last executing test programs: 5.246915816s ago: executing program 2 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)="a68eeaa98d8a89a49e", 0x0, 0x2, 0x0, 0x8}, 0x50) 5.151523912s ago: executing program 2 (id=175): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000280)) 4.425390424s ago: executing program 0 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) 4.353491336s ago: executing program 2 (id=177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffda5, 0x0, 0x0}) 4.150867141s ago: executing program 0 (id=179): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r4 = socket(0x10, 0x80002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.371226842s ago: executing program 2 (id=180): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000440)) 3.173153545s ago: executing program 2 (id=181): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) dup3(r1, r0, 0x0) 3.018983252s ago: executing program 0 (id=183): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) keyctl$revoke(0x3, r0) 2.958581922s ago: executing program 0 (id=184): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) 2.72691318s ago: executing program 3 (id=186): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) 2.574951777s ago: executing program 1 (id=188): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0x4175, 0x40, 0x0, 0x800003d7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0xfffffec1) syz_open_dev$MSR(0x0, 0xdc, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.498837729s ago: executing program 3 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 2.473933183s ago: executing program 0 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, &(0x7f00000001c0)) 2.308461701s ago: executing program 3 (id=191): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%+9llu \x00'}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x89}) 2.243005282s ago: executing program 1 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000780)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cb92723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 2.050716465s ago: executing program 1 (id=193): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 821.966872ms ago: executing program 0 (id=194): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') 525.818382ms ago: executing program 1 (id=195): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="5a933a0c0aed7b1101a416a843e26a944e86ea6901837d2eca860bbe", 0x1c}], 0x1) 415.5203ms ago: executing program 3 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, &(0x7f0000000640)=""/147}, 0x20) 393.651084ms ago: executing program 1 (id=197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x3, 0x0, 0xb, 0x3}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 206.872646ms ago: executing program 1 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 206.372886ms ago: executing program 3 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008e4}, 0x0) 116.326961ms ago: executing program 3 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xb375) read$FUSE(r4, 0x0, 0x0) 0s ago: executing program 2 (id=201): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008"], 0x30}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 57.183068][ T5756] cgroup: Unknown subsys name 'net' [ 57.318063][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.767555][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.337101][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.341276][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.346931][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.352845][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.366421][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.366488][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.366495][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.374925][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.381832][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.388129][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.395851][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.402679][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.410628][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.417082][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.436682][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.444364][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.444648][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.459290][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.466657][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.468903][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.483439][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.522452][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.530559][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.542760][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.866047][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 60.982014][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 61.001254][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 61.064453][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.072459][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.079685][ T5769] bridge_slave_0: entered allmulticast mode [ 61.087005][ T5769] bridge_slave_0: entered promiscuous mode [ 61.108797][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 61.125271][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.134629][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.142158][ T5769] bridge_slave_1: entered allmulticast mode [ 61.148798][ T5769] bridge_slave_1: entered promiscuous mode [ 61.202069][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.209263][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.216518][ T5770] bridge_slave_0: entered allmulticast mode [ 61.223770][ T5770] bridge_slave_0: entered promiscuous mode [ 61.247972][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.258011][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.265585][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.272868][ T5770] bridge_slave_1: entered allmulticast mode [ 61.279458][ T5770] bridge_slave_1: entered promiscuous mode [ 61.296262][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.354024][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.361452][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.368567][ T5771] bridge_slave_0: entered allmulticast mode [ 61.375516][ T5771] bridge_slave_0: entered promiscuous mode [ 61.399274][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.408982][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.416540][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.424097][ T5771] bridge_slave_1: entered allmulticast mode [ 61.430706][ T5771] bridge_slave_1: entered promiscuous mode [ 61.448845][ T5769] team0: Port device team_slave_0 added [ 61.456538][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.492869][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.511940][ T5769] team0: Port device team_slave_1 added [ 61.528996][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.538632][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.546267][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.553690][ T5768] bridge_slave_0: entered allmulticast mode [ 61.560349][ T5768] bridge_slave_0: entered promiscuous mode [ 61.577183][ T5770] team0: Port device team_slave_0 added [ 61.593926][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.601066][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.608588][ T5768] bridge_slave_1: entered allmulticast mode [ 61.615473][ T5768] bridge_slave_1: entered promiscuous mode [ 61.633406][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.640355][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.666340][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.682082][ T5770] team0: Port device team_slave_1 added [ 61.705496][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.712843][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.738862][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.767236][ T5771] team0: Port device team_slave_0 added [ 61.776453][ T5771] team0: Port device team_slave_1 added [ 61.793854][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.836679][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.848747][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.855976][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.882277][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.900686][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.907767][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.934606][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.956205][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.963178][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.989200][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.009942][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.022094][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.048497][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.085056][ T5769] hsr_slave_0: entered promiscuous mode [ 62.092195][ T5769] hsr_slave_1: entered promiscuous mode [ 62.119981][ T5768] team0: Port device team_slave_0 added [ 62.140869][ T5770] hsr_slave_0: entered promiscuous mode [ 62.147340][ T5770] hsr_slave_1: entered promiscuous mode [ 62.154517][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.162496][ T5770] Cannot create hsr debugfs directory [ 62.186665][ T5768] team0: Port device team_slave_1 added [ 62.258494][ T5771] hsr_slave_0: entered promiscuous mode [ 62.264732][ T5771] hsr_slave_1: entered promiscuous mode [ 62.270696][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.278821][ T5771] Cannot create hsr debugfs directory [ 62.286748][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.294602][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.321431][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.338505][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.345525][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.372102][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.440256][ T5768] hsr_slave_0: entered promiscuous mode [ 62.446655][ T5768] hsr_slave_1: entered promiscuous mode [ 62.452921][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.460471][ T5768] Cannot create hsr debugfs directory [ 62.492414][ T5774] Bluetooth: hci2: command tx timeout [ 62.492426][ T5779] Bluetooth: hci0: command tx timeout [ 62.571262][ T5774] Bluetooth: hci1: command tx timeout [ 62.571278][ T5779] Bluetooth: hci3: command tx timeout [ 62.762578][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.773540][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.797361][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.809127][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.872588][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.888499][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.898330][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.910203][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.013989][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.024928][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.035209][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.045434][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.133048][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.140306][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.173989][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.185013][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.197166][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.204922][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.237735][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.244967][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.270025][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.277182][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.339525][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.395807][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.411725][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