last executing test programs: 24m21.053851941s ago: executing program 5 (id=53): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(r1, r2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x4, 0xb2d2, 0x100c, 0x2, 0x0, 0x0, 0x2, 0x6}}) 24m19.431573755s ago: executing program 5 (id=57): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r1, 0x7040, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 24m16.425742864s ago: executing program 5 (id=62): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 24m11.909243969s ago: executing program 5 (id=66): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x80186e84, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x11, r0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x3, 0x3, 0x8000, 0x4cd4, 0xffffffff, 0x200, 0x10, 0xc}}) 24m9.978295369s ago: executing program 5 (id=71): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) 24m7.564550176s ago: executing program 5 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001480)=0x7) syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 23m51.9818195s ago: executing program 32 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001480)=0x7) syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 19m40.534267079s ago: executing program 4 (id=412): unshare(0x600) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 19m37.238071964s ago: executing program 4 (id=415): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 19m35.15409425s ago: executing program 4 (id=419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r2, 0x7040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 19m33.261885166s ago: executing program 4 (id=422): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r1, 0x7040, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 19m31.929098174s ago: executing program 4 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) mkdir(0x0, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) 19m29.826707786s ago: executing program 4 (id=425): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r1, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) r10 = openat$cgroup(r9, 0x0, 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0x2020) close_range(r0, r4, 0x0) 19m14.481902101s ago: executing program 33 (id=425): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r1, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) r10 = openat$cgroup(r9, 0x0, 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0x2020) close_range(r0, r4, 0x0) 18m58.31718473s ago: executing program 1 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) 18m56.215328313s ago: executing program 1 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) fanotify_init(0x0, 0x0) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) 18m55.318638287s ago: executing program 1 (id=462): unshare(0x600) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 18m52.595632251s ago: executing program 1 (id=465): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r2, 0x7040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 18m47.961616398s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) mkdir(0x0, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 18m44.588591775s ago: executing program 1 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 18m28.754144358s ago: executing program 34 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 19.979277469s ago: executing program 6 (id=2074): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020}, 0x2020) 18.369042046s ago: executing program 8 (id=2082): socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0xd357, 0x10, 0x6, 0x210}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x0) syz_open_dev$media(0x0, 0x200, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd_index=0x4, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, r5, 0xd, {0x7, 0x9}, 0x2}, 0x1) 17.198303665s ago: executing program 6 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x7f, 0x2, 0x40, 0x2, 0x40, 0xac, 0x6, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571f", 0xe}], 0x1}, 0x4008840) 12.258490039s ago: executing program 7 (id=2101): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 12.079421609s ago: executing program 2 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000a2972c226ce3bf750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150", 0x22}], 0x3) 12.036638115s ago: executing program 6 (id=2103): pipe2(&(0x7f0000000040), 0x80080) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9d}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) 12.036034667s ago: executing program 7 (id=2104): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) eventfd2(0x0, 0x1) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 10.254714299s ago: executing program 6 (id=2106): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r0, 0x8925, 0x0) 10.126172229s ago: executing program 8 (id=2107): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c000100040000000000000007000000", @ANYRES32=r1], 0x28}, 0x1, 0x1000000}, 0x0) 10.04823668s ago: executing program 7 (id=2108): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 10.018924903s ago: executing program 2 (id=2109): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6", 0x4d}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 9.818468384s ago: executing program 6 (id=2111): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 9.445844297s ago: executing program 8 (id=2113): sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 7.304407508s ago: executing program 0 (id=2115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x7f, 0x2, 0x40, 0x2, 0x40, 0xac, 0x6, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571f", 0xe}], 0x1}, 0x4008840) 7.215953486s ago: executing program 7 (id=2116): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000bc0)={r3}) 7.170276697s ago: executing program 8 (id=2117): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 7.106168724s ago: executing program 3 (id=2118): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9d}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x4}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r7, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.89464068s ago: executing program 6 (id=2119): socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0xd357, 0x10, 0x6, 0x210}, &(0x7f0000000100)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x0) syz_open_dev$media(0x0, 0x200, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, r4, 0xd, {0x7, 0x9}, 0x2}, 0x1) 6.806581552s ago: executing program 7 (id=2120): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x0, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.513089987s ago: executing program 8 (id=2121): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000084) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) 5.690393687s ago: executing program 3 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) 5.468433677s ago: executing program 0 (id=2123): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r0, 0x8925, 0x0) 5.25062913s ago: executing program 3 (id=2124): memfd_create(0x0, 0xde932a8e875be35) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/61) 5.104989346s ago: executing program 0 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c000100040000000000000007000000", @ANYRES32=r1], 0x28}, 0x1, 0x1000000}, 0x0) 4.761133084s ago: executing program 0 (id=2126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffd, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="8233", 0x2}], 0x1) 4.334478137s ago: executing program 2 (id=2127): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 4.322228442s ago: executing program 0 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) dup3(r5, r3, 0x80000) io_uring_enter(0xffffffffffffffff, 0x4e0d, 0x217, 0xa5, 0x0, 0x32) 4.206709553s ago: executing program 3 (id=2129): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r0, 0x0, 0x10040800) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 4.087400268s ago: executing program 2 (id=2130): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xf7, 0xa}, {0x5, 0x7, 0x4, 0xa3a, 0x7}}}}, 0x17) syz_open_dev$vim2m(0x0, 0x808, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x1, 0xfffc, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) 1.70601064s ago: executing program 0 (id=2131): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.552068502s ago: executing program 3 (id=2132): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000bc0)={r3}) 1.499073848s ago: executing program 7 (id=2133): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 1.337017955s ago: executing program 2 (id=2134): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9d}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x4}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r7, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 833.357215ms ago: executing program 3 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x7f, 0x2, 0x40, 0x2, 0x40, 0xac, 0x6, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571f", 0xe}], 0x1}, 0x4008840) 82.399304ms ago: executing program 8 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 0s ago: executing program 2 (id=2137): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETA(r0, 0x8925, 0x0) kernel console output (not intermixed with test programs): ion_Complete for existing connection [ 1161.639847][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1161.676112][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1161.714203][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1161.787786][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1161.818626][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1162.490448][ T5833] Bluetooth: hci3: command tx timeout [ 1163.857270][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1163.873824][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.873885][ T5833] Tainted: [L]=SOFTLOCKUP [ 1163.873898][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.873924][ T5833] Workqueue: hci2 hci_rx_work [ 1163.873974][ T5833] Call Trace: [ 1163.873986][ T5833] [ 1163.873999][ T5833] dump_stack_lvl+0x100/0x190 [ 1163.874060][ T5833] sysfs_warn_dup.cold+0x1c/0x28 [ 1163.874114][ T5833] sysfs_create_dir_ns+0x24b/0x2b0 [ 1163.874163][ T5833] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1163.874209][ T5833] ? find_held_lock+0x2b/0x80 [ 1163.874254][ T5833] ? kobject_add_internal+0x25f/0x930 [ 1163.874291][ T5833] ? kobject_add_internal+0x25f/0x930 [ 1163.874331][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.874377][ T5833] ? do_raw_spin_unlock+0x145/0x1e0 [ 1163.874421][ T5833] kobject_add_internal+0x2c8/0x930 [ 1163.874465][ T5833] kobject_add+0x16a/0x1e0 [ 1163.874501][ T5833] ? __pfx_kobject_add+0x10/0x10 [ 1163.874536][ T5833] ? preempt_schedule_thunk+0x16/0x30 [ 1163.874616][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.874662][ T5833] ? kobject_put+0xb9/0x640 [ 1163.874730][ T5833] ? _raw_spin_unlock+0x3e/0x50 [ 1163.874790][ T5833] device_add+0x294/0x1950 [ 1163.874836][ T5833] ? __pfx_dev_set_name+0x10/0x10 [ 1163.874887][ T5833] ? __pfx_device_add+0x10/0x10 [ 1163.874930][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.874974][ T5833] ? mgmt_send_event_skb+0x2fb/0x460 [ 1163.875035][ T5833] hci_conn_add_sysfs+0x1a3/0x260 [ 1163.875093][ T5833] le_conn_complete_evt+0x11cb/0x1f40 [ 1163.875152][ T5833] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1163.875213][ T5833] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1163.875263][ T5833] ? skb_pull_data+0x15f/0x1e0 [ 1163.875310][ T5833] hci_le_meta_evt+0x34a/0x5f0 [ 1163.875363][ T5833] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1163.875417][ T5833] hci_event_packet+0x682/0x11c0 [ 1163.875466][ T5833] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1163.875520][ T5833] ? __pfx_hci_event_packet+0x10/0x10 [ 1163.875569][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.875618][ T5833] ? kcov_remote_start+0x374/0x660 [ 1163.875667][ T5833] ? lockdep_hardirqs_on+0x78/0x100 [ 1163.875730][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.875787][ T5833] hci_rx_work+0x451/0xfc0 [ 1163.875843][ T5833] process_one_work+0xa23/0x19a0 [ 1163.875900][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 1163.875935][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.875995][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.876049][ T5833] worker_thread+0x5ef/0xe50 [ 1163.876103][ T5833] ? kthread+0x13a/0x450 [ 1163.876158][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 1163.876192][ T5833] kthread+0x370/0x450 [ 1163.876250][ T5833] ? __pfx_kthread+0x10/0x10 [ 1163.876312][ T5833] ret_from_fork+0x754/0xd80 [ 1163.876376][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 1163.876437][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.876483][ T5833] ? rcu_is_watching+0x12/0xc0 [ 1163.876524][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1163.876569][ T5833] ? __switch_to+0x7b4/0x1120 [ 1163.876613][ T5833] ? __pfx_kthread+0x10/0x10 [ 1163.876674][ T5833] ret_from_fork_asm+0x1a/0x30 [ 1163.876748][ T5833] [ 1163.877010][ T5833] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.282021][ T5831] Bluetooth: hci4: command tx timeout [ 1164.315007][ T5833] Bluetooth: hci2: failed to register connection device [ 1164.572601][ T5833] Bluetooth: hci3: command tx timeout [ 1166.380391][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1166.386455][ T5833] Bluetooth: hci4: command tx timeout [ 1166.675382][T12736] Bluetooth: hci3: command tx timeout [ 1166.812545][T12744] 9p: Bad value for 'rfdno' [ 1167.649659][T12738] 9p: Bad value for 'rfdno' [ 1168.137831][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1168.245508][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1168.498442][T10122] Bluetooth: hci4: command tx timeout [ 1168.508721][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 1168.751563][T12736] Bluetooth: hci3: command tx timeout [ 1169.942910][T12432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1169.961608][T12757] 