ntfs3(loop1): Failed to load $Extend (-22). [ 1104.276720][T13793] ntfs3(loop1): Failed to initialize $Extend. [ 1104.342724][ T38] audit: type=1800 audit(1780326889.085:76): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1359" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1104.633436][ T5715] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1104.782383][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 1104.788150][ T5715] usb 2-1: config index 0 descriptor too short (expected 4164, got 68) [ 1104.788191][ T5715] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 1104.788242][ T5715] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1104.788271][ T5715] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1104.788295][ T5715] usb 2-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 1104.855064][ T5715] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 1104.855095][ T5715] usb 2-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 1104.855116][ T5715] usb 2-1: Product: syz [ 1104.855132][ T5715] usb 2-1: Manufacturer: syz [ 1104.855145][ T5715] usb 2-1: SerialNumber: syz [ 1104.893168][T13797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1104.893294][T13797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1106.917217][ T5715] rndis_host 2-1:253.0: skipping garbage [ 1106.923931][ T5715] rndis_host 2-1:253.0: missing RNDIS status endpoint [ 1107.068089][ T5715] usb 2-1: USB disconnect, device number 11 [ 1107.659244][ T5615] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 1107.928306][ T9366] bridge_slave_1: left allmulticast mode [ 1107.928338][ T9366] bridge_slave_1: left promiscuous mode [ 1107.928608][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.104682][ T9366] bridge_slave_0: left allmulticast mode [ 1108.104716][ T9366] bridge_slave_0: left promiscuous mode [ 1108.105558][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.487671][T13421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1108.524357][T13421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1108.526254][T13421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1108.541894][T13421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1108.542611][T13421] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1110.795650][ T9950] Bluetooth: hci5: command tx timeout [ 1110.880292][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.980646][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.061515][ T9366] bond0 (unregistering): Released all slaves [ 1111.295886][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1111.609813][ T9366] hsr_slave_0: left promiscuous mode [ 1111.649826][ T9366] hsr_slave_1: left promiscuous mode [ 1111.650511][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.691803][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.070547][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 1112.120327][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 1112.458924][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1112.495278][T13459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1112.509161][T13459] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1112.520116][T13459] Bluetooth: hci6: command 0x1003 tx timeout [ 1112.526509][T13421] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1112.552668][T13459] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1112.589724][T13459] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1112.590535][T13459] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1112.844447][T13459] Bluetooth: hci5: command tx timeout [ 1114.741483][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 1114.741506][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 1114.759930][T13459] Bluetooth: hci7: command tx timeout [ 1114.920979][T13459] Bluetooth: hci5: command tx timeout [ 1115.027496][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.042236][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.042279][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.042319][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.042625][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 1115.042642][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 1115.776436][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.776529][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.391704][T13933] loop2: detected capacity change from 0 to 128 [ 1116.417353][T13933] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1116.839867][T13459] Bluetooth: hci7: command tx timeout [ 1117.014626][T13459] Bluetooth: hci5: command tx timeout [ 1117.736784][T13949] loop2: detected capacity change from 0 to 1024 [ 1119.597885][T13957] PKCS7: Unknown OID: [4] 0.0 [ 1119.597950][T13957] PKCS7: Only support pkcs7_signedData type [ 1119.893799][ T9950] Bluetooth: hci7: command tx timeout [ 1119.942499][T13957] veth29: entered allmulticast mode [ 1120.569052][T13966] loop2: detected capacity change from 0 to 4096 [ 1120.658423][T13966] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1120.658775][T13966] ntfs3(loop2): Failed to load $Extend (-22). [ 1120.658796][T13966] ntfs3(loop2): Failed to initialize $Extend. [ 1120.726224][ T38] audit: type=1800 audit(1780326905.485:77): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1381" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1121.161037][ T37] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1121.384011][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1121.417106][ T37] usb 3-1: config index 0 descriptor too short (expected 4164, got 68) [ 1121.417134][ T37] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 1121.417171][ T37] usb 3-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1121.417185][ T37] usb 3-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1121.417197][ T37] usb 3-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 1121.471809][ T37] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 1121.471838][ T37] usb 3-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 1121.471849][ T37] usb 3-1: Product: syz [ 1121.471856][ T37] usb 3-1: Manufacturer: syz [ 1121.471864][ T37] usb 3-1: SerialNumber: syz [ 1121.539933][T13968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1121.540043][T13968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1121.942821][ T37] rndis_host 3-1:253.0: skipping garbage [ 1121.942837][ T37] rndis_host 3-1:253.0: missing RNDIS status endpoint [ 1121.960678][T13459] Bluetooth: hci7: command tx timeout [ 1122.035104][ T37] usb 3-1: USB disconnect, device number 18 [ 1122.079837][ T12] bridge_slave_1: left allmulticast mode [ 1122.079871][ T12] bridge_slave_1: left promiscuous mode [ 1122.080134][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.621297][ T12] bridge_slave_0: left allmulticast mode [ 1124.621331][ T12] bridge_slave_0: left promiscuous mode [ 1124.622053][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.662882][ T5613] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1125.490912][ T9950] Bluetooth: hci4: command 0x1003 tx timeout [ 1125.491188][T13459] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1127.191626][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.320482][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.381485][ T12] bond0 (unregistering): Released all slaves [ 1128.619754][ T12] hsr_slave_0: left promiscuous mode [ 1128.660414][ T12] hsr_slave_1: left promiscuous mode [ 1128.661476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.705605][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.620666][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1129.680996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1130.043653][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.043946][T13847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.044217][T13847] bridge_slave_0: entered allmulticast mode [ 1130.054760][T13847] bridge_slave_0: entered promiscuous mode [ 1130.087889][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.089496][T13847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.091147][T13847] bridge_slave_1: entered allmulticast mode [ 1130.108125][T13847] bridge_slave_1: entered promiscuous mode [ 1130.410136][ T5715] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1131.426080][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 