.440126][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.447566][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.463643][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.470768][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.480672][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.511477][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.518571][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.530354][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580588][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.587800][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.645095][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.706517][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.765539][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772747][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.796970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.804098][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.855092][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.000602][ T5769] veth0_vlan: entered promiscuous mode [ 64.028373][ T5769] veth1_vlan: entered promiscuous mode [ 64.075524][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.127324][ T5769] veth0_macvtap: entered promiscuous mode [ 64.148708][ T5769] veth1_macvtap: entered promiscuous mode [ 64.186606][ T5771] veth0_vlan: entered promiscuous mode [ 64.200417][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.224944][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.253288][ T5771] veth1_vlan: entered promiscuous mode [ 64.271902][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.280836][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.290722][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.299988][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.321875][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.450898][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.477637][ T5770] veth0_vlan: entered promiscuous mode [ 64.484706][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.497433][ T5771] veth0_macvtap: entered promiscuous mode [ 64.505016][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.526419][ T5771] veth1_macvtap: entered promiscuous mode [ 64.547891][ T5770] veth1_vlan: entered promiscuous mode [ 64.572246][ T5779] Bluetooth: hci2: command tx timeout [ 64.577706][ T5774] Bluetooth: hci0: command tx timeout [ 64.593632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.603684][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.629926][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.644908][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.652624][ T5774] Bluetooth: hci3: command tx timeout [ 64.655038][ T5779] Bluetooth: hci1: command tx timeout [ 64.672502][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.713739][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.725059][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.736414][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.747026][ T5770] veth0_macvtap: entered promiscuous mode [ 64.760295][ T5770] veth1_macvtap: entered promiscuous mode [ 64.780598][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.791711][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.802353][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.813464][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.825549][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.855581][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.886935][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.898178][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.915987][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.927939][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.938817][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.948580][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.957347][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.976911][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.052047][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.081391][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.090130][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.098912][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.128309][ T5768] veth0_vlan: entered promiscuous mode [ 65.410477][ T5832] tipc: Started in network mode [ 65.415679][ T5832] tipc: Node identity 4, cluster identity 4711 [ 65.421967][ T5832] tipc: Node number set to 4 [ 65.448179][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.598616][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.731866][ T5768] veth1_vlan: entered promiscuous mode [ 65.760833][ T5768] veth0_macvtap: entered promiscuous mode [ 65.829418][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.873734][ T5768] veth1_macvtap: entered promiscuous mode [ 65.886333][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.967941][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.981508][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.984046][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.003265][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.014104][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.026425][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036352][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.050609][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.063056][ T5837] syz.1.5[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.064333][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.196395][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.254274][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.295939][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.320250][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.347857][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.364211][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.369074][ T5837] loop1: detected capacity change from 0 to 40427 [ 66.403312][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.424181][ T5837] F2FS-fs (loop1): invalid crc value [ 66.435143][ T5837] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.479756][ T5837] F2FS-fs (loop1): Start checkpoint disabled! [ 66.500540][ T5837] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 66.515851][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535158][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.546886][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.567981][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.651447][ T5779] Bluetooth: hci0: command tx timeout [ 66.651781][ T5774] Bluetooth: hci2: command tx timeout [ 66.698646][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.734482][ T5774] Bluetooth: hci1: command tx timeout [ 66.740057][ T5779] Bluetooth: hci3: command tx timeout [ 66.783511][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.034381][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.038503][ T59] kworker/u4:4: attempt to access beyond end of device [ 67.038503][ T59] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 67.068670][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.080365][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 67.089332][ T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 68.195098][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.203209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.437373][ T5849] loop3: detected capacity change from 0 to 4096 [ 69.056284][ T5857] fuse: Unknown parameter 'group_id00000000000000000000' [ 69.975331][ T5774] Bluetooth: hci2: command tx timeout [ 69.975350][ T5779] Bluetooth: hci0: command tx timeout [ 69.975381][ T5779] Bluetooth: hci1: command tx timeout [ 69.980746][ T5774] Bluetooth: hci3: command tx timeout [ 69.989911][ T5856] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.451502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.564407][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.575234][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.948250][ T5884] tipc: Started in network mode [ 72.953416][ T5884] tipc: Node identity 4, cluster identity 4711 [ 72.959629][ T5884] tipc: Node number set to 4 [ 74.210030][ T5891] loop0: detected capacity change from 0 to 40427 [ 74.836606][ T5891] F2FS-fs (loop0): invalid crc value [ 74.845969][ T5891] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.894714][ T5891] F2FS-fs (loop0): Start checkpoint disabled! [ 74.999313][ T5891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 78.937256][ T11] kworker/u4:0: attempt to access beyond end of device [ 78.937256][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.999446][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 79.008067][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 79.214149][ T5931] ======================================================= [ 79.214149][ T5931] WARNING: The mand mount option has been deprecated and [ 79.214149][ T5931] and is ignored by this kernel. Remove the mand [ 79.214149][ T5931] option from the mount to silence this warning. [ 79.214149][ T5931] ======================================================= [ 79.900401][ T5949] process 'syz.2.35' launched './file1' with NULL argv: empty string added [ 81.451085][ T5809] IPVS: starting estimator thread 0... [ 81.701557][ T6004] IPVS: using max 23 ests per chain, 55200 per kthread [ 81.891016][ T968] cfg80211: failed to load regulatory.db [ 82.301711][ T5809] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.388926][ T6020] loop8: detected capacity change from 0 to 7 [ 82.425735][ T6026] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.485601][ T6020] Dev loop8: unable to read RDB block 7 [ 82.504015][ T6026] bond1: (slave lo): Enslaving as an active interface with an up link [ 82.507062][ T6020] loop8: unable to read partition table [ 82.529484][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.532360][ T6026] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 82.556764][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.561418][ T6020] loop8: partition table beyond EOD, truncated [ 82.570962][ T6020] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.589882][ T5809] usb 4-1: Product: syz [ 82.600176][ T5809] usb 4-1: Manufacturer: syz [ 82.623117][ T6025] Dev loop8: unable to read RDB block 7 [ 82.626561][ T5809] usb 4-1: SerialNumber: syz [ 82.628704][ T6025] loop8: unable to read partition table [ 82.668801][ T5809] usb 4-1: config 0 descriptor?? [ 82.680687][ T6025] loop8: partition table beyond EOD, truncated [ 82.705281][ T6025] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.720583][ T6026] syz.1.64 (6026) used greatest stack depth: 20840 bytes left [ 82.910613][ T5809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.261539][ T5831] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.807296][ T5831] usb 2-1: device descriptor read/64, error -71 [ 84.047391][ T6054] syzkaller1: entered promiscuous mode [ 84.052960][ T6054] syzkaller1: entered allmulticast mode [ 84.091617][ T5831] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.300294][ T968] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.437621][ T5809] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 84.630664][ T5809] usb 4-1: USB disconnect, device number 2 [ 85.630176][ T6061] loop2: detected capacity change from 0 to 128 [ 85.662214][ T5831] usb 2-1: device descriptor read/64, error -71 [ 85.706284][ T6061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.725348][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 85.785882][ T968] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 85.796557][ T5831] usb usb2-port1: attempt power cycle [ 85.897573][ T968] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.940369][ T6061] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.068671][ T968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.242399][ T968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.277398][ T968] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.393022][ T968] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.402542][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.507155][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.513163][ T6069] loop3: detected capacity change from 0 to 64 [ 86.629047][ T6071] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.651030][ T968] usb 1-1: usb_control_msg returned -32 [ 86.857604][ T968] usbtmc 1-1:16.0: can't read capabilities [ 86.873566][ T968] usb 1-1: USB disconnect, device number 2 [ 87.144127][ T6079] overlayfs: upper fs needs to support d_type. [ 87.162819][ T6079] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.170423][ T6079] overlayfs: failed to set xattr on upper [ 87.176289][ T6079] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.183233][ T6079] overlayfs: ...falling back to index=off. [ 87.189089][ T6079] overlayfs: ...falling back to uuid=null. [ 87.468654][ T6078] loop1: detected capacity change from 0 to 4096 [ 87.502260][ T6078] ntfs3: Unknown parameter 'noacsrules' [ 87.565811][ T6082] Bluetooth: MGMT ver 1.22 [ 87.574971][ T5771] Trying to free block not in datazone [ 87.580617][ T5771] Trying to free block not in datazone [ 87.616525][ T5771] Trying to free block not in datazone [ 87.817514][ T6088] loop3: detected capacity change from 0 to 8192 [ 87.923984][ T6088] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.942124][ T27] audit: type=1800 audit(1775986180.272:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="file1" dev="loop3" ino=1048592 res=0 errno=0 [ 90.351478][ T6105] loop0: detected capacity change from 0 to 128 [ 90.556187][ T6105] vivid-001: disconnect [ 90.728361][ T6098] vivid-001: reconnect [ 91.029341][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.822658][ T6118] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.920722][ T6116] loop0: detected capacity change from 0 to 4096 [ 91.986290][ T6116] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 92.118597][ T6122] loop1: detected capacity change from 0 to 4096 [ 92.131858][ T6116] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.171751][ T6116] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 92.186971][ T6122] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 92.234139][ T6122] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 92.246723][ T27] audit: type=1800 audit(1775986184.562:3): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 92.437437][ T6122] ntfs: volume version 3.1. [ 93.634373][ T6144] loop1: detected capacity change from 0 to 4096 [ 93.719261][ T6144] ntfs3: Unknown parameter 'iocjÌ[š' [ 94.468374][ T5778] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.269781][ T5778] usb 3-1: config 0 has no interfaces? [ 95.300004][ T5778] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 95.317420][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.350441][ T5778] usb 3-1: Product: syz [ 95.355836][ T5778] usb 3-1: Manufacturer: syz [ 95.365985][ T5778] usb 3-1: SerialNumber: syz [ 95.377168][ T5778] usb 3-1: config 0 descriptor?? [ 95.594155][ T5778] usb 3-1: USB disconnect, device number 2 [ 95.904426][ T6165] loop3: detected capacity change from 0 to 32768 [ 95.939270][ T6165] XFS: noikeep mount option is deprecated. [ 96.091847][ T6165] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.372983][ T6165] XFS (loop3): Ending clean mount [ 96.563430][ T6165] XFS (loop3): Quotacheck needed: Please wait. [ 96.891518][ T6188] fuse: Bad value for 'fd' [ 96.906813][ T6165] XFS (loop3): Quotacheck: Done. [ 97.266844][ T6190] Zero length message leads to an empty skb [ 97.801023][ T6194] loop2: detected capacity change from 0 to 64 [ 97.951320][ T6193] loop0: detected capacity change from 0 to 4096 [ 98.084123][ T6193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.194780][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.011411][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.211296][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 100.227220][ T5831] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 100.235969][ T5236] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.252309][ T5831] usb 2-1: config 0 has no interface number 0 [ 100.269399][ T5831] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 100.297974][ T5831] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 100.312364][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.334080][ T5831] usb 2-1: Product: syz [ 100.338297][ T5831] usb 2-1: Manufacturer: syz [ 100.343701][ T5831] usb 2-1: SerialNumber: syz [ 100.356594][ T5831] usb 2-1: config 0 descriptor?? [ 100.368736][ T5831] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 100.377574][ T5831] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 100.431269][ T5236] usb 4-1: Using ep0 maxpacket: 32 [ 100.438765][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.454930][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.484418][ T5236] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.511395][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.540898][ T5236] usb 4-1: config 0 descriptor?? [ 100.580801][ T5831] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 100.795675][ T5831] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 100.837852][ T5831] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 100.857293][ T5831] usb 2-1: USB disconnect, device number 5 [ 100.877543][ T5831] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 101.117407][ T5236] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 101.953499][ T5236] usb 4-1: USB disconnect, device number 3 [ 105.688990][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.701290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 107.410781][ T6315] warning: `syz.3.