9p: Bad value for 'rfdno' [ 1170.764576][T12736] Bluetooth: hci4: command tx timeout [ 1173.251467][T12432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1173.599811][T12432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1173.735808][T12432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1173.815834][T12782] 9p: Bad value for 'rfdno' [ 1173.894588][T12787] 9p: Bad value for 'rfdno' [ 1174.401079][ T5831] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1174.410639][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1176.664613][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.671042][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.871247][ T6443] bridge_slave_1: left allmulticast mode [ 1178.876936][ T6443] bridge_slave_1: left promiscuous mode [ 1178.940518][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.984473][ T6443] bridge_slave_0: left allmulticast mode [ 1178.999521][ T6443] bridge_slave_0: left promiscuous mode [ 1179.014194][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.212482][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.226240][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.237172][ T6443] bond0 (unregistering): Released all slaves [ 1179.257681][T12695] chnl_net:caif_netlink_parms(): no params data found [ 1179.277116][T12432] kthread_run failed with err -4 [ 1179.576176][ T6443] hsr_slave_0: left promiscuous mode [ 1179.582723][ T6443] hsr_slave_1: left promiscuous mode [ 1179.588888][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.619354][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.833883][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 1179.873384][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 1180.088848][T12708] chnl_net:caif_netlink_parms(): no params data found [ 1180.102943][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.110099][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.117540][T12695] bridge_slave_0: entered allmulticast mode [ 1180.129185][T12695] bridge_slave_0: entered promiscuous mode [ 1180.140775][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.147977][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.160773][T12695] bridge_slave_1: entered allmulticast mode [ 1180.182043][T12695] bridge_slave_1: entered promiscuous mode [ 1180.504881][T12817] 9p: Bad value for 'rfdno' [ 1181.328767][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.357095][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.610378][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1182.186947][T10122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1182.197896][T10122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1182.208259][T10122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1182.216915][T10122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1182.225062][T10122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.339008][T12695] team0: Port device team_slave_0 added [ 1183.303854][T12838] 9p: Bad value for 'rfdno' [ 1183.684889][T12695] team0: Port device team_slave_1 added [ 1183.706578][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1184.427929][T12736] Bluetooth: hci5: command tx timeout [ 1184.455348][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.469615][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.640478][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.659173][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.666461][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.377510][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.515336][T12847] 9p: Bad value for 'rfdno' [ 1185.833275][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1187.172850][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.180156][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.210386][T10122] Bluetooth: hci5: command tx timeout [ 1187.270910][T12708] bridge_slave_0: entered allmulticast mode [ 1187.282618][T12708] bridge_slave_0: entered promiscuous mode [ 1187.306160][T12860] 9p: Bad value for 'rfdno' [ 1188.669960][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1189.136716][T12695] hsr_slave_0: entered promiscuous mode [ 1189.304088][T12736] Bluetooth: hci5: command tx timeout [ 1189.374989][T12695] hsr_slave_1: entered promiscuous mode [ 1189.394837][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.407275][T12876] 9p: Bad value for 'rfdno' [ 1189.745712][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.980740][T12708] bridge_slave_1: entered allmulticast mode [ 1190.988885][T12708] bridge_slave_1: entered promiscuous mode [ 1191.370583][T12736] Bluetooth: hci5: command tx timeout [ 1192.381743][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.491097][T12894] 9p: Bad value for 'rfdno' [ 1192.503718][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.882045][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1194.679486][T12708] team0: Port device team_slave_0 added [ 1194.706802][T12708] team0: Port device team_slave_1 added [ 1197.022260][T12924] 9p: Bad value for 'rfdno' [ 1197.239429][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1197.713875][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.773638][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.054857][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.330461][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.337497][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.365505][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.794821][T12953] 9p: Bad value for 'rfdno' [ 1202.047261][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1202.632321][T12960] 9p: Bad value for 'rfdno' [ 1203.007455][T10122] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1203.289338][T12708] hsr_slave_0: entered promiscuous mode [ 1203.336283][T12708] hsr_slave_1: entered promiscuous mode [ 1203.376279][T12708] debugfs: 'hsr0' already exists in 'hsr' [ 1203.395725][T12708] Cannot create hsr debugfs directory [ 1203.477676][T12828] chnl_net:caif_netlink_parms(): no params data found [ 1203.809304][T12967] 9p: Bad value for 'rfdno' [ 1204.127019][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1205.046976][T12975] 9p: Bad value for 'rfdno' [ 1205.432170][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1207.305084][T12985] 9p: Bad value for 'rfdno' [ 1207.699048][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1208.584889][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.306537][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.383702][T12828] bridge_slave_0: entered allmulticast mode [ 1209.416849][T12828] bridge_slave_0: entered promiscuous mode [ 1209.729134][T13005] 9p: Bad value for 'rfdno' [ 1210.838845][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1211.087572][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.157560][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.263571][T12828] bridge_slave_1: entered allmulticast mode [ 1211.382233][T12828] bridge_slave_1: entered promiscuous mode [ 1211.430166][T13015] 9p: Bad value for 'rfdno' [ 1212.481018][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.494296][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.551962][T13023] 9p: Bad value for 'rfdno' [ 1212.874069][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1214.854665][T12828] team0: Port device team_slave_0 added [ 1214.863554][T12828] team0: Port device team_slave_1 added [ 1215.383654][T13034] 9p: Bad value for 'rfdno' [ 1215.492872][T13039] 9p: Bad value for 'rfdno' [ 1215.723345][T10122] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1215.859852][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1218.413203][T12695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1220.481402][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.488401][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.536079][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.551169][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.558154][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.585657][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.834041][T12695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1221.718000][T12828] hsr_slave_0: entered promiscuous mode [ 1221.734449][T12828] hsr_slave_1: entered promiscuous mode [ 1221.774266][T12828] debugfs: 'hsr0' already exists in 'hsr' [ 1221.790902][T12828] Cannot create hsr debugfs directory [ 1222.113885][ T6443] bridge_slave_1: left allmulticast mode [ 1222.119681][ T6443] bridge_slave_1: left promiscuous mode [ 1222.141293][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.161904][ T6443] bridge_slave_0: left allmulticast mode [ 1222.167600][ T6443] bridge_slave_0: left promiscuous mode [ 1222.186317][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.218422][ T6443] bridge_slave_1: left allmulticast mode [ 1222.232392][ T6443] bridge_slave_1: left promiscuous mode [ 1222.241051][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.293449][ T6443] bridge_slave_0: left allmulticast mode [ 1222.299134][ T6443] bridge_slave_0: left promiscuous mode [ 1222.314426][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.591111][T10122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.601489][T10122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.610915][T10122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.667084][T10122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.679146][T10122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1223.870884][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.900724][T10122] Bluetooth: hci3: command tx timeout [ 1225.535781][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.710061][T12736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1225.719345][T12736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1225.727694][T12736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1225.736042][T12736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1225.743994][T12736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1225.843870][ T6443] bond0 (unregistering): Released all slaves [ 1225.864526][T13091] 9p: Bad value for 'rfdno' [ 1226.997699][T12736] Bluetooth: hci3: command tx timeout [ 1227.169412][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1227.649435][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.672560][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.684886][ T6443] bond0 (unregistering): Released all slaves [ 1227.775411][T10122] Bluetooth: hci6: command tx timeout [ 1228.131318][ T6443] hsr_slave_0: left promiscuous mode [ 1228.180112][ T6443] hsr_slave_1: left promiscuous mode [ 1228.204726][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.233029][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.451762][T10122] Bluetooth: hci3: command tx timeout [ 1230.330326][T10122] Bluetooth: hci6: command tx timeout [ 1230.424836][T13116] 9p: Bad value for 'rfdno' [ 1230.607228][ T6443] hsr_slave_0: left promiscuous mode [ 1230.639943][ T6443] hsr_slave_1: left promiscuous mode [ 1230.686791][T13122] 9p: Bad value for 'rfdno' [ 1230.728228][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.995814][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1231.553143][T12736] Bluetooth: hci3: command tx timeout [ 1232.412879][T12736] Bluetooth: hci6: command tx timeout [ 1232.502257][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.364217][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1234.187335][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 1234.205789][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 1234.485544][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 1234.492816][T10122] Bluetooth: hci6: command tx timeout [ 1234.510947][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 1238.210943][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.217289][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.005439][T13088] chnl_net:caif_netlink_parms(): no params data found [ 1244.071131][T12736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.080536][T12736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.089581][T12736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.103430][T12736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.111061][T12736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1244.150409][T13199] 9p: Bad value for 'rfdno' [ 1244.648618][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1244.696377][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1245.697691][T13068] chnl_net:caif_netlink_parms(): no params data found [ 1245.930178][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.938121][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.009003][T13088] bridge_slave_0: entered allmulticast mode [ 1246.028391][T13088] bridge_slave_0: entered promiscuous mode [ 1246.043898][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.060150][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.375923][T10122] Bluetooth: hci4: command tx timeout [ 1248.044429][T13088] bridge_slave_1: entered allmulticast mode [ 1248.054472][T13088] bridge_slave_1: entered promiscuous mode [ 1248.205246][T13224] 9p: Bad value for 'rfdno' [ 1248.462006][T12736] Bluetooth: hci4: command tx timeout [ 1248.463913][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1249.522095][T13242] 9p: Bad value for 'rfdno' [ 1249.893933][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1250.688026][T10122] Bluetooth: hci4: command tx timeout [ 1251.878897][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.145769][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.033021][T10122] Bluetooth: hci4: command tx timeout [ 1253.620691][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1253.705576][T13267] 9p: Bad value for 'rfdno' [ 1254.311051][T10122] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1254.813695][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.824983][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.832433][T13068] bridge_slave_0: entered allmulticast mode [ 1254.849659][T13068] bridge_slave_0: entered promiscuous mode [ 1255.057803][T13088] team0: Port device team_slave_0 added [ 1255.067106][T13088] team0: Port device team_slave_1 added [ 1256.008880][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.040273][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.047774][T13068] bridge_slave_1: entered allmulticast mode [ 1256.109165][T13068] bridge_slave_1: entered promiscuous mode [ 1256.383682][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.391335][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.094937][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.469957][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.292642][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.340714][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.408862][T13068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.471698][T13291] 9p: Bad value for 'rfdno' [ 1258.777042][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1259.066645][T13300] 9p: Bad value for 'rfdno' [ 1259.527841][T13088] hsr_slave_0: entered promiscuous mode [ 1259.562175][T13088] hsr_slave_1: entered promiscuous mode [ 1259.568421][T13088] debugfs: 'hsr0' already exists in 'hsr' [ 1259.576258][T13088] Cannot create hsr debugfs directory [ 1259.622120][T13068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.722638][T13068] team0: Port device team_slave_0 added [ 1259.746082][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1259.760016][T13305] 9p: Bad value for 'rfdno' [ 1259.928039][T13308] 9p: Bad value for 'rfdno' [ 1260.065602][T10122] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1261.002213][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1261.292986][T13194] chnl_net:caif_netlink_parms(): no params data found [ 1261.455184][T13068] team0: Port device team_slave_1 added [ 1262.795414][T13068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.748188][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.786573][T13068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.107380][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1264.571443][T13068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.642528][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.930607][T13068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.114293][T13334] 9p: Bad value for 'rfdno' [ 1265.299639][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1266.394407][T13068] hsr_slave_0: entered promiscuous mode [ 1266.412755][T13068] hsr_slave_1: entered promiscuous mode [ 1266.419089][T13068] debugfs: 'hsr0' already exists in 'hsr' [ 1266.451705][T13068] Cannot create hsr debugfs directory [ 1266.753653][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.766931][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.774550][T13194] bridge_slave_0: entered allmulticast mode [ 1266.783146][T13194] bridge_slave_0: entered promiscuous mode [ 1267.029416][ T78] bridge_slave_1: left allmulticast mode [ 1267.682706][ T78] bridge_slave_1: left promiscuous mode [ 1267.688565][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.727240][ T78] bridge_slave_0: left allmulticast mode [ 1267.733261][ T78] bridge_slave_0: left promiscuous mode [ 1267.739421][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.863820][T13354] 9p: Bad value for 'rfdno' [ 1268.082582][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1269.495770][ T78] bridge_slave_1: left allmulticast mode [ 1269.560654][ T78] bridge_slave_1: left promiscuous mode [ 1269.602486][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.722517][ T78] bridge_slave_0: left allmulticast mode [ 1269.728177][ T78] bridge_slave_0: left promiscuous mode [ 1269.952886][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.783916][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.795767][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.809407][ T78] bond0 (unregistering): Released all slaves [ 1271.004386][T13368] 9p: Bad value for 'rfdno' [ 1272.134086][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1272.750940][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.838731][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.886627][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1272.986925][ T78] bond0 (unregistering): Released all slaves [ 1273.115656][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.620401][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.655839][T13194] bridge_slave_1: entered allmulticast mode [ 1273.718626][T13194] bridge_slave_1: entered promiscuous mode [ 1273.779870][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.973799][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.382318][ T78] hsr_slave_0: left promiscuous mode [ 1277.443006][ T78] hsr_slave_1: left promiscuous mode [ 1277.465888][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.541442][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.574729][ T78] hsr_slave_0: left promiscuous mode [ 1277.600436][ T78] hsr_slave_1: left promiscuous mode [ 1277.617812][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.651196][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.050981][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1278.097485][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1278.691099][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1278.734424][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1281.741038][T13194] team0: Port device team_slave_0 added [ 1281.824522][T13194] team0: Port device team_slave_1 added [ 1282.654377][T13088] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1282.776476][T13194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.810274][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.538745][T13194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.551581][T13088] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1283.574783][T13088] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1283.616323][T13194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.640368][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.690274][T13194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.720303][T13088] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1283.984010][T13194] hsr_slave_0: entered promiscuous mode [ 1284.003769][T13194] hsr_slave_1: entered promiscuous mode [ 1284.094451][T13432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 1284.101111][T13432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1284.133494][T13432] vhci_hcd vhci_hcd.0: Device attached [ 1284.156453][T13432] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 1284.163128][T13432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1284.211392][T13432] vhci_hcd vhci_hcd.0: Device attached [ 1284.247335][T13438] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 1284.254003][T13438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1284.282210][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.312716][T13438] vhci_hcd vhci_hcd.0: Device attached [ 1284.318585][T13432] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 1284.325238][T13432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1284.347516][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.365960][T13432] vhci_hcd vhci_hcd.0: Device attached [ 1284.402778][T13438] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1284.403357][ T5901] usb 33-1: new low-speed USB device number 17 using vhci_hcd [ 1284.416328][T13432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1284.432615][T13432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1284.466486][ T78] bridge_slave_1: left allmulticast mode [ 1284.477718][ T78] bridge_slave_1: left promiscuous mode [ 1284.478300][T13443] vhci_hcd: connection closed [ 1284.484955][T13441] vhci_hcd: connection closed [ 1284.490457][T13433] vhci_hcd: connection reset by peer [ 1284.493341][T13435] vhci_hcd: connection closed [ 1284.501022][ T49] vhci_hcd vhci_hcd.0: stop threads [ 1284.511858][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.523962][ T78] bridge_slave_0: left allmulticast mode [ 1284.525765][ T49] vhci_hcd vhci_hcd.0: release socket [ 1284.529617][ T78] bridge_slave_0: left promiscuous mode [ 1284.541358][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.545819][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 1284.555419][ T49] vhci_hcd vhci_hcd.0: stop threads [ 1284.561164][ T49] vhci_hcd vhci_hcd.0: release socket [ 1284.566806][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 1284.578906][ T49] vhci_hcd vhci_hcd.0: stop threads [ 1284.587760][ T49] vhci_hcd vhci_hcd.0: release socket [ 1284.596843][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 1284.611403][ T49] vhci_hcd vhci_hcd.0: stop threads [ 1284.616996][ T49] vhci_hcd vhci_hcd.0: release socket [ 1284.634812][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 1284.710340][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.722381][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.737576][ T78] bond0 (unregistering): Released all slaves [ 1284.777995][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.785213][T12797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.847094][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.854297][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.868404][ T78] hsr_slave_0: left promiscuous mode [ 1284.875618][ T78] hsr_slave_1: left promiscuous mode [ 1284.883551][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.896534][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.112137][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1285.136104][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1285.384181][T12736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1285.395814][T12736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1285.408455][T12736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1285.422585][T12736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1285.431384][T12736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1285.775805][T13194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1285.815559][T13194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1285.867786][T13194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1285.898514][T13194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1286.094598][ T78] bridge_slave_1: left allmulticast mode [ 1286.100741][ T78] bridge_slave_1: left promiscuous mode [ 1286.107430][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.117704][ T78] bridge_slave_0: left allmulticast mode [ 1286.123616][ T78] bridge_slave_0: left promiscuous mode [ 1286.129407][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.285277][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.296918][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.308085][ T78] bond0 (unregistering): Released all slaves [ 1286.473795][ T78] hsr_slave_0: left promiscuous mode [ 1286.479969][ T78] hsr_slave_1: left promiscuous mode [ 1286.487850][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.498239][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.826531][T13492] 9p: Bad value for 'rfdno' [ 1287.786978][T12736] Bluetooth: hci3: command tx timeout [ 1287.928880][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1289.490744][T13506] 9p: Bad value for 'rfdno' [ 1289.747969][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1289.780900][ T5901] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1289.861848][T12736] Bluetooth: hci3: command tx timeout [ 1290.665540][T13512] 9p: Bad value for 'rfdno' [ 1291.165934][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1291.930455][T12736] Bluetooth: hci3: command tx timeout [ 1292.294660][T10122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1292.306481][T10122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1292.327210][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1292.335942][T10122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1292.350820][T10122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1292.370441][T10122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1292.378712][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1292.496948][T13519] 9p: Bad value for 'rfdno' [ 1292.819798][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1293.226529][T13460] chnl_net:caif_netlink_parms(): no params data found [ 1293.862550][T13528] 9p: Bad value for 'rfdno' [ 1294.025686][T12736] Bluetooth: hci3: command tx timeout [ 1294.224870][T12736] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1294.425164][T10122] Bluetooth: hci5: command tx timeout [ 1295.459329][T13537] 9p: Bad value for 'rfdno' [ 1295.609085][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1297.664525][T10122] Bluetooth: hci5: command tx timeout [ 1297.696503][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.894580][T13550] 9p: Bad value for 'rfdno' [ 1297.909233][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.972066][T13460] bridge_slave_0: entered allmulticast mode [ 1298.118474][T13460] bridge_slave_0: entered promiscuous mode [ 1298.230824][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1298.849451][T13556] 9p: Bad value for 'rfdno' [ 1298.986041][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.068125][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1299.087467][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.162587][T13460] bridge_slave_1: entered allmulticast mode [ 1299.385131][T13460] bridge_slave_1: entered promiscuous mode [ 1299.538002][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.544801][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.690407][T10122] Bluetooth: hci5: command tx timeout [ 1299.991117][T13194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.089491][T13194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.103057][T13564] 9p: Bad value for 'rfdno' [ 1300.345453][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1300.771881][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.293290][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.771367][T10122] Bluetooth: hci5: command tx timeout [ 1302.497919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.505139][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.606362][T13578] 9p: Bad value for 'rfdno' [ 1302.928073][T10122] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1303.693629][T13460] team0: Port device team_slave_0 added [ 1303.729019][T13460] team0: Port device team_slave_1 added [ 1303.835011][T13516] chnl_net:caif_netlink_parms(): no params data found [ 1304.037726][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.070258][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.170630][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.192789][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.210801][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.277439][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.447249][T12736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1304.457814][T12736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1304.472722][T12736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1304.490028][T12736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1304.505753][T13594] 9p: Bad value for 'rfdno' [ 1304.541118][T12736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1304.741559][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1305.597088][T13602] 9p: Bad value for 'rfdno' [ 1305.684220][T13604] 9p: Bad value for 'rfdno' [ 1305.948456][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1306.980519][T10122] Bluetooth: hci4: command tx timeout [ 1306.980562][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1309.050377][T12736] Bluetooth: hci4: command tx timeout [ 1311.130362][T12736] Bluetooth: hci4: command tx timeout [ 1311.868603][T13460] hsr_slave_0: entered promiscuous mode [ 1311.876365][T13460] hsr_slave_1: entered promiscuous mode [ 1311.882838][T13460] debugfs: 'hsr0' already exists in 'hsr' [ 1311.888672][T13460] Cannot create hsr debugfs directory [ 1312.016141][T13613] 9p: Bad value for 'rfdno' [ 1312.289046][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1313.217034][T12736] Bluetooth: hci4: command tx timeout [ 1314.422904][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.430613][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.437928][T13516] bridge_slave_0: entered allmulticast mode [ 1314.446493][T13516] bridge_slave_0: entered promiscuous mode [ 1314.668395][T13625] 9p: Bad value for 'rfdno' [ 1314.728743][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.762641][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.821624][T13516] bridge_slave_1: entered allmulticast mode [ 1314.873306][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1315.009489][T13516] bridge_slave_1: entered promiscuous mode [ 1315.327493][T13631] 9p: Bad value for 'rfdno' [ 1316.000731][T10122] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1316.029955][T13642] 9p: Bad value for 'rfdno' [ 1316.163446][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.262461][T12736] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1316.973932][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.889557][ T78] bridge_slave_1: left allmulticast mode [ 1318.895510][ T78] bridge_slave_1: left promiscuous mode [ 1318.905077][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.964686][ T78] bridge_slave_0: left allmulticast mode [ 1318.993786][ T78] bridge_slave_0: left promiscuous mode [ 1319.090596][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.945473][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.978601][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.011810][ T78] bond0 (unregistering): Released all slaves [ 1320.155266][T13516] team0: Port device team_slave_0 added [ 1320.188458][T13516] team0: Port device team_slave_1 added [ 1320.374662][ T78] hsr_slave_0: left promiscuous mode [ 1320.410319][ T78] hsr_slave_1: left promiscuous mode [ 1320.418421][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.441352][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.711973][T13699] overlayfs: missing 'lowerdir' [ 1321.165250][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1321.221211][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1322.940032][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.020322][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.084236][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.140523][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.147497][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.222263][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.324186][T13758] loop0: detected capacity change from 0 to 1024 [ 1323.343722][T13758] ======================================================= [ 1323.343722][T13758] WARNING: The mand mount option has been deprecated and [ 1323.343722][T13758] and is ignored by this kernel. Remove the mand [ 1323.343722][T13758] option from the mount to silence this warning. [ 1323.343722][T13758] ======================================================= [ 1323.384275][T13758] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1323.434133][T13758] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1323.459630][T13764] loop2: detected capacity change from 0 to 1024 [ 1323.462429][T13758] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1323.478708][T13764] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1323.522087][T13764] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1323.540816][T13758] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 1323.562807][T13764] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1323.570095][T13758] EXT4-fs warning (device loop0): ext4_enable_quotas:7232: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1323.586242][T13764] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 1323.595369][T13764] EXT4-fs warning (device loop2): ext4_enable_quotas:7232: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1323.609976][T13764] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 1323.624486][T13764] EXT4-fs (loop2): 1 truncate cleaned up [ 1323.632481][T13758] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 1323.661154][T13764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1323.684438][T13758] EXT4-fs (loop0): 1 truncate cleaned up [ 1323.940968][T13758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1324.234490][T13758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.270579][T13764] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1324.467899][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.641172][T13516] hsr_slave_0: entered promiscuous mode [ 1324.695676][T13779] loop2: detected capacity change from 0 to 1024 [ 1324.888359][T13516] hsr_slave_1: entered promiscuous mode [ 1324.911243][T13516] debugfs: 'hsr0' already exists in 'hsr' [ 1324.918011][T13516] Cannot create hsr debugfs directory [ 1325.007242][T13790] Invalid source name [ 1325.451921][T13592] chnl_net:caif_netlink_parms(): no params data found [ 1325.563016][T12797] hfsplus: b-tree write err: -5, ino 25 [ 1325.591975][T12797] hfsplus: b-tree write err: -5, ino 4 [ 1325.597673][T12797] hfsplus: b-tree write err: -5, ino 2 [ 1325.839161][T13798] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1328.649075][T13804] loop3: detected capacity change from 0 to 32768 [ 1329.167230][T13804] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop3": -EINTR [ 1329.226377][T13460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1329.379322][T13460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1329.462924][T13592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.480879][T13592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.488105][T13592] bridge_slave_0: entered allmulticast mode [ 1329.540421][T13592] bridge_slave_0: entered promiscuous mode [ 1329.577682][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.617059][T13592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.645195][T13592] bridge_slave_1: entered allmulticast mode [ 1329.662996][T13592] bridge_slave_1: entered promiscuous mode [ 1329.719560][T13460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1329.961947][T13460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1330.117571][T13592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.210370][T13453] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1330.283781][T13592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.400248][T13453] usb 1-1: Using ep0 maxpacket: 16 [ 1330.413861][T13453] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.454232][T13453] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.503124][T13453] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1330.560625][T13453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.598218][T13592] team0: Port device team_slave_0 added [ 1330.755083][T13592] team0: Port device team_slave_1 added [ 1330.826668][ T78] bridge_slave_1: left allmulticast mode [ 1330.841085][ T78] bridge_slave_1: left promiscuous mode [ 1330.846938][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.874058][ T78] bridge_slave_0: left allmulticast mode [ 1330.879870][ T78] bridge_slave_0: left promiscuous mode [ 1330.900648][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.056907][T13453] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1331.089526][T13453] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1331.105882][T13453] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1331.126564][T13453] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1331.157353][T13453] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1331.179777][T13453] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1331.318017][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.320827][T13453] usb 1-1: USB disconnect, device number 2 [ 1331.358099][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.408326][ T78] bond0 (unregistering): Released all slaves [ 1331.433692][T13865] tipc: Started in network mode [ 1331.441697][T13865] tipc: Node identity f62e2e56b1b2, cluster identity 4711 [ 1331.457201][T13865] tipc: Enabled bearer , priority 0 [ 1331.580488][T13863] syzkaller0: entered promiscuous mode [ 1331.586028][T13863] syzkaller0: entered allmulticast mode [ 1331.594039][T13863] tipc: Resetting bearer [ 1331.618365][T13869] tipc: Enabling of bearer rejected, failed to enable media [ 1331.660347][ T1017] tipc: Resetting bearer [ 1331.668200][T13862] tipc: Resetting bearer [ 1332.977746][T13887] futex_wake_op: syz.0.1468 tries to shift op by -1; fix this program [ 1333.526711][T13862] tipc: Disabling bearer [ 1333.851886][ T5939] tipc: Node number set to 1201417814 [ 1333.881991][T13592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.888972][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.007440][T13592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.143349][T13893] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1334.154108][ T78] hsr_slave_0: left promiscuous mode [ 1334.167331][ T78] hsr_slave_1: left promiscuous mode [ 1334.178926][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.209675][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.209292][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1337.283044][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1337.748547][T13592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.768884][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.790287][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1337.870253][T13592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.989430][ T5920] usb 4-1: config 0 has no interfaces? [ 1338.030686][ T5920] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1338.039833][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.076718][ T5920] usb 4-1: Product: syz [ 1338.101723][ T5920] usb 4-1: Manufacturer: syz [ 1338.106384][ T5920] usb 4-1: SerialNumber: syz [ 1338.167425][ T5920] usb 4-1: config 0 descriptor?? [ 1338.269946][T13592] hsr_slave_0: entered promiscuous mode [ 1338.307472][T13592] hsr_slave_1: entered promiscuous mode [ 1338.424216][T10122] Bluetooth: hci2: ISO packet too small [ 1338.444650][ T5894] usb 4-1: USB disconnect, device number 2 [ 1338.522257][T13516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1338.530488][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1338.590735][T13516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1338.605452][T13516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1338.638817][T13516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1338.701292][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1338.717970][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1338.750675][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.758744][ T5920] usb 1-1: Product: syz [ 1338.771402][ T5920] usb 1-1: Manufacturer: syz [ 1338.777103][ T5920] usb 1-1: SerialNumber: syz [ 1338.800568][ T5920] usb 1-1: config 0 descriptor?? [ 1338.945149][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.040413][ T5920] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1339.151849][T13937] loop2: detected capacity change from 0 to 32768 [ 1339.202597][T13937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1480 (13937) [ 1339.266338][T13460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.292319][T13937] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1339.313971][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.316053][T13937] BTRFS info (device loop2): using crc32c checksum algorithm [ 1339.321175][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.435301][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.442508][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.498259][T13937] BTRFS info (device loop2): enabling ssd optimizations [ 1339.533540][T13937] BTRFS info (device loop2): turning on flush-on-commit [ 1339.552531][T13937] BTRFS info (device loop2): enabling free space tree [ 1339.570005][T13937] BTRFS info (device loop2): enabling auto defrag [ 1339.589793][T13973] loop3: detected capacity change from 0 to 64 [ 