1131.429504][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 1131.450031][ T5715] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1131.450060][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.450081][ T5715] usb 2-1: Product: syz [ 1131.450094][ T5715] usb 2-1: Manufacturer: syz [ 1131.450109][ T5715] usb 2-1: SerialNumber: syz [ 1131.506875][ T5715] usb 2-1: config 0 descriptor?? [ 1131.508038][T14062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1131.801299][ T5715] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1131.801427][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1131.801473][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1131.859697][ T5715] usb 2-1: USB disconnect, device number 12 [ 1131.863647][ T5715] mcba_usb 2-1:0.0 can0: device disconnected [ 1132.141908][T13847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.223916][T13847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.542394][T13847] team0: Port device team_slave_0 added [ 1132.650912][T13847] team0: Port device team_slave_1 added [ 1133.391818][T13847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.391834][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.391857][T13847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.811178][T13847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.811188][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.811215][T13847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.949886][ T5715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1134.099894][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 1134.111915][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.111931][ T5715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.114032][ T5715] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.114066][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.114085][ T5715] usb 1-1: Product: syz [ 1134.114094][ T5715] usb 1-1: Manufacturer: syz [ 1134.114101][ T5715] usb 1-1: SerialNumber: syz [ 1134.190111][ T5715] usb 1-1: 0:2 : does not exist [ 1134.411372][ T5715] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1134.954617][T13847] hsr_slave_0: entered promiscuous mode [ 1134.975965][T13847] hsr_slave_1: entered promiscuous mode [ 1134.979497][T13847] debugfs: 'hsr0' already exists in 'hsr' [ 1134.979520][T13847] Cannot create hsr debugfs directory [ 1135.163694][ T5715] usb 1-1: USB disconnect, device number 9 [ 1135.341112][T12624] udevd[12624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.356555][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.356845][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.357097][T13884] bridge_slave_0: entered allmulticast mode [ 1135.365643][T13884] bridge_slave_0: entered promiscuous mode [ 1135.398467][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.404761][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.405028][T13884] bridge_slave_1: entered allmulticast mode [ 1135.418398][T13884] bridge_slave_1: entered promiscuous mode [ 1135.495324][T14110] loop1: detected capacity change from 0 to 4096 [ 1135.536087][T14110] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1135.541621][T14110] ntfs3(loop1): Failed to load $Extend (-22). [ 1135.541644][T14110] ntfs3(loop1): Failed to initialize $Extend. [ 1135.589559][ T38] audit: type=1800 audit(1780326920.345:78): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1400" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1135.981003][T11324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1137.467031][T11324] usb 2-1: Using ep0 maxpacket: 16 [ 1137.512978][T11324] usb 2-1: config index 0 descriptor too short (expected 4164, got 68) [ 1137.513005][T11324] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 1137.513034][T11324] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1137.513047][T11324] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1137.513059][T11324] usb 2-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 1137.524896][T11324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 1137.524925][T11324] usb 2-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 1137.524945][T11324] usb 2-1: Product: syz [ 1137.524966][T11324] usb 2-1: Manufacturer: syz [ 1137.524980][T11324] usb 2-1: SerialNumber: syz [ 1137.588822][T14110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1137.588951][T14110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1137.605469][T13884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.050045][T11324] rndis_host 2-1:253.0: skipping garbage [ 1138.050061][T11324] rndis_host 2-1:253.0: missing RNDIS status endpoint [ 1138.093745][T13884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.133311][T11324] usb 2-1: USB disconnect, device number 13 [ 1138.416107][T13884] team0: Port device team_slave_0 added [ 1138.495436][T13884] team0: Port device team_slave_1 added [ 1138.760058][ T5615] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 1138.875218][T13884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.875229][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.875244][T13884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.961029][T13884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.961043][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.961063][T13884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.513173][T13884] hsr_slave_0: entered promiscuous mode [ 1139.515372][T13884] hsr_slave_1: entered promiscuous mode [ 1139.517455][T13884] debugfs: 'hsr0' already exists in 'hsr' [ 1139.517479][T13884] Cannot create hsr debugfs directory [ 1142.137676][T14139] PKCS7: Unknown OID: [4] 0.0 [ 1142.137687][T14139] PKCS7: Only support pkcs7_signedData type [ 1142.223911][T14139] veth35: entered allmulticast mode [ 1142.513722][T14143] loop0: detected capacity change from 0 to 1024 [ 1143.539998][ T12] bridge_slave_1: left allmulticast mode [ 1143.540033][ T12] bridge_slave_1: left promiscuous mode [ 1143.540297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.014074][ T12] bridge_slave_0: left allmulticast mode [ 1145.014108][ T12] bridge_slave_0: left promiscuous mode [ 1145.032889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.558955][T14165] loop0: detected capacity change from 0 to 1024 [ 1146.272281][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.400192][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.473863][ T12] bond0 (unregistering): Released all slaves [ 1146.659363][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1146.772807][T14176] loop2: detected capacity change from 0 to 4096 [ 1146.986159][T14178] loop0: detected capacity change from 0 to 1024 [ 1147.081122][T14176] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1147.101803][T14176] ntfs3(loop2): Failed to load $Extend (-22). [ 1147.101826][T14176] ntfs3(loop2): Failed to initialize $Extend. [ 1147.130099][ T38] audit: type=1800 audit(1780326931.885:79): pid=14176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1412" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1147.909822][ T6498] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1148.071029][ T6498] usb 3-1: Using ep0 maxpacket: 16 [ 1148.073091][ T6498] usb 3-1: config index 0 descriptor too short (expected 4164, got 68) [ 1148.073130][ T6498] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 1148.073170][ T6498] usb 3-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1148.073187][ T6498] usb 3-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1148.073199][ T6498] usb 3-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 1148.139824][ T6498] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 1148.139851][ T6498] usb 3-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 1148.139871][ T6498] usb 3-1: Product: syz [ 1148.139885][ T6498] usb 3-1: Manufacturer: syz [ 1148.139898][ T6498] usb 3-1: SerialNumber: syz [ 1148.148907][T14176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1148.149014][T14176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1148.184004][ T12] hsr_slave_0: left promiscuous mode [ 1148.225936][ T12] hsr_slave_1: left promiscuous mode [ 1148.226824][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.262543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.468754][ T6498] rndis_host 3-1:253.0: skipping garbage [ 1148.468769][ T6498] rndis_host 