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.359047][ T6318] loop0: detected capacity change from 0 to 64 [ 109.136954][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.169109][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.179129][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.238412][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.249599][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.258222][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.266984][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.276800][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.284862][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.306217][ T6317] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 109.608409][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.706534][ T6327] tipc: Started in network mode [ 109.711740][ T6327] tipc: Node identity 4004, cluster identity 4711 [ 109.718301][ T6327] tipc: Node number set to 16388 [ 109.791455][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 109.822714][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 109.889154][ T23] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 110.131279][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.151803][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.167303][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.191732][ T23] usbtmc 4-1:16.0: bulk endpoints not found [ 110.264444][ T6332] loop2: detected capacity change from 0 to 1024 [ 110.276967][ T6332] EXT4-fs: Ignoring removed bh option [ 110.323815][ T6332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.377428][ T6332] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.494049][ T6341] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.156'. [ 110.517376][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.640491][ T6346] loop1: detected capacity change from 0 to 64 [ 112.048267][ T6353] sched: RT throttling activated [ 112.205323][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 112.496827][ T6361] loop1: detected capacity change from 0 to 32768 [ 112.527378][ T6361] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.161 (6361) [ 112.713522][ T6361] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.724180][ T6361] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.733600][ T6361] BTRFS info (device loop1): using free space tree [ 113.551059][ T5809] usb 4-1: USB disconnect, device number 4 [ 113.581587][ T6361] BTRFS info (device loop1): enabling ssd optimizations [ 113.631800][ T6361] BTRFS info (device loop1): auto enabling async discard [ 113.679287][ T6361] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.811511][ T5236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.888934][ T6392] trusted_key: encrypted_key: insufficient parameters specified [ 114.021423][ T5236] usb 1-1: Using ep0 maxpacket: 16 [ 114.055125][ T5236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.088260][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.115852][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.137514][ T5236] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.153128][ T5236] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.183203][ T5236] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.201403][ T5236] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.219660][ T5236] usb 1-1: Manufacturer: syz [ 114.255835][ T5236] usb 1-1: config 0 descriptor?? [ 114.405931][ T6398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.413624][ T6398] IPv6: NLM_F_CREATE should be set when creating new route [ 114.500437][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.532542][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.708628][ T5236] rc_core: IR keymap rc-hauppauge not found [ 114.730503][ T5236] Registered IR keymap rc-empty [ 114.762931][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 114.839975][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 114.940510][ T5236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 114.953523][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.117878][ T5236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 115.199302][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.292623][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.376944][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.423329][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.537696][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.650388][ T23] usb 4-1: config 0 descriptor?? [ 115.706732][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.722608][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 115.763767][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.837560][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.891572][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.941464][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.981473][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 116.011644][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 116.061348][ T5236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 116.125082][ T5236] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 116.152143][ T5236] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.162011][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.188249][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.204352][ T5236] usb 1-1: USB disconnect, device number 3 [ 116.612644][ T6418] syz.2.175 uses old SIOCAX25GETINFO [ 116.884259][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.988151][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 117.000996][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 117.012953][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 117.020045][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 117.032011][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 117.223868][ T6422] binder_alloc: 6420: binder_alloc_buf, no vma [ 117.230399][ T6422] binder: 6420:6422 ioctl c0306201 200000004a40 returned -14 [ 117.241924][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 117.252464][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 117.252917][ T27] audit: type=1326 audit(1775986209.582:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d4ff9c819 code=0x0 [ 117.259483][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 117.305693][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 117.317521][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 117.330359][ T23] pwc: recv_control_msg error -32 req 04 val 1100 [ 117.448284][ T6431] bridge_slave_0: left allmulticast mode [ 117.455313][ T6431] bridge_slave_0: left promiscuous mode [ 117.462580][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.635422][ T6431] bridge_slave_1: left allmulticast mode [ 117.641386][ T6431] bridge_slave_1: left promiscuous mode [ 117.647951][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.721614][ T6431] bond0: (slave bond_slave_0): Releasing backup interface [ 117.893231][ T23] pwc: Registered as video103. [ 117.965803][ T6431] bond0: (slave bond_slave_1): Releasing backup interface [ 117.981820][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 118.044821][ T23] usb 4-1: USB disconnect, device number 5 [ 118.111070][ T6431] team0: Port device team_slave_0 removed [ 118.160593][ T6431] team0: Port device team_slave_1 removed [ 118.167369][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.176899][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.214253][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.221839][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.290302][ T6431] syz.0.179 (6431) used greatest stack depth: 20744 bytes left [ 118.549321][ T6446] loop0: detected capacity change from 0 to 1024 [ 118.582415][ T6446] EXT4-fs: Ignoring removed bh option [ 118.672391][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.903014][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.259773][ T6466] loop3: detected capacity change from 0 to 128 [ 119.341475][ T6466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 120.553194][ T5781] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 120.562175][ T5781] Bluetooth: hci2: Injecting HCI hardware error event [ 120.573751][ T5781] Bluetooth: hci2: hardware error 0x00 [ 120.661748][ T6466] System zones: 1-3, 19-19, 35-36 [ 120.694149][ T6466] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.803188][ T6466] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.878239][ T6466] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 1815685925 (only 1 groups) [ 120.959516][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.161506][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.373342][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.404779][ T788] usb 1-1: config 0 has no interfaces? [ 121.419872][ T788] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.445692][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.468399][ T6492] [ 121.470811][ T6492] ============================= [ 121.475887][ T6492] WARNING: suspicious RCU usage [ 121.480818][ T6492] syzkaller #0 Not tainted [ 121.485571][ T6492] ----------------------------- [ 121.490406][ T6492] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 121.499262][ T6492] [ 121.499262][ T6492] other info that might help us debug this: [ 121.499262][ T6492] [ 121.509888][ T6492] [ 121.509888][ T6492] rcu_scheduler_active = 2, debug_locks = 1 [ 121.518156][ T6492] 1 lock held by syz.2.201/6492: [ 121.523478][ T6492] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 121.532784][ T6492] [ 121.532784][ T6492] stack backtrace: [ 121.538695][ T6492] CPU: 0 PID: 6492 Comm: syz.2.201 Not tainted syzkaller #0 [ 121.545968][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.556021][ T6492] Call Trace: [ 121.559301][ T6492] [ 121.562223][ T6492] dump_stack_lvl+0x18c/0x250 [ 121.566903][ T6492] ? show_regs_print_info+0x20/0x20 [ 121.572095][ T6492] ? load_image+0x420/0x420 [ 121.576624][ T6492] lockdep_rcu_suspicious+0x1e1/0x300 [ 121.582032][ T6492] ieee80211_check_concurrent_iface+0x475/0x950 [ 121.588277][ T6492] ieee80211_open+0xc1/0x200 [ 121.592881][ T6492] __dev_open+0x2cb/0x430 [ 121.597238][ T6492] ? dev_open+0x190/0x190 [ 121.601606][ T6492] __dev_change_flags+0x211/0x6a0 [ 121.606640][ T6492] ? dev_get_flags+0x1c0/0x1c0 [ 121.611406][ T6492] ? mutex_lock_nested+0x20/0x20 [ 121.616338][ T6492] dev_change_flags+0x88/0x1a0 [ 121.621099][ T6492] dev_ioctl+0x7b4/0x1140 [ 121.625434][ T6492] sock_do_ioctl+0x239/0x310 [ 121.630015][ T6492] ? sock_show_fdinfo+0xb0/0xb0 [ 121.634872][ T6492] sock_ioctl+0x5ba/0x7e0 [ 121.639199][ T6492] ? sock_poll+0x3e0/0x3e0 [ 121.643631][ T6492] ? bpf_lsm_file_ioctl+0x9/0x10 [ 121.648585][ T6492] ? security_file_ioctl+0x80/0xa0 [ 121.653707][ T6492] ? sock_poll+0x3e0/0x3e0 [ 121.658113][ T6492] __se_sys_ioctl+0xfd/0x170 [ 121.662698][ T6492] do_syscall_64+0x55/0xa0 [ 121.667103][ T6492] ? clear_bhb_loop+0x40/0x90 [ 121.671770][ T6492] ? clear_bhb_loop+0x40/0x90 [ 121.676440][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.682331][ T6492] RIP: 0033:0x7fc50f99c819 [ 121.686770][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.706450][ T6492] RSP: 002b:00007fc5108be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.714858][ T6492] RAX: ffffffffffffffda RBX: 00007fc50fc15fa0 RCX: 00007fc50f99c819 [ 121.722820][ T6492] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 121.730783][ T6492] RBP: 00007fc50fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 121.738761][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.746744][ T6492] R13: 00007fc50fc16038 R14: 00007fc50fc15fa0 R15: 00007ffdb9bb0ed8 [ 121.754721][ T6492] [ 121.764178][ T6492] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 121.773547][ T788] usb 1-1: config 0 descriptor?? [ 121.784183][ T6492] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 122.197074][ T6477] bridge0: port 1(erspan0) entered blocking state [ 122.218453][ T6477] bridge0: port 1(erspan0) entered disabled state [ 122.225660][ T6477] erspan0: entered allmulticast mode [ 122.242589][ T6477] erspan0: entered promiscuous mode [ 122.250837][ T6477] bridge0: port 1(erspan0) entered blocking state [ 122.258111][ T6477] bridge0: port 1(erspan0) entered forwarding state [ 122.280565][ T6497] erspan0: left allmulticast mode [ 122.286932][ T6497] erspan0: left promiscuous mode [ 122.299763][ T6497] bridge0: port 1(erspan0) entered disabled state [ 122.324860][ T5778] usb 1-1: USB disconnect, device number 4 [ 122.811574][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110