1339.598255][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.605446][T13937] BTRFS info (device loop2): use lzo compression, level 1 [ 1339.641307][T13937] BTRFS info (device loop2): max_inline set to 4096 [ 1339.792629][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.926807][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.934001][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.981879][T13592] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1340.012287][ T5827] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1340.040051][T13592] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1340.067349][ T5920] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1340.125411][ T5920] usb 1-1: USB disconnect, device number 3 [ 1340.195779][T13592] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1340.257110][T13592] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1340.301118][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 1340.397857][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.405087][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.924163][T14003] tipc: Enabled bearer , priority 0 [ 1340.997538][T13592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.054071][T14003] syzkaller0: entered promiscuous mode [ 1341.072737][T14003] syzkaller0: entered allmulticast mode [ 1341.219549][T13999] tipc: Resetting bearer [ 1341.261557][T13592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.328985][T14009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1341.850899][T13997] tipc: Resetting bearer [ 1341.871604][T13997] tipc: Disabling bearer [ 1341.906879][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 1342.003651][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.011249][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.092283][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.099484][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.335195][T13460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.338297][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.439662][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 1345.724376][T13592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.023773][T13516] veth0_vlan: entered promiscuous mode [ 1346.078471][T13516] veth1_vlan: entered promiscuous mode [ 1346.434368][T13516] veth0_macvtap: entered promiscuous mode [ 1346.550219][T13516] veth1_macvtap: entered promiscuous mode [ 1346.679032][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.767372][T13592] veth0_vlan: entered promiscuous mode [ 1346.780093][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.825618][T13592] veth1_vlan: entered promiscuous mode [ 1346.860876][ T6397] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.898875][ T6397] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.967224][ T6397] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.003485][ T6397] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.281196][T13592] veth0_macvtap: entered promiscuous mode [ 1347.343309][T13592] veth1_macvtap: entered promiscuous mode [ 1347.350433][ T6443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.358281][ T6443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.454700][T13592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.485213][ T1107] bridge_slave_1: left allmulticast mode [ 1347.493902][ T1107] bridge_slave_1: left promiscuous mode [ 1347.511517][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.546774][ T1107] bridge_slave_0: left allmulticast mode [ 1347.560817][ T1107] bridge_slave_0: left promiscuous mode [ 1347.566678][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.736772][T12736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1347.752485][T12736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1347.771348][T12736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1347.779698][T12736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1347.790891][T12736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1348.139232][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.151502][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.163387][ T1107] bond0 (unregistering): Released all slaves [ 1348.184442][T13592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.369820][ T1107] hsr_slave_0: left promiscuous mode [ 1348.376671][ T1107] hsr_slave_1: left promiscuous mode [ 1348.388453][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.397889][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.586970][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 1348.616836][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 1348.753832][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.762764][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.813317][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.846926][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.955495][T14096] loop0: detected capacity change from 0 to 1024 [ 1349.240581][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1349.554937][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.626452][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1349.676282][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.773501][ T5920] usb 3-1: config 0 descriptor?? [ 1349.821460][ T5920] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 1349.851107][T10122] Bluetooth: hci3: command tx timeout [ 1349.873950][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 1349.890360][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1349.910106][T12736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1349.924289][T12736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1349.933841][T12736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1349.944976][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1349.947687][ T1017] hfsplus: b-tree write err: -5, ino 25 [ 1349.953211][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1349.968608][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1349.969825][T12736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1349.986567][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1349.994489][ T1017] hfsplus: b-tree write err: -5, ino 4 [ 1349.994606][ T1017] hfsplus: b-tree write err: -5, ino 2 [ 1349.994858][ T1017] hfsplus: b-tree write err: -5, ino 17 [ 1350.017102][T14097] syzkaller0: entered promiscuous mode [ 1350.030569][T12736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1350.040709][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 1350.052177][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 1350.079253][T14097] syzkaller0: entered allmulticast mode [ 1350.086139][ T5920] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1350.176072][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1350.207222][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1350.222767][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1350.239456][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1350.279189][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 1350.289287][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1350.319330][ T5920] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1350.378181][ T5920] usb 3-1: USB disconnect, device number 2 [ 1350.407827][ T5920] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1350.513194][ T5920] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1350.531279][ T5920] keyspan 3-1:0.0: device disconnected [ 1350.647289][T12736] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1350.920501][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1351.171039][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1351.189985][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1351.211990][ T5920] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1351.232903][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.257092][ T5920] usb 1-1: config 0 descriptor?? [ 1351.697419][ T5920] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1351.942618][T12736] Bluetooth: hci3: command tx timeout [ 1352.090351][T12736] Bluetooth: hci5: command tx timeout [ 1352.776849][T14137] loop3: detected capacity change from 0 to 1024 [ 1352.810753][T14137] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1352.834010][T14137] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1352.858547][T14137] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1352.869390][T14137] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 1352.880634][T14137] EXT4-fs warning (device loop3): ext4_enable_quotas:7232: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1352.895567][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1352.897266][T14137] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 1352.913891][T14137] EXT4-fs (loop3): 1 truncate cleaned up [ 1352.922753][T14137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1352.957941][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.966354][T14137] EXT4-fs error (device loop3): ext4_search_dir:1473: inode #2: block 16: comm syz.3.1503: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1352.997255][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.060801][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1353.069521][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.083455][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1353.100296][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1353.104298][ T1107] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.120362][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1353.130303][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1353.145351][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1353.178987][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1353.189910][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.306748][T14084] chnl_net:caif_netlink_parms(): no params data found [ 1353.350715][ T1107] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.424558][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 1353.430232][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1353.438067][ T1107] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.558059][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.575444][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.619328][ T1107] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.629704][ T5920] usb 3-1: USB disconnect, device number 3 [ 1353.717266][ T24] usb 1-1: USB disconnect, device number 4 [ 1353.717330][ C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1353.918033][T14142] loop3: detected capacity change from 0 to 40427 [ 1353.956903][T14142] F2FS-fs: heap/no_heap options were deprecated [ 1354.012323][T12736] Bluetooth: hci3: command tx timeout [ 1354.088587][T14084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.105319][T14142] F2FS-fs (loop3): invalid crc value [ 1354.135623][T14084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.158082][T14084] bridge_slave_0: entered allmulticast mode [ 1354.166878][T14084] bridge_slave_0: entered promiscuous mode [ 1354.176534][T14084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.183767][T14084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.191682][T14084] bridge_slave_1: entered allmulticast mode [ 1354.199710][T14084] bridge_slave_1: entered promiscuous mode [ 1354.206775][T12736] Bluetooth: hci5: command tx timeout [ 1357.020471][T12736] Bluetooth: hci3: command tx timeout [ 1357.026020][T12736] Bluetooth: hci5: command tx timeout [ 1357.565333][T14142] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1357.620914][T10546] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1357.711060][T14142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1357.734803][T14084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.837090][T14167] team0: Port device vlan2 added [ 1357.884029][T14084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.982135][T10546] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1357.994020][T10546] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1358.004047][T10546] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1358.023159][T10546] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1358.034823][T10546] usb 3-1: Product: syz [ 1358.039014][T10546] usb 3-1: Manufacturer: syz [ 1358.083380][T10546] usb 3-1: SerialNumber: syz [ 1358.875404][T10546] usb 3-1: config 0 descriptor?? [ 1358.882777][T14108] chnl_net:caif_netlink_parms(): no params data found [ 1358.917931][T10546] usb 3-1: can't set config #0, error -71 [ 1358.932244][T10546] usb 3-1: USB disconnect, device number 4 [ 1359.131129][T12736] Bluetooth: hci5: command tx timeout [ 1359.287507][T14084] team0: Port device team_slave_0 added [ 1361.177353][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.193971][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.449043][T14084] team0: Port device team_slave_1 added [ 1362.171603][ T1107] bridge_slave_1: left allmulticast mode [ 1362.385939][ T1107] bridge_slave_1: left promiscuous mode [ 1362.479460][T14208] comedi comedi0: Minor 3 could not be opened [ 1363.230462][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.333948][ T1107] bridge_slave_0: left allmulticast mode [ 1363.367889][ T1107] bridge_slave_0: left promiscuous mode [ 1363.382960][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.433217][T14216] capability: warning: `syz.0.1518' uses deprecated v2 capabilities in a way that may be insecure [ 1365.466823][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.496810][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.520789][ T1107] bond0 (unregistering): Released all slaves [ 1365.540881][T13453] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1365.598211][T14084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.618799][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.649248][T14084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.672671][T14084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.679681][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.707983][T14084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.743001][T13453] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1365.917283][T13453] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1365.929564][T13453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.938107][T13453] usb 