3-1:253.0: missing RNDIS status endpoint [ 1148.521698][ T6498] usb 3-1: USB disconnect, device number 19 [ 1149.209097][ T5613] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1149.330549][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1149.421469][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1154.200582][T14222] PKCS7: Unknown OID: [4] 0.0 [ 1154.200618][T14222] PKCS7: Only support pkcs7_signedData type [ 1155.070099][T14222] veth19: entered allmulticast mode [ 1155.127429][T14074] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1155.279748][T14074] usb 2-1: Using ep0 maxpacket: 16 [ 1155.283491][T14074] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 1155.377555][T14074] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1155.377586][T14074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.377606][T14074] usb 2-1: Product: syz [ 1155.377619][T14074] usb 2-1: Manufacturer: syz [ 1155.377633][T14074] usb 2-1: SerialNumber: syz [ 1155.404437][T14074] usb 2-1: config 0 descriptor?? [ 1155.405607][T14218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1155.647249][T14074] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1155.821788][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1155.821871][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1155.827382][ T37] usb 2-1: USB disconnect, device number 14 [ 1155.859298][ T37] mcba_usb 2-1:0.0 can0: device disconnected [ 1156.547650][T14248] loop0: detected capacity change from 0 to 1024 [ 1158.270666][T13847] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1158.324716][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 1158.324739][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 1158.438269][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.442174][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 1158.442193][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 1158.486240][T13847] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1158.645826][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.662907][T13847] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1158.663626][T14262] loop1: detected capacity change from 0 to 1024 [ 1159.359441][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.413917][T13847] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1159.606348][T13847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.159876][ T5715] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1160.311279][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 1160.316788][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.316812][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.374572][ T5715] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1160.374601][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.374619][ T5715] usb 3-1: Product: syz [ 1160.374633][ T5715] usb 3-1: Manufacturer: syz [ 1160.374646][ T5715] usb 3-1: SerialNumber: syz [ 1160.506158][ T5715] usb 3-1: 0:2 : does not exist [ 1160.723601][ T5715] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1161.746682][ T5715] usb 3-1: USB disconnect, device number 20 [ 1161.960086][T12624] udevd[12624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.980715][T13884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1162.020326][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.058398][T13884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1162.125540][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.133642][T13884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1162.178466][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.192706][T13884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1162.267390][T13884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.495921][T13847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.582661][T13847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.655758][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.655998][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.703763][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.703931][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.103018][T13884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.435135][T14313] loop2: detected capacity change from 0 to 32768 [ 1163.480178][T14313] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1163.480209][T14313] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1163.642506][T13459] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1163.744353][T14313] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1163.748527][ T6498] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1163.748538][ T6498] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1163.779534][T13884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.104459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.104551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.203019][ T6498] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 454ms [ 1164.203349][ T6498] gfs2: fsid=syz:syz.0: jid=0: Done [ 1164.203449][T14313] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1164.523256][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.525117][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.230526][T14339] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 1170.206677][T13884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.218713][ T9950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1173.307843][ T9950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1173.319496][ T9950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1173.336827][ T9950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1173.353490][ T9950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.586075][T13459] Bluetooth: hci2: command tx timeout [ 1177.308796][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.308897][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.572247][ T9950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1177.640121][T13421] Bluetooth: hci2: command tx timeout [ 1177.684981][T14382] loop1: detected capacity change from 0 to 32768 [ 1177.852312][ T9950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.023813][ T9950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.543313][ T9950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.551478][ T9950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1180.213774][ T9950] Bluetooth: hci2: command tx timeout [ 1180.659366][T14424] capability: warning: `syz.2.1452' uses 32-bit capabilities (legacy support in use) [ 1180.919850][ T9950] Bluetooth: hci4: command tx timeout [ 1181.466489][T14437] atomic_op ffff888063105218 conn xmit_atomic 0000000000000000 [ 1182.332291][ T9950] Bluetooth: hci2: command tx timeout [ 1182.854327][T14452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.000769][ T9950] Bluetooth: hci4: command tx timeout [ 1184.457460][T14461] warning: `syz.1.1461' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1185.354385][ T9950] Bluetooth: hci4: command tx timeout [ 1187.401585][ T9950] Bluetooth: hci4: command tx timeout [ 1187.881167][T14486] loop2: detected capacity change from 0 to 8192 [ 1191.119874][T14507] loop0: detected capacity change from 0 to 4096 [ 1191.126964][T14507] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1191.291994][T14507] ntfs3(loop0): ino=19, mi_enum_attr [ 1191.292024][T14507] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1191.293471][T14507] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1191.610044][T14507] ntfs3(loop0): mft corrupted [ 1193.376890][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.377181][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.377511][T14363] bridge_slave_0: entered allmulticast mode [ 1193.383669][T14363] bridge_slave_0: entered promiscuous mode [ 1194.179460][T14529] loop2: detected capacity change from 0 to 512 [ 1194.185328][T14529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.194346][T14529] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1194.402968][T14529] EXT4-fs (loop2): 1 truncate cleaned up [ 1194.407641][T14529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.426824][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.429150][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.429468][T14363] bridge_slave_1: entered allmulticast mode [ 1194.473784][T14363] bridge_slave_1: entered promiscuous mode [ 1194.960295][ T57] bridge_slave_1: left allmulticast mode [ 1194.960325][ T57] bridge_slave_1: left promiscuous mode [ 1194.960554][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.979527][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.151704][ T57] bridge_slave_0: left allmulticast mode [ 1195.151740][ T57] bridge_slave_0: left promiscuous mode [ 1195.152036][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.917327][T14562] loop0: detected capacity change from 0 to 40427 [ 1199.918535][T14562] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1199.918557][T14562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1199.937116][T14562] F2FS-fs (loop0): invalid crc value [ 1200.046592][T14562] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1200.061321][T14562] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1200.061348][T14562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1200.607182][T14571] loop2: detected capacity change from 0 to 32768 [ 1202.439672][T14571] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1202.439693][T14571] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1202.689391][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.699293][T14571] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1202.706739][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1202.706755][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1202.792370][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.901246][ T57] bond0 (unregistering): Released all slaves [ 1202.907678][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 200ms [ 1202.907937][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 1202.908041][T14571] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1203.187536][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.292879][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.767591][T14363] team0: Port device team_slave_0 added [ 1203.768647][T14392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.768940][T14392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.769109][T14392] bridge_slave_0: entered allmulticast mode [ 1203.773149][T14392] bridge_slave_0: entered promiscuous mode [ 1205.627397][T14363] team0: Port device team_slave_1 added [ 1205.627956][T14392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.628230][T14392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.628823][T14392] bridge_slave_1: entered allmulticast mode [ 1205.637592][T14392] bridge_slave_1: entered promiscuous mode [ 1205.908181][T14589] loop1: detected capacity change from 0 to 4096 [ 1205.910937][T14589] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1205.911469][T14589] ntfs3(loop1): It is recommended to use chkdsk. [ 1205.926826][ T57] hsr_slave_0: left promiscuous mode [ 1205.942328][T14589] ntfs3(loop1): MFT: r=0, expect seq=1 instead of 0! [ 1205.942434][T14589] ntfs3(loop1): Failed to load $MFT (-22). [ 1205.965461][ T57] hsr_slave_1: left promiscuous mode [ 1205.968150][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.000803][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.789514][T14601] loop1: detected capacity change from 0 to 2048 [ 1207.087110][T14601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.459406][T13421] Bluetooth: hci4: command 0x0405 tx timeout [ 1208.463638][T14608] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1208.834993][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.928894][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1209.001315][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1209.012927][ T5713] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1209.169868][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 1209.172183][ T5713] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1209.172213][ T5713] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1209.172239][ T5713] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.172262][ T5713] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.172303][ T5713] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1209.172325][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.231295][ T38] audit: type=1326 audit(1780326993.985:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6aa3ce59 code=0x7ffc0000 [ 1209.243574][ T38] audit: type=1326 audit(1780326994.005:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6aa3ce59 code=0x7ffc0000 [ 1209.243623][ T38] audit: type=1326 audit(1780326994.005:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243662][ T38] audit: type=1326 audit(1780326994.005:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243701][ T38] audit: type=1326 audit(1780326994.005:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243740][ T38] audit: type=1326 audit(1780326994.005:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243779][ T38] audit: type=1326 audit(1780326994.005:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243817][ T38] audit: type=1326 audit(1780326994.005:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.243857][ T38] audit: type=1326 audit(1780326994.005:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.264326][ T38] audit: type=1326 audit(1780326994.005:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.1.1504" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f6aa3caeb code=0x7ffc0000 [ 1209.897308][ T5713] usb 1-1: GET_CAPABILITIES returned 0 [ 1209.897358][ T5713] usbtmc 1-1:16.0: can't read capabilities [ 1210.852704][T14612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.853288][T14612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.912020][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'. [ 1210.912053][T14612] netlink: 'syz.0.1503': attribute type 8 has an invalid length. [ 1211.021323][ T6498] usb 1-1: USB disconnect, device number 10 [ 1211.092842][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.092860][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.092883][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.146414][T14392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.163414][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.163429][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.163454][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.174717][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 1211.247879][T14392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.300400][T14631] l2tp_ppp: sess 2/0: no socket in recv [ 1212.990530][T14074] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1213.230707][T14074] usb 2-1: Using ep0 maxpacket: 16 [ 1213.233092][T14074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1213.242377][T14074] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1213.242404][T14074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.242424][T14074] usb 2-1: Product: syz [ 1213.242438][T14074] usb 2-1: Manufacturer: syz [ 1213.242451][T14074] usb 2-1: SerialNumber: syz [ 1213.253005][T14074] usb 2-1: config 0 descriptor?? [ 1213.259349][T14074] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1213.259379][T14074] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1213.403544][T14392] team0: Port device team_slave_0 added [ 1213.698959][T14392] team0: Port device team_slave_1 added [ 1213.717277][T14363] hsr_slave_0: entered promiscuous mode [ 1213.719557][T14363] hsr_slave_1: entered promiscuous mode [ 1213.722040][T14363] debugfs: 'hsr0' already exists in 'hsr' [ 1213.722063][T14363] Cannot create hsr debugfs directory [ 1213.886667][T14074] em28xx 2-1:0.0: chip ID is em2765 [ 1213.932147][T14392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.932162][T14392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.932186][T14392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.041422][T14392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.041438][T14392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.041462][T14392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.762468][T14392] hsr_slave_0: entered promiscuous mode [ 1214.764794][T14392] hsr_slave_1: entered promiscuous mode [ 1214.766546][T14392] debugfs: 'hsr0' already exists in 'hsr' [ 1214.766569][T14392] Cannot create hsr debugfs directory [ 1214.782092][T14074] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1214.782144][T14074] em28xx 2-1:0.0: board has no eeprom [ 1214.793282][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1215.244540][T14074] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1215.245639][T14074] em28xx 2-1:0.0: dvb set to bulk mode. [ 1215.350289][ T5751] em28xx 2-1:0.0: Binding DVB extension [ 1216.163392][T14074] usb 2-1: USB disconnect, device number 15 [ 1216.168302][T14074] em28xx 2-1:0.0: Disconnecting em28xx [ 1216.934655][T14673] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1515'. [ 1217.010334][T14674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1515'. [ 1217.188119][ T5751] em28xx 2-1:0.0: Registering input extension [ 1217.203993][T14074] em28xx 2-1:0.0: Closing input extension [ 1217.217265][T14673] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 1217.285543][T14674] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 1218.823188][T14074] em28xx 2-1:0.0: Freeing device [ 1220.170801][T14698] usb usb7: usbfs: process 14698 (syz.0.1523) did not claim interface 0 before use [ 1221.789789][ T5713] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1221.940250][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 1221.942254][ T5713] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1221.942275][ T5713] usb 3-1: config 0 has no interface number 0 [ 1221.942312][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1221.942333][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1221.942357][ T5713] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1221.942382][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1221.942421][ T5713] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1221.942443][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.994120][ T5713] usb 3-1: config 0 descriptor?? [ 1222.406975][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 1222.602917][ T5713] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1222.608542][ T5713] usb 3-1: USB disconnect, device number 21 [ 1222.670268][ T5713] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1225.344624][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1229.688464][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1230.363094][ T9366] bridge_slave_1: left allmulticast mode [ 1230.363127][ T9366] bridge_slave_1: left promiscuous mode [ 1230.363429][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.645610][T13459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1230.893252][T13459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1230.980765][T13459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1231.577421][T13459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1231.581356][T13459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1231.754239][ T9366] bridge_slave_0: left allmulticast mode [ 1231.754268][ T9366] bridge_slave_0: left promiscuous mode [ 1231.754487][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.802470][ T5713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1233.802682][T13459] Bluetooth: hci5: command tx timeout [ 1233.991010][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 1233.992910][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1233.992951][ T5713] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1233.992974][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.035038][ T5713] usb 1-1: config 0 descriptor?? [ 1234.065700][ T5713] hub 1-1:0.0: bad descriptor, ignoring hub [ 1234.065738][ T5713] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1234.088169][ T5713] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1234.373195][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.420183][ T5616] usb 1-1: USB disconnect, device number 11 [ 1234.433960][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.472087][ T9366] bond0 (unregistering): Released all slaves [ 1235.369820][ T9366] hsr_slave_0: left promiscuous mode [ 1235.411415][ T9366] hsr_slave_1: left promiscuous mode [ 1235.412053][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.450389][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.879961][T13459] Bluetooth: hci5: command tx timeout [ 1236.000528][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 1236.050962][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 1236.874429][T14956] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1585'. [ 1236.936452][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 1237.115883][T13421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1237.138562][T13421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1237.160056][T13421] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1237.284502][T13421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1237.316391][T13421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1237.959913][T13459] Bluetooth: hci5: command tx timeout [ 1238.193019][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1238.607320][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.607405][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.796418][T13459] Bluetooth: hci2: command tx timeout [ 1240.039791][T13459] Bluetooth: hci5: command tx timeout [ 1240.847056][ T9366] bridge_slave_1: left allmulticast mode [ 1240.847091][ T9366] bridge_slave_1: left promiscuous mode [ 1240.847348][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.993694][ T9366] bridge_slave_0: left allmulticast mode [ 1240.993728][ T9366] bridge_slave_0: left promiscuous mode [ 1240.994008][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.880507][T13459] Bluetooth: hci2: command tx timeout [ 1242.340772][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.490949][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.573309][ T9366] bond0 (unregistering): Released all slaves [ 1242.844010][ T1247] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1243.019749][ T1247] usb 1-1: Using ep0 maxpacket: 16 [ 1243.021990][ T1247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.022042][ T1247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1243.022079][ T1247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1243.022101][ T1247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1243.022123][ T1247] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.027624][ T1247] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1243.027652][ T1247] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1243.027672][ T1247] usb 1-1: Manufacturer: syz [ 1243.167769][ T1247] usb 1-1: config 0 descriptor?? [ 1244.028430][T13459] Bluetooth: hci2: command tx timeout [ 1244.369793][ T1247] rc_core: IR keymap rc-hauppauge not found [ 1244.369807][ T1247] Registered IR keymap rc-empty [ 1244.370365][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.389859][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.433365][ T1247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1244.437126][ T1247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 1244.563513][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.579846][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.580245][ T9366] hsr_slave_0: left promiscuous mode [ 1244.602643][ T9366] hsr_slave_1: left promiscuous mode [ 1244.602748][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.603661][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.619950][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.639952][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.640656][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.660034][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.679876][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.700992][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.703769][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 1244.703783][ T38] audit: type=1326 audit(1780327029.455:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.703826][ T38] audit: type=1326 audit(1780327029.465:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.719854][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.740427][ T1247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1244.761076][ T38] audit: type=1326 audit(1780327029.525:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.761126][ T38] audit: type=1326 audit(1780327029.525:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.761166][ T38] audit: type=1326 audit(1780327029.525:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57474cd68e