4-1: Product: syz [ 1365.946473][T13453] usb 4-1: Manufacturer: syz [ 1365.960205][T13453] usb 4-1: SerialNumber: syz [ 1365.968615][T13453] usb 4-1: config 0 descriptor?? [ 1366.078495][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.126071][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.314580][T14108] bridge_slave_0: entered allmulticast mode [ 1366.358731][T14108] bridge_slave_0: entered promiscuous mode [ 1366.389542][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.420440][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.423689][T13453] rc_core: IR keymap rc-streamzap not found [ 1366.517365][T13453] Registered IR keymap rc-empty [ 1366.969371][T13453] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1367.006612][T13453] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 1367.011444][T14108] bridge_slave_1: entered allmulticast mode [ 1367.079311][T13453] usb 4-1: USB disconnect, device number 3 [ 1367.128370][T14108] bridge_slave_1: entered promiscuous mode [ 1367.822343][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.865073][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.978469][T14084] hsr_slave_0: entered promiscuous mode [ 1367.985576][T14084] hsr_slave_1: entered promiscuous mode [ 1368.001631][T14084] debugfs: 'hsr0' already exists in 'hsr' [ 1368.024171][T14084] Cannot create hsr debugfs directory [ 1368.187683][ T1107] hsr_slave_0: left promiscuous mode [ 1368.205435][ T1107] hsr_slave_1: left promiscuous mode [ 1368.219021][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.235950][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.250428][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1368.269822][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.285364][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.331447][ T1107] veth1_macvtap: left promiscuous mode [ 1368.343366][ T1107] veth0_macvtap: left promiscuous mode [ 1368.354297][ T1107] veth1_vlan: left promiscuous mode [ 1368.426954][ T1107] veth0_vlan: left promiscuous mode [ 1368.450272][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1368.850728][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1368.962657][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.997142][ T24] usb 3-1: Product: syz [ 1369.011412][ T24] usb 3-1: Manufacturer: syz [ 1369.054709][ T24] usb 3-1: SerialNumber: syz [ 1369.080462][ T24] usb 3-1: config 0 descriptor?? [ 1369.313218][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1370.252052][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 1370.303839][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 1370.396708][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1370.498573][ T24] usb 3-1: USB disconnect, device number 5 [ 1371.490352][ T5807] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1371.527139][T14108] team0: Port device team_slave_0 added [ 1371.558870][T14287] loop2: detected capacity change from 0 to 4096 [ 1371.587253][T14287] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1371.648176][T14108] team0: Port device team_slave_1 added [ 1371.672477][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1371.699531][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1371.756025][ T5807] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 1371.776197][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.846547][ T5807] usb 1-1: config 0 descriptor?? [ 1371.876045][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1533'. [ 1371.885977][T14283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1371.921910][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.928887][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.050796][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.092916][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.099904][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.179188][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.231143][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1372.420418][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1372.485888][ T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.594984][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1372.610458][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.617794][ T24] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1372.627493][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.661305][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.673416][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.717787][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.779540][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.817353][ T24] usb 8-1: config 0 descriptor?? [ 1372.824737][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.894045][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.919277][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.930069][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1372.979110][ T5807] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 1373.004142][ T5807] sony 0003:12BA:0100.0002: item fetching failed at offset 202/235 [ 1373.031317][ T5807] sony 0003:12BA:0100.0002: parse failed [ 1373.037437][ T5807] sony 0003:12BA:0100.0002: probe with driver sony failed with error -22 [ 1373.069467][ T5807] usb 1-1: USB disconnect, device number 5 [ 1373.210690][T14108] hsr_slave_0: entered promiscuous mode [ 1373.226865][T14108] hsr_slave_1: entered promiscuous mode [ 1373.244830][T14108] debugfs: 'hsr0' already exists in 'hsr' [ 1373.259676][T14108] Cannot create hsr debugfs directory [ 1373.330289][ T5938] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1373.341855][ T24] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1373.554394][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.620051][ T5938] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1373.647716][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.690077][ T5938] usb 3-1: Product: syz [ 1373.704045][ T5938] usb 3-1: Manufacturer: syz [ 1373.708744][ T5938] usb 3-1: SerialNumber: syz [ 1373.747270][ T5938] usb 3-1: config 0 descriptor?? [ 1373.756293][ T24] usb 8-1: USB disconnect, device number 2 [ 1374.730807][ T5938] rc_core: IR keymap rc-streamzap not found [ 1374.736759][ T5938] Registered IR keymap rc-empty [ 1374.779475][ T5938] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1374.833336][ T5938] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 1374.933558][ T5938] usb 3-1: USB disconnect, device number 6 [ 1375.150915][T14326] tipc: Started in network mode [ 1375.155946][T14326] tipc: Node identity 264e65eebc8f, cluster identity 4711 [ 1375.176636][T14326] tipc: Enabled bearer , priority 0 [ 1375.399106][T14321] syzkaller0: entered promiscuous mode [ 1375.404944][T14321] syzkaller0: entered allmulticast mode [ 1375.462901][T14328] tipc: Resetting bearer [ 1375.501947][T14320] tipc: Resetting bearer [ 1375.700381][T14320] tipc: Disabling bearer [ 1376.659336][T14333] loop2: detected capacity change from 0 to 32768 [ 1376.750328][T14333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1543 (14333) [ 1376.910637][T14333] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1376.940696][T14333] BTRFS info (device loop2): using sha256 checksum algorithm [ 1377.033091][T14108] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1377.079893][T14333] BTRFS info (device loop2): rebuilding free space tree [ 1377.100272][T14108] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1377.211676][T14108] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1377.221576][T14333] BTRFS info (device loop2): enabling ssd optimizations [ 1377.264064][T14333] BTRFS info (device loop2): using spread ssd allocation scheme [ 1377.300286][T14333] BTRFS info (device loop2): turning on async discard [ 1377.495662][T14333] BTRFS info (device loop2): enabling free space tree [ 1377.526783][T14333] BTRFS info (device loop2): force clearing of disk cache [ 1377.538203][T14361] 9p: Bad value for 'rfdno' [ 1377.550650][T14108] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1377.964381][T12736] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1378.843283][ T5827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1379.496258][T14377] loop2: detected capacity change from 0 to 256 [ 1379.614970][T14084] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1379.740820][T14377] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1379.821298][T14084] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1379.885446][T14084] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1379.944844][T14084] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1380.572811][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.728488][T14084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.882586][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.042946][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.050203][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.096943][T14084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.146001][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.153295][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.198683][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.205960][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.287495][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.294707][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.255180][T14084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.851604][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.550345][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1385.682326][T14084] veth0_vlan: entered promiscuous mode [ 1385.722429][ T5938] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 1385.752432][ T5938] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1385.787690][ T5938] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1385.799727][T14084] veth1_vlan: entered promiscuous mode [ 1385.825308][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.832124][T14431] loop7: detected capacity change from 0 to 32768 [ 1385.833660][T14108] veth0_vlan: entered promiscuous mode [ 1385.868980][ T5938] usb 4-1: Product: syz [ 1385.896392][ T5938] usb 4-1: Manufacturer: syz [ 1385.926797][ T5938] usb 4-1: SerialNumber: syz [ 1385.942712][ T5938] rndis_host 4-1:7.0: skipping garbage [ 1385.946730][T14108] veth1_vlan: entered promiscuous mode [ 1385.949487][ T5938] usb 4-1: bad CDC descriptors [ 1385.965514][ T5938] option 4-1:7.0: GSM modem (1-port) converter detected [ 1385.994837][T14431] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1386.035080][T14084] veth0_macvtap: entered promiscuous mode [ 1386.082188][T14084] veth1_macvtap: entered promiscuous mode [ 1386.171821][T10122] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1386.179708][T10122] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1386.179905][T14084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.197407][ T5901] usb 4-1: USB disconnect, device number 4 [ 1386.221371][ T5901] option 4-1:7.0: device disconnected [ 1386.277106][T14084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.375462][T14108] veth0_macvtap: entered promiscuous mode [ 1386.424321][T14431] XFS (loop7): Ending clean mount [ 1386.433923][T12797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.460651][T12797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.478410][T14431] XFS (loop7): Quotacheck needed: Please wait. [ 1386.512591][T12797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.571212][T12797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.610117][T14431] XFS (loop7): Quotacheck: Done. [ 1386.643047][T14108] veth1_macvtap: entered promiscuous mode [ 1386.715875][ T30] audit: type=1800 audit(1773708489.254:47): pid=14431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1560" name="file1" dev="loop7" ino=9286 res=0 errno=0 [ 1386.833578][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.922577][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.952724][ T30] audit: type=1800 audit(1773708489.494:48): pid=14431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1560" name="file1" dev="loop7" ino=9286 res=0 errno=0 [ 1387.001634][T14472] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 1387.563555][ T1107] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.631561][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.680232][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.731426][ T1107] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.758957][ T1107] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.987481][ T1107] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.020916][T13592] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1388.142887][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.385560][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.434000][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.442171][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.800531][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.863954][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.589789][T14504] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(16) [ 1389.596452][T14504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1389.656004][T14504] vhci_hcd vhci_hcd.0: Device attached [ 1389.686369][T14507] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(19) [ 1389.693064][T14507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1389.753542][T14507] vhci_hcd vhci_hcd.0: Device attached [ 1389.786527][T14504] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(18) [ 1389.793236][T14504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1389.848034][T14504] vhci_hcd vhci_hcd.0: Device attached [ 1389.906130][ T5807] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1389.979425][T14505] vhci_hcd: connection reset by