code=0x7ffc0000 [ 1244.761211][ T38] audit: type=1326 audit(1780327029.525:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.761250][ T38] audit: type=1326 audit(1780327029.525:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.762487][ T38] audit: type=1326 audit(1780327029.525:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.762857][ T38] audit: type=1326 audit(1780327029.525:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1244.762892][ T38] audit: type=1326 audit(1780327029.525:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.0.1602" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f574750ce59 code=0x7ffc0000 [ 1245.012992][ T1247] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1245.013009][ T1247] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1245.064053][T11324] usb 1-1: USB disconnect, device number 12 [ 1245.500673][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 1245.540300][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 1245.920292][T14865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.920474][T14865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.920646][T14865] bridge_slave_0: entered allmulticast mode [ 1245.934104][T14865] bridge_slave_0: entered promiscuous mode [ 1245.988130][T14865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.988345][T14865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.988509][T14865] bridge_slave_1: entered allmulticast mode [ 1246.018149][T14865] bridge_slave_1: entered promiscuous mode [ 1246.043397][T13459] Bluetooth: hci2: command tx timeout [ 1246.246906][T14865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.347984][T14865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.632933][T14865] team0: Port device team_slave_0 added [ 1246.677309][T14865] team0: Port device team_slave_1 added [ 1249.547224][T14865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.547239][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.547258][T14865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.642072][T14865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.642083][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.642098][T14865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.065591][T14865] hsr_slave_0: entered promiscuous mode [ 1250.067722][T14865] hsr_slave_1: entered promiscuous mode [ 1250.082940][T14865] debugfs: 'hsr0' already exists in 'hsr' [ 1250.082964][T14865] Cannot create hsr debugfs directory [ 1250.741358][ T9366] bridge_slave_1: left allmulticast mode [ 1250.741382][ T9366] bridge_slave_1: left promiscuous mode [ 1250.741567][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.031809][ T9366] bridge_slave_0: left allmulticast mode [ 1252.031844][ T9366] bridge_slave_0: left promiscuous mode [ 1252.032128][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.970625][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.149395][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.267448][ T9366] bond0 (unregistering): Released all slaves [ 1255.051122][ T9366] hsr_slave_0: left promiscuous mode [ 1255.089803][ T9366] hsr_slave_1: left promiscuous mode [ 1255.090538][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.130393][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.823062][ T5616] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1255.850459][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 1256.152650][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 1256.909795][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 1256.916535][ T5616] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1256.916567][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1256.916601][ T5616] usb 3-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.00 [ 1256.916624][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.992309][ T5616] usb 3-1: config 0 descriptor?? [ 1257.227334][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.248216][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.282484][T13459] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1257.282515][T13459] CPU: 1 UID: 0 PID: 13459 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1257.282547][T13459] Tainted: [L]=SOFTLOCKUP [ 1257.282554][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1257.282567][T13459] Workqueue: hci0 hci_rx_work [ 1257.282602][T13459] Call Trace: [ 1257.282610][T13459] [ 1257.282619][T13459] dump_stack_lvl+0xe8/0x150 [ 1257.282650][T13459] sysfs_create_dir_ns+0x271/0x2a0 [ 1257.282678][T13459] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1257.282707][T13459] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1257.282737][T13459] ? rt_spin_unlock+0x160/0x200 [ 1257.282767][T13459] kobject_add_internal+0x631/0xd10 [ 1257.282803][T13459] kobject_add+0x163/0x240 [ 1257.282833][T13459] ? __pfx_kobject_add+0x10/0x10 [ 1257.282865][T13459] ? get_device_parent+0x370/0x3a0 [ 1257.282902][T13459] device_add+0x408/0xb90 [ 1257.282937][T13459] hci_conn_add_sysfs+0xd5/0x210 [ 1257.282971][T13459] le_conn_complete_evt+0x10e6/0x16b0 [ 1257.283001][T13459] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1257.283026][T13459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1257.283060][T13459] ? lockdep_hardirqs_on+0x7a/0x110 [ 1257.283080][T13459] ? skb_pull_data+0xfb/0x200 [ 1257.283109][T13459] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1257.283135][T13459] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1257.283163][T13459] hci_event_packet+0x659/0xef0 [ 1257.283208][T13459] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1257.283236][T13459] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1257.283256][T13459] ? __pfx_hci_event_packet+0x10/0x10 [ 1257.283285][T13459] ? rt_spin_unlock+0x14f/0x200 [ 1257.283319][T13459] ? hci_send_to_monitor+0xe2/0x590 [ 1257.283346][T13459] hci_rx_work+0x3ee/0x1040 [ 1257.283384][T13459] ? process_one_work+0x8be/0x1630 [ 1257.283415][T13459] process_one_work+0x98b/0x1630 [ 1257.283468][T13459] ? __pfx_process_one_work+0x10/0x10 [ 1257.283496][T13459] ? do_raw_spin_lock+0x12b/0x2f0 [ 1257.283539][T13459] worker_thread+0xb49/0x1140 [ 1257.283571][T13459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1257.283619][T13459] kthread+0x388/0x470 [ 1257.283645][T13459] ? __pfx_worker_thread+0x10/0x10 [ 1257.283663][T13459] ? __pfx_kthread+0x10/0x10 [ 1257.283690][T13459] ret_from_fork+0x514/0xb70 [ 1257.283717][T13459] ? __pfx_ret_from_fork+0x10/0x10 [ 1257.283738][T13459] ? __switch_to+0xc79/0x1410 [ 1257.283762][T13459] ? __pfx_kthread+0x10/0x10 [ 1257.283784][T13459] ret_from_fork_asm+0x1a/0x30 [ 1257.283821][T13459] [ 1257.283994][T13459] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1257.284034][T13459] Bluetooth: hci0: failed to register connection device [ 1258.028912][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.029306][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.031280][T14960] bridge_slave_0: entered allmulticast mode [ 1258.099942][T14960] bridge_slave_0: entered promiscuous mode [ 1258.183380][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.184418][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.184660][T14960] bridge_slave_1: entered allmulticast mode [ 1258.189129][T14960] bridge_slave_1: entered promiscuous mode [ 1258.441759][T15176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1258.466222][T15176] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1258.466611][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.695477][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.822812][T15176] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1258.974775][T15176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1258.974858][T15176] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1259.071250][T15176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1259.074202][T15176] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1259.196946][T14960] team0: Port device team_slave_0 added [ 1259.225036][T14960] team0: Port device team_slave_1 added [ 1259.418520][T15176] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1259.427688][T15176] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1259.617922][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.617933][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.617948][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.711001][T15176] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1259.719207][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.719216][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.719231][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.853093][T15176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1259.854450][T15176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1259.933549][T15176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1259.988670][T14960] hsr_slave_0: entered promiscuous mode [ 1259.991411][T14960] hsr_slave_1: entered promiscuous mode [ 1260.005821][T14960] debugfs: 'hsr0' already exists in 'hsr' [ 1260.005841][T14960] Cannot create hsr debugfs directory [ 1260.181590][ T5616] usbhid 3-1:0.0: can't add hid device: -71 [ 1260.181716][ T5616] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1260.232906][ T5616] usb 3-1: USB disconnect, device number 22 [ 1260.351223][T14865] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1260.407682][T14865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1260.437531][T14865] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1260.445729][T13459] Bluetooth: hci0: command 0x0406 tx timeout [ 1260.618251][T14865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1260.627122][ T5616] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1261.422250][T13421] Bluetooth: hci3: command 0x0406 tx timeout [ 1261.467190][T13459] Bluetooth: hci1: command 0x0406 tx timeout [ 1261.478655][T14865] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1261.495406][T13459] Bluetooth: hci5: command 0x0c1a tx timeout [ 1261.814302][T14865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1261.972187][T13459] Bluetooth: hci2: command 0x0c1a tx timeout [ 1261.998489][T14865] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1261.998793][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 1262.015146][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.015199][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1262.015226][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1262.015248][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1262.015270][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.016659][ T5616] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1262.016684][ T5616] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1262.016704][ T5616] usb 3-1: Manufacturer: syz [ 1262.019604][T14865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1262.457303][ T5616] usb 3-1: config 0 descriptor?? [ 1262.519725][T13459] Bluetooth: hci0: command 0x0406 tx timeout [ 1262.789847][ T5616] rc_core: IR keymap rc-hauppauge not found [ 1262.789866][ T5616] Registered IR keymap rc-empty [ 1262.790015][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1262.823129][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1262.912596][ T5616] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1262.941898][ T5616] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 1262.973322][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.063123][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.082442][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.112274][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.135287][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.152514][ T38] kauditd_printk_skb: 22 callbacks suppressed [ 1263.152530][ T38] audit: type=1326 audit(1780327047.915:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.154471][ T38] audit: type=1326 audit(1780327047.915:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.154514][ T38] audit: type=1326 audit(1780327047.915:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.154552][ T38] audit: type=1326 audit(1780327047.915:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f145b0dd68e code=0x7ffc0000 [ 1263.154645][ T38] audit: type=1326 audit(1780327047.915:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.154959][ T38] audit: type=1326 audit(1780327047.915:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.155005][ T38] audit: type=1326 audit(1780327047.915:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.155600][ T38] audit: type=1326 audit(1780327047.915:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.155644][ T38] audit: type=1326 audit(1780327047.915:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.155768][ T38] audit: type=1326 audit(1780327047.915:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15197 comm="syz.2.1654" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145b11ce59 code=0x7ffc0000 [ 1263.163363][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.180027][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.201019][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.221351][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.240255][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.387092][ T5616] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1263.387117][ T5616] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1263.443727][ T5616] usb 3-1: USB disconnect, device number 23 [ 1263.479858][T13459] Bluetooth: hci1: command 0x0406 tx timeout [ 1263.479895][T13459] Bluetooth: hci3: command 0x0406 tx timeout [ 1263.569763][T13421] Bluetooth: hci5: command 0x0c1a tx timeout [ 1264.041045][T13421] Bluetooth: hci2: command 0x0c1a tx timeout [ 1264.358864][T14865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.152241][T13421] Bluetooth: hci0: command 0x0406 tx timeout [ 1265.640468][T13459] Bluetooth: hci5: command 0x0c1a tx timeout [ 1265.699558][T15243] loop1: detected capacity change from 0 to 512 [ 1265.923825][T15243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.923937][T15243] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.952963][T14865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.119818][T13459] Bluetooth: hci2: command 0x0c1a tx timeout [ 1266.234357][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.234458][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.265972][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.487009][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.698828][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.948104][T14960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1268.631602][T14960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1268.639074][T14960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1268.808553][T14960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1268.833803][T14960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1268.909152][T14960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1268.927946][T14960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1268.975449][T14960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1269.825836][T15273] ================================================================== [ 1269.825852][T15273] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 1269.825879][T15273] Read of size 8 at addr ffff888029cc6a00 by task syz.2.1671/15273 [ 1269.825896][T15273] [ 1269.825911][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.2.1671 Tainted: G L syzkaller #0 PREE[ 1269.825911][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.2.1671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1269.825940][T15273] Tainted: [L]=SOFTLOCKUP [ 1269.825948][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.825961][T15273] Call Trace: [ 1269.825969][T15273] [ 1269.825978][T15273] dump_stack_lvl+0xe8/0x150 [ 1269.826007][T15273] print_address_description+0x55/0x1e0 [ 1269.826034][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.826054][T15273] print_report+0x58/0x70 [ 1269.826078][T15273] kasan_report+0x117/0x150 [ 1269.826106][T15273] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1269.826140][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.826162][T15273] ? ep_insert+0xbbb/0x1820 [ 1269.826187][T15273] reverse_path_check_proc+0x5b/0x240 [ 1269.826214][T15273] ? ep_insert+0xbbb/0x1820 [ 1269.826239][T15273] ep_insert+0xc6c/0x1820 [ 1269.826273][T15273] ? __pfx_ep_insert+0x10/0x10 [ 1269.826305][T15273] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.826323][T15273] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1269.826352][T15273] ? mutex_lock_nested+0x152/0x1d0 [ 1269.826377][T15273] ? do_epoll_ctl_file+0xc69/0xed0 [ 1269.826403][T15273] do_epoll_ctl_file+0x8bb/0xed0 [ 1269.826432][T15273] ? do_epoll_ctl_file+0xac3/0xed0 [ 1269.826463][T15273] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1269.826492][T15273] ? __fget_files+0x3a6/0x420 [ 1269.826517][T15273] ? __fget_files+0x2a/0x420 [ 1269.826545][T15273] __se_sys_epoll_ctl+0x14e/0x210 [ 1269.826577][T15273] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1269.826609][T15273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.826630][T15273] do_syscall_64+0x174/0x580 [ 1269.826649][T15273] ? trace_irq_disable+0x3b/0x140 [ 1269.826675][T15273] ? clear_bhb_loop+0x40/0x90 [ 1269.826698][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.826717][T15273] RIP: 0033:0x7f145b11ce59 [ 1269.826735][T15273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.826753][T15273] RSP: 002b:00007f1459334028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1269.826775][T15273] RAX: ffffffffffffffda RBX: 00007f145b396180 RCX: 00007f145b11ce59 [ 1269.826790][T15273] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1269.826803][T15273] RBP: 00007f145b1b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1269.826816][T15273] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.826828][T15273] R13: 00007f145b396218 R14: 00007f145b396180 R15: 00007ffda94270d8 [ 1269.826849][T15273] [ 1269.826856][T15273] [ 1269.826861][T15273] Allocated by task 15267: [ 1269.826871][T15273] kasan_save_track+0x3e/0x80 [ 1269.826895][T15273] __kasan_slab_alloc+0x6c/0x80 [ 1269.826919][T15273] kmem_cache_alloc_noprof+0x33b/0x680 [ 1269.826943][T15273] ep_insert+0x512/0x1820 [ 1269.826966][T15273] do_epoll_ctl_file+0x8bb/0xed0 [ 1269.826992][T15273] __se_sys_epoll_ctl+0x14e/0x210 [ 1269.827019][T15273] do_syscall_64+0x174/0x580 [ 1269.827036][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.827054][T15273] [ 1269.827059][T15273] Freed by task 15269: [ 1269.827067][T15273] kasan_save_track+0x3e/0x80 [ 1269.827090][T15273] kasan_save_free_info+0x46/0x50 [ 1269.827107][T15273] __kasan_slab_free+0x5c/0x80 [ 1269.827129][T15273] kmem_cache_free+0x187/0x6c0 [ 1269.827153][T15273] eventpoll_release_file+0xc2/0x240 [ 1269.827182][T15273] __fput+0x83c/0xa70 [ 1269.827211][T15273] task_work_run+0x1d9/0x270 [ 1269.827233][T15273] exit_to_user_mode_loop+0x193/0x680 [ 1269.827257][T15273] do_syscall_64+0x353/0x580 [ 1269.827271][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.827288][T15273] [ 1269.827293][T15273] The buggy address belongs to the object at ffff888029cc6a00 [ 1269.827293][T15273] which belongs to the cache ep_head of size 16 [ 1269.827310][T15273] The buggy address is located 0 bytes inside of [ 1269.827310][T15273] freed 16-byte region [ffff888029cc6a00, ffff888029cc6a10) [ 1269.827329][T15273] [ 1269.827334][T15273] The buggy address belongs to the physical page: [ 1269.827355][T15273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029cc6aa0 pfn:0x29cc6 [ 1269.827374][T15273] memcg:ffff88803da34001 [ 1269.827383][T15273] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1269.827404][T15273] page_type: f5(slab) [ 1269.827423][T15273] raw: 0080000000000200 ffff8880206a8dc0 ffffea0000fc4410 ffffea0000ccce10 [ 1269.827441][T15273] raw: ffff888029cc6aa0 0000000800800033 00000000f5000000 ffff88803da34001 [ 1269.827452][T15273] page dumped because: kasan: bad access detected [ 1269.827466][T15273] page_owner tracks the page as allocated [ 1269.827473][T15273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4981, tgid 4981 (udevd), ts 24318313236, free_ts 23730233504 [ 1269.827508][T15273] post_alloc_hook+0x1f9/0x250 [ 1269.827531][T15273] get_page_from_freelist+0x265c/0x26e0 [ 1269.827561][T15273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1269.827589][T15273] allocate_slab+0x74/0x5e0 [ 1269.827607][T15273] refill_objects+0x33c/0x3d0 [ 1269.827623][T15273] __pcs_replace_empty_main+0x373/0x720 [ 1269.827642][T15273] kmem_cache_alloc_noprof+0x433/0x680 [ 1269.827665][T15273] ep_insert+0x512/0x1820 [ 1269.827691][T15273] do_epoll_ctl_file+0x8bb/0xed0 [ 1269.827716][T15273] __se_sys_epoll_ctl+0x14e/0x210 [ 1269.827744][T15273] do_syscall_64+0x174/0x580 [ 1269.827762][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.827779][T15273] page last free pid 29 tgid 29 stack trace: [ 1269.827791][T15273] __free_frozen_pages+0x10af/0x1190 [ 1269.827814][T15273] tlb_remove_table_rcu+0x85/0x100 [ 1269.827840][T15273] rcu_cpu_kthread+0x99e/0x1470 [ 1269.827864][T15273] smpboot_thread_fn+0x541/0xa50 [ 1269.827882][T15273] kthread+0x388/0x470 [ 1269.827902][T15273] ret_from_fork+0x514/0xb70 [ 1269.827925][T15273] ret_from_fork_asm+0x1a/0x30 [ 1269.827950][T15273] [ 1269.827954][T15273] Memory state around the buggy address: [ 1269.827963][T15273] ffff888029cc6900: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1269.827975][T15273] ffff888029cc6980: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1269.827986][T15273] >ffff888029cc6a00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1269.827996][T15273] ^ [ 1269.828005][T15273] ffff888029cc6a80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1269.828017][T15273] ffff888029cc6b00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1269.828026][T15273] ================================================================== [ 1269.865337][T15273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1269.865364][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.2.1671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1269.865394][T15273] Tainted: [L]=SOFTLOCKUP [ 1269.865403][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.865415][T15273] Call Trace: [ 1269.865424][T15273] [ 1269.865432][T15273] vpanic+0x56c/0xa60 [ 1269.865466][T15273] ? __pfx_vpanic+0x10/0x10 [ 1269.865499][T15273] panic+0xc5/0xd0 [ 1269.865526][T15273] ? __pfx_panic+0x10/0x10 [ 1269.865553][T15273] ? preempt_schedule_thunk+0x16/0x40 [ 1269.865576][T15273] ? preempt_schedule_thunk+0x16/0x40 [ 1269.865597][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.865618][T15273] check_panic_on_warn+0x89/0xb0 [ 1269.865643][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.865662][T15273] end_report+0x73/0x170 [ 1269.865691][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.865710][T15273] kasan_report+0x128/0x150 [ 1269.865736][T15273] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1269.865770][T15273] ? reverse_path_check_proc+0x5b/0x240 [ 1269.865792][T15273] ? ep_insert+0xbbb/0x1820 [ 1269.865820][T15273] reverse_path_check_proc+0x5b/0x240 [ 1269.865842][T15273] ? ep_insert+0xbbb/0x1820 [ 1269.865870][T15273] ep_insert+0xc6c/0x1820 [ 1269.865905][T15273] ? __pfx_ep_insert+0x10/0x10 [ 1269.865938][T15273] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.865956][T15273] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1269.865987][T15273] ? mutex_lock_nested+0x152/0x1d0 [ 1269.866011][T15273] ? do_epoll_ctl_file+0xc69/0xed0 [ 1269.866041][T15273] do_epoll_ctl_file+0x8bb/0xed0 [ 1269.866071][T15273] ? do_epoll_ctl_file+0xac3/0xed0 [ 1269.866101][T15273] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1269.866132][T15273] ? __fget_files+0x3a6/0x420 [ 1269.866157][T15273] ? __fget_files+0x2a/0x420 [ 1269.866186][T15273] __se_sys_epoll_ctl+0x14e/0x210 [ 1269.866225][T15273] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1269.866258][T15273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.866280][T15273] do_syscall_64+0x174/0x580 [ 1269.866299][T15273] ? trace_irq_disable+0x3b/0x140 [ 1269.866324][T15273] ? clear_bhb_loop+0x40/0x90 [ 1269.866344][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.866363][T15273] RIP: 0033:0x7f145b11ce59 [ 1269.866380][T15273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.866397][T15273] RSP: 002b:00007f1459334028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1269.866418][T15273] RAX: ffffffffffffffda RBX: 00007f145b396180 RCX: 00007f145b11ce59 [ 1269.866433][T15273] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1269.866446][T15273] RBP: 00007f145b1b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1269.866459][T15273] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.866473][T15273] R13: 00007f145b396218 R14: 00007f145b396180 R15: 00007ffda94270d8 [ 1269.866498][T15273] [ 1269.866764][T15273] Kernel Offset: disabled