peer [ 1389.985040][T14508] vhci_hcd: connection closed [ 1389.985416][T14510] vhci_hcd: connection closed [ 1390.001085][ T6137] vhci_hcd vhci_hcd.8: stop threads [ 1390.154769][T14513] loop7: detected capacity change from 0 to 1024 [ 1390.639267][ T6137] vhci_hcd vhci_hcd.8: release socket [ 1390.703039][ T6137] vhci_hcd vhci_hcd.8: disconnect device [ 1390.761109][ T6137] vhci_hcd vhci_hcd.8: stop threads [ 1390.766376][ T6137] vhci_hcd vhci_hcd.8: release socket [ 1391.297348][ T6137] vhci_hcd vhci_hcd.8: disconnect device [ 1391.380067][ T6137] vhci_hcd vhci_hcd.8: stop threads [ 1391.423414][ T6137] vhci_hcd vhci_hcd.8: release socket [ 1391.514482][ T6085] hfsplus: b-tree write err: -5, ino 25 [ 1391.520700][ T6137] vhci_hcd vhci_hcd.8: disconnect device [ 1391.551509][ T6085] hfsplus: b-tree write err: -5, ino 4 [ 1391.598103][ T6085] hfsplus: b-tree write err: -5, ino 2 [ 1391.682196][ T6085] hfsplus: b-tree write err: -5, ino 17 [ 1392.129297][T14525] loop6: detected capacity change from 0 to 4096 [ 1392.208556][T14525] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1392.389237][T14532] No such timeout policy "syz0" [ 1392.719798][T14525] ntfs3(loop6): ino=1a, mi_enum_attr [ 1392.736249][T14525] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1393.604344][T14525] ntfs3(loop6): ino=1a, mi_enum_attr [ 1393.609700][T14525] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1393.879168][ T30] audit: type=1800 audit(1773708496.404:49): pid=14525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1575" name="file1" dev="loop6" ino=24 res=0 errno=0 [ 1394.216259][T14548] Bluetooth: MGMT ver 1.23 [ 1395.480371][ T5807] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1396.280270][T10122] Bluetooth: hci0: command 0x0406 tx timeout [ 1396.335461][T14561] loop8: detected capacity change from 0 to 1024 [ 1398.099075][T14574] netlink: 'syz.7.1586': attribute type 10 has an invalid length. [ 1398.109023][T14574] veth0_vlan: entered allmulticast mode [ 1398.180523][T14574] veth0_vlan: left promiscuous mode [ 1398.204137][T14574] veth0_vlan: entered promiscuous mode [ 1398.251168][T14574] team0: Device veth0_vlan failed to register rx_handler [ 1398.322127][ T1107] hfsplus: b-tree write err: -5, ino 25 [ 1398.328019][ T1107] hfsplus: b-tree write err: -5, ino 4 [ 1399.301253][ T1107] hfsplus: b-tree write err: -5, ino 2 [ 1399.743273][ T1107] hfsplus: b-tree write err: -5, ino 17 [ 1401.284043][T14587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1401.580283][T14605] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1593'. [ 1401.916173][T14609] loop2: detected capacity change from 0 to 128 [ 1402.000752][T10122] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1402.045644][T14609] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1402.080081][T14609] hpfs: filesystem error: improperly stopped [ 1402.105484][T14609] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1402.148736][T14609] hpfs: You really don't want any checks? You are crazy... [ 1402.218713][T14609] hpfs: hpfs_map_sector(): read error [ 1402.340194][T14609] hpfs: code page support is disabled [ 1402.397267][T14609] hpfs: hpfs_map_4sectors(): unaligned read [ 1402.439123][T14609] hpfs: hpfs_map_4sectors(): unaligned read [ 1402.502130][T14609] hpfs: filesystem error: unable to find root dir [ 1402.664067][T14609] hpfs: hpfs_map_4sectors(): unaligned read [ 1402.923584][T14609] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1404.010752][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 1404.018231][T10122] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1406.137887][T10122] Bluetooth: hci0: command 0x0406 tx timeout [ 1407.632842][T14644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1408.203814][T14673] loop2: detected capacity change from 0 to 128 [ 1408.377797][T14673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1408.399968][T14677] loop7: detected capacity change from 0 to 1024 [ 1408.482900][T14677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.513733][T14673] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.780063][T14677] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1409.887548][T14677] EXT4-fs (loop7): Remounting filesystem read-only [ 1410.000743][T14682] syz.0.1614 (14682) used greatest stack depth: 19672 bytes left [ 1410.106972][T13592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.896268][ T5827] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1413.301198][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 1416.800232][T10546] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1417.120269][T10546] usb 7-1: Using ep0 maxpacket: 32 [ 1417.500273][T14759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1417.630798][T10546] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1417.664885][T10546] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.657604][T10546] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1418.681371][T10546] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.807229][T10546] usb 7-1: Product: syz [ 1418.821419][T10546] usb 7-1: Manufacturer: syz [ 1418.829358][T10546] usb 7-1: SerialNumber: syz [ 1419.291550][T10546] usb 7-1: Limiting number of CPorts to U8_MAX [ 1419.668035][T10546] usb 7-1: Not enough endpoints found in device, aborting! [ 1419.901832][T10546] usb 7-1: USB disconnect, device number 2 [ 1420.577641][T14767] mkiss: ax0: crc mode is auto. [ 1422.415208][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.425873][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.169671][T14807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.300256][T10546] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1426.471295][T10546] usb 8-1: Using ep0 maxpacket: 8 [ 1426.530976][T10546] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1426.552646][T10546] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1426.561158][T10546] usb 8-1: Product: syz [ 1426.565332][T10546] usb 8-1: Manufacturer: syz [ 1426.569935][T10546] usb 8-1: SerialNumber: syz [ 1426.588018][T10546] usb 8-1: config 0 descriptor?? [ 1428.034259][T10546] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1429.062245][T10546] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input7 [ 1429.329912][T10546] usb 8-1: USB disconnect, device number 3 [ 1429.720237][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 1429.810408][T14855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1433.852579][T14876] No such timeout policy "syz0" [ 1434.227350][T14881] 9pnet_virtio: no channels available for device syz [ 1434.253952][T14881] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1438.250518][T14905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1441.403916][T13966] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1441.572740][T13966] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1441.664165][T13966] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1442.562984][T13966] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1442.586421][T13966] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1442.606008][T13966] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1442.735121][T13966] usb 7-1: Product: syz [ 1442.739310][T13966] usb 7-1: Manufacturer: syz [ 1442.775451][T13966] usb 7-1: SerialNumber: syz [ 1442.876202][T13966] usb 7-1: config 0 descriptor?? [ 1442.988715][T14914] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1443.022392][T13966] usb 7-1: selecting invalid altsetting 0 [ 1445.787000][T10546] usb 7-1: USB disconnect, device number 3 [ 1446.770580][T14959] loop8: detected capacity change from 0 to 1024 [ 1447.117000][ T30] audit: type=1800 audit(1773708549.594:50): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1704" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1449.857944][ T1056] hfsplus: b-tree write err: -5, ino 25 [ 1449.879894][ T1056] hfsplus: b-tree write err: -5, ino 4 [ 1449.919466][ T1056] hfsplus: b-tree write err: -5, ino 2 [ 1449.951319][ T1056] hfsplus: b-tree write err: -5, ino 20 [ 1451.958655][T14999] loop2: detected capacity change from 0 to 4096 [ 1452.135116][T15003] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1452.201778][ T30] audit: type=1800 audit(1773708554.744:51): pid=14999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1718" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1453.502706][T10546] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1453.990279][T10546] usb 1-1: Using ep0 maxpacket: 16 [ 1454.081362][T10546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1454.107663][T10546] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1454.117344][T10546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.125809][T10546] usb 1-1: Product: syz [ 1454.151706][T10546] usb 1-1: Manufacturer: syz [ 1454.204362][T10546] usb 1-1: SerialNumber: syz [ 1454.236533][T10546] usb 1-1: config 0 descriptor?? [ 1454.545413][T11195] usb 1-1: USB disconnect, device number 6 [ 1454.632108][T15059] loop2: detected capacity change from 0 to 64 [ 1455.101294][T15081] binder: 15076:15081 ioctl 4018620d 0 returned -22 [ 1459.339120][T15115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1459.476026][T15116] loop6: detected capacity change from 0 to 4096 [ 1460.461942][T15131] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1754'. [ 1464.774344][T15156] loop6: detected capacity change from 0 to 32768 [ 1464.949426][T15156] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1465.546274][T15156] XFS (loop6): Ending clean mount [ 1465.583789][T15156] XFS (loop6): Quotacheck needed: Please wait. [ 1466.923863][T15156] XFS (loop6): Quotacheck: Done. [ 1467.214582][T14084] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1467.628947][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1467.666240][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1467.801616][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1467.900268][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.012313][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.105976][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.584742][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.622440][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.689214][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1468.832040][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 1469.096376][T10122] Bluetooth: hci2: unexpected event for opcode 0x200f [ 1469.814911][T15222] syzkaller0: entered promiscuous mode [ 1469.850645][T15222] syzkaller0: entered allmulticast mode [ 1470.572027][T10122] Bluetooth: hci3: command 0x0406 tx timeout [ 1472.787513][T15253] netlink: 'syz.6.1785': attribute type 10 has an invalid length. [ 1474.838793][T15255] loop7: detected capacity change from 0 to 1024 [ 1475.461133][T15259] loop3: detected capacity change from 0 to 1024 [ 1476.231515][T12736] Bluetooth: hci5: command 0x0406 tx timeout [ 1478.696463][ T6445] hfsplus: b-tree write err: -5, ino 25 [ 1478.708802][ T6445] hfsplus: b-tree write err: -5, ino 4 [ 1478.722341][ T6445] hfsplus: b-tree write err: -5, ino 2 [ 1480.727102][T15313] loop3: detected capacity change from 0 to 4096 [ 1480.912553][T15313] ntfs3(loop3): ino=9, attr_set_size_ex [ 1482.084328][T15253] veth0_vlan: entered allmulticast mode [ 1482.104212][T15253] veth0_vlan: left promiscuous mode [ 1482.111344][T15253] veth0_vlan: entered promiscuous mode [ 1482.120778][T15253] team0: Device veth0_vlan failed to register rx_handler [ 1482.425466][T15275] tun0: tun_chr_ioctl cmd 2148553947 [ 1482.480698][T15325] syzkaller0: entered promiscuous mode [ 1482.487366][T15325] syzkaller0: entered allmulticast mode [ 1482.809974][T15340] loop6: detected capacity change from 0 to 1024 [ 1483.612219][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1483.633587][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1483.693787][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1483.699381][ T49] hfsplus: b-tree write err: -5, ino 17 [ 1484.171228][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.178088][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.999572][ T5901] IPVS: starting estimator thread 0... [ 1485.130836][T15355] IPVS: using max 24 ests per chain, 57600 per kthread [ 1486.317620][T15366] netlink: 'syz.7.1817': attribute type 4 has an invalid length. [ 1487.691447][T15379] netlink: 'syz.6.1819': attribute type 10 has an invalid length. [ 1488.732149][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 1488.733654][T15375] __nla_validate_parse: 44 callbacks suppressed [ 1488.733678][T15375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1818'. [ 1488.739851][T10122] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1489.140341][T15379] veth0_vlan: left promiscuous mode [ 1489.146315][T15379] veth0_vlan: entered promiscuous mode [ 1489.153215][T15379] team0: Device veth0_vlan failed to register rx_handler [ 1489.973067][T15385] syzkaller0: entered promiscuous mode [ 1489.978585][T15385] syzkaller0: entered allmulticast mode [ 1490.016367][T15388] loop7: detected capacity change from 0 to 256 [ 1490.108345][T15385] tc action pedit offset 128 out of bounds [ 1491.582604][T15400] loop8: detected capacity change from 0 to 1024 [ 1493.213661][T15067] hfsplus: b-tree write err: -5, ino 25 [ 1493.219359][T15067] hfsplus: b-tree write err: -5, ino 4 [ 1493.260280][T15067] hfsplus: b-tree write err: -5, ino 2 [ 1493.290682][T15067] hfsplus: b-tree write err: -5, ino 17 [ 1497.830943][T15444] loop3: detected capacity change from 0 to 1024 [ 1497.838635][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1498.040506][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1498.435708][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1498.471872][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1498.524822][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1498.552884][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.606634][ T24] usb 9-1: Product: syz [ 1498.618028][ T24] usb 9-1: Manufacturer: syz [ 1498.644666][ T24] usb 9-1: SerialNumber: syz [ 1498.650948][ T6445] hfsplus: b-tree write err: -5, ino 25 [ 1498.679734][ T6445] hfsplus: b-tree write err: -5, ino 4 [ 1498.691361][ T24] usb 9-1: config 0 descriptor?? [ 1498.719650][ T6445] hfsplus: b-tree write err: -5, ino 2 [ 1498.737696][ T24] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1498.749991][ T6445] hfsplus: b-tree write err: -5, ino 17 [ 1498.778528][ T24] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1500.011608][ T24] em28xx 9-1:0.0: chip ID is em28178 [ 1500.790794][T10546] usb 9-1: USB disconnect, device number 2 [ 1500.854430][T10546] em28xx 9-1:0.0: Disconnecting em28xx [ 1500.992485][T10546] em28xx 9-1:0.0: Freeing device [ 1501.028527][T15466] loop6: detected capacity change from 0 to 1024 [ 1502.157491][ T1017] hfsplus: b-tree write err: -5, ino 25 [ 1502.183860][ T1017] hfsplus: b-tree write err: -5, ino 4 [ 1502.189441][ T1017] hfsplus: b-tree write err: -5, ino 2 [ 1502.536917][ T1017] hfsplus: b-tree write err: -5, ino 20 [ 1503.075003][T15484] syzkaller0: entered promiscuous mode [ 1503.179608][T15484] syzkaller0: entered allmulticast mode [ 1503.694887][T15494] loop6: detected capacity change from 0 to 1024 [ 1505.201698][T15502] netlink: 'syz.7.1857': attribute type 10 has an invalid length. [ 1505.426188][T15502] veth0_vlan: left promiscuous mode [ 1505.432432][T15502] veth0_vlan: entered promiscuous mode [ 1505.439874][T15502] team0: Device veth0_vlan failed to register rx_handler [ 1507.010635][ T1017] hfsplus: b-tree write err: -5, ino 25 [ 1507.016399][ T1017] hfsplus: b-tree write err: -5, ino 4 [ 1507.076830][ T1017] hfsplus: b-tree write err: -5, ino 2 [ 1507.102816][ T1017] hfsplus: b-tree write err: -5, ino 17 [ 1507.668282][T14670] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1507.910546][T14670] usb 8-1: Using ep0 maxpacket: 16 [ 1507.943082][T14670] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1507.997138][T14670] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1508.114474][T14670] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1508.517482][T14670] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.543091][T14670] usb 8-1: Product: syz [ 1508.573439][T14670] usb 8-1: Manufacturer: syz [ 1508.582419][T14670] usb 8-1: SerialNumber: syz [ 1508.850289][T14670] usb 8-1: config 0 descriptor?? [ 1508.908562][T14670] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1508.944383][T14670] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1509.485588][T14670] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1509.506891][T14670] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1509.529584][T14670] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1509.564325][T14670] em28xx 8-1:0.0: No AC97 audio processor [ 1509.604681][T14670] usb 8-1: USB disconnect, device number 4 [ 1509.637431][T14670] em28xx 8-1:0.0: Disconnecting em28xx [ 1509.677004][T14670] em28xx 8-1:0.0: Freeing device [ 1510.096875][T15545] loop3: detected capacity change from 0 to 1024 [ 1510.969959][T15554] lo speed is unknown, defaulting to 1000 [ 1510.976858][T15554] lo speed is unknown, defaulting to 1000 [ 1511.005220][T15554] lo speed is unknown, defaulting to 1000 [ 1511.060499][T15554] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1511.241505][T15554] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1511.500411][T15555] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1511.513039][T15554] lo speed is unknown, defaulting to 1000 [ 1511.526219][T15554] lo speed is unknown, defaulting to 1000 [ 1511.534458][T15551] loop8: detected capacity change from 0 to 512 [ 1511.534564][T15554] lo speed is unknown, defaulting to 1000 [ 1511.548164][T15554] lo speed is unknown, defaulting to 1000 [ 1511.555498][T15554] lo speed is unknown, defaulting to 1000 [ 1511.563314][T15554] lo speed is unknown, defaulting to 1000 [ 1511.705655][ T6443] hfsplus: b-tree write err: -5, ino 25 [ 1511.722122][ T6443] hfsplus: b-tree write err: -5, ino 4 [ 1511.881914][ T6443] hfsplus: b-tree write err: -5, ino 2 [ 1511.887511][ T6443] hfsplus: b-tree write err: -5, ino 17 [ 1513.463324][T15582] loop7: detected capacity change from 0 to 1024 [ 1514.439807][T15590] loop8: detected capacity change from 0 to 1024 [ 1514.975983][T15594] syzkaller0: entered promiscuous mode [ 1515.010881][T15594] syzkaller0: entered allmulticast mode [ 1516.187096][ T6443] hfsplus: b-tree write err: -5, ino 25 [ 1516.224526][ T6443] hfsplus: b-tree write err: -5, ino 4 [ 1516.255769][ T6443] hfsplus: b-tree write err: -5, ino 2 [ 1516.294975][ T6443] hfsplus: b-tree write err: -5, ino 17 [ 1516.700668][ T6451] hfsplus: b-tree write err: -5, ino 25 [ 1516.706419][ T6451] hfsplus: b-tree write err: -5, ino 4 [ 1516.750417][ T6451] hfsplus: b-tree write err: -5, ino 2 [ 1517.550856][T15635] loop7: detected capacity change from 0 to 1024 [ 1517.940525][T11195] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1518.343926][T11195] usb 1-1: Using ep0 maxpacket: 16 [ 1518.380471][T11195] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1518.434158][T11195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1518.483852][ T6445] hfsplus: b-tree write err: -5, ino 25 [ 1518.494415][T11195] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1518.502715][T15638] syzkaller0: entered promiscuous mode [ 1518.517018][T11195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.520482][ T6445] hfsplus: b-tree write err: -5, ino 4 [ 1518.543341][T15638] syzkaller0: entered allmulticast mode [ 1518.549114][T11195] usb 1-1: Product: syz [ 1518.556853][ T6445] hfsplus: b-tree write err: -5, ino 2 [ 1518.558693][T11195] usb 1-1: Manufacturer: syz [ 1518.579557][T15638] tc action pedit offset 128 out of bounds [ 1518.585854][T11195] usb 1-1: SerialNumber: syz [ 1518.614235][ T6445] hfsplus: b-tree write err: -5, ino 17 [ 1518.663206][T11195] usb 1-1: config 0 descriptor?? [ 1518.733331][T15643] capability: warning: `syz.6.1914' uses 32-bit capabilities (legacy support in use) [ 1518.744832][T11195] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1518.783623][T11195] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1519.323683][T11195] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1519.336135][T11195] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1519.366109][T11195] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1519.417775][T11195] em28xx 1-1:0.0: No AC97 audio processor [ 1519.510669][T11195] usb 1-1: USB disconnect, device number 7 [ 1519.553252][T11195] em28xx 1-1:0.0: Disconnecting em28xx [ 1519.700870][T11195] em28xx 1-1:0.0: Freeing device [ 1520.220429][T15668] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 1520.347069][T15672] loop8: detected capacity change from 0 to 1024 [ 1520.402822][ T30] audit: type=1800 audit(1773708622.924:52): pid=15672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1926" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1520.659039][T15065] hfsplus: b-tree write err: -5, ino 25 [ 1520.678138][T15065] hfsplus: b-tree write err: -5, ino 4 [ 1520.696594][T15065] hfsplus: b-tree write err: -5, ino 2 [ 1520.733553][T15065] hfsplus: b-tree write err: -5, ino 20 [ 1522.278603][T15706] loop7: detected capacity change from 0 to 1024 [ 1522.327853][ T30] audit: type=1800 audit(1773708624.864:53): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1941" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1522.409255][ T1107] hfsplus: b-tree write err: -5, ino 25 [ 1522.433620][ T1107] hfsplus: b-tree write err: -5, ino 4 [ 1522.450576][T10546] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1522.469939][ T1107] hfsplus: b-tree write err: -5, ino 2 [ 1522.494100][ T1107] hfsplus: b-tree write err: -5, ino 20 [ 1522.621168][T10546] usb 4-1: Using ep0 maxpacket: 16 [ 1522.642456][T10546] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1522.673487][T10546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1522.715872][T10546] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1522.728859][T10546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.758807][T10546] usb 4-1: Product: syz [ 1522.789474][T10546] usb 4-1: Manufacturer: syz [ 1522.987799][T10546] usb 4-1: SerialNumber: syz [ 1523.002768][T10546] usb 4-1: config 0 descriptor?? [ 1523.082916][T10546] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1523.984987][T10546] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1525.145656][T10546] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1525.195037][T10546] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1525.235905][T10546] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1525.259696][T10546] em28xx 4-1:0.0: No AC97 audio processor [ 1525.320023][T10546] usb 4-1: USB disconnect, device number 5 [ 1525.362035][T10546] em28xx 4-1:0.0: Disconnecting em28xx [ 1525.430909][T10546] em28xx 4-1:0.0: Freeing device [ 1525.733422][T15734] loop7: detected capacity change from 0 to 1024 [ 1527.254657][T15749] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 1527.265092][T15749] veth0_vlan: entered allmulticast mode [ 1527.328408][T15749] veth0_vlan: left promiscuous mode [ 1527.349462][T15749] veth0_vlan: entered promiscuous mode [ 1527.390131][T15749] team0: Device veth0_vlan failed to register rx_handler [ 1531.290369][T15077] hfsplus: b-tree write err: -5, ino 25 [ 1531.307306][T15077] hfsplus: b-tree write err: -5, ino 4 [ 1531.464990][T15077] hfsplus: b-tree write err: -5, ino 2 [ 1531.496263][T15077] hfsplus: b-tree write err: -5, ino 17 [ 1536.116673][T15802] netlink: 'syz.7.1968': attribute type 10 has an invalid length. [ 1536.126287][T15802] veth0_vlan: left promiscuous mode [ 1536.142850][T15802] veth0_vlan: entered promiscuous mode [ 1536.176226][T15802] team0: Device veth0_vlan failed to register rx_handler [ 1539.027506][T15820] loop7: detected capacity change from 0 to 1024 [ 1539.696871][ T30] audit: type=1800 audit(1773708642.234:54): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1976" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1540.550167][T10546] IPVS: starting estimator thread 0... [ 1540.640216][T15829] IPVS: using max 24 ests per chain, 57600 per kthread [ 1540.726985][ T6137] hfsplus: b-tree write err: -5, ino 25 [ 1540.740986][ T6137] hfsplus: b-tree write err: -5, ino 4 [ 1540.778288][ T6137] hfsplus: b-tree write err: -5, ino 2 [ 1540.800592][ T6137] hfsplus: b-tree write err: -5, ino 20 ‚3[ 1544.243010][T15845] syzkaller0: entered promiscuous mode [ 1544.268555][T10546] IPVS: starting estimator thread 0... [ 1544.292240][T15845] syzkaller0: entered allmulticast mode [ 1544.510227][T15853] IPVS: using max 27 ests per chain, 64800 per kthread [ 1545.503583][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.510932][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.142577][T15881] loop7: detected capacity change from 0 to 1024 [ 1548.940545][T13453] IPVS: starting estimator thread 0... [ 1549.070632][T15885] IPVS: using max 22 ests per chain, 52800 per kthread [ 1549.581881][T15887] hfsplus: xattr searching failed ‚3[ 1549.778011][T15886] hfsplus: xattr searching failed [ 1549.850137][ T30] audit: type=1800 audit(1773708652.374:55): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1993" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1550.320721][ T1107] hfsplus: b-tree write err: -5, ino 25 [ 1551.330547][ T1107] hfsplus: b-tree write err: -5, ino 4 [ 1551.336149][ T1107] hfsplus: b-tree write err: -5, ino 2 [ 1552.212899][ T1107] hfsplus: b-tree write err: -5, ino 20 [ 1553.480347][T15914] loop7: detected capacity change from 0 to 1024 [ 1553.558810][ T30] audit: type=1800 audit(1773708656.094:56): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1999" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1553.871982][ T1107] hfsplus: b-tree write err: -5, ino 25 [ 1553.878217][ T1107] hfsplus: b-tree write err: -5, ino 4 [ 1553.930609][ T1107] hfsplus: b-tree write err: -5, ino 2 [ 1553.971098][ T1107] hfsplus: b-tree write err: -5, ino 20 [ 1554.617756][T15930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1556.062991][T15942] loop2: detected capacity change from 0 to 1024 [ 1556.316884][ T30] audit: type=1800 audit(1773708658.854:57): pid=15943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2011" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1557.034754][T15065] hfsplus: b-tree write err: -5, ino 25 [ 1557.050790][T15065] hfsplus: b-tree write err: -5, ino 4 [ 1557.100312][T15065] hfsplus: b-tree write err: -5, ino 2 [ 1557.163933][T15065] hfsplus: b-tree write err: -5, ino 20 [ 1560.324585][T11195] IPVS: starting estimator thread 0... [ 1560.440223][T15988] IPVS: using max 22 ests per chain, 52800 per kthread [ 1560.724740][T15967] loop2: detected capacity change from 0 to 32768 [ 1560.818517][T15967] JBD2: Ignoring recovery information on journal [ 1560.881353][T15967] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 1560.950680][T15967] JBD2: bad block at offset 32 [ 1561.121293][T15967] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1563.099529][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 1563.551605][T16017] binder: 16014:16017 ioctl 4018620d 0 returned -22 [ 1565.112916][T10546] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1565.321761][T10546] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1565.425067][T10546] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1565.460104][T10546] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1565.493751][T10546] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1565.579357][T10546] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1565.630143][T10546] usb 9-1: Product: syz [ 1565.634358][T10546] usb 9-1: Manufacturer: syz [ 1565.638963][T10546] usb 9-1: SerialNumber: syz [ 1565.732004][T10546] usb 9-1: config 0 descriptor?? [ 1565.768170][T16012] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1565.856531][T10546] usb 9-1: selecting invalid altsetting 0 [ 1566.189594][T10546] usb 9-1: USB disconnect, device number 3 [ 1567.292674][T16078] loop6: detected capacity change from 0 to 1024 [ 1567.850636][ T30] audit: type=1800 audit(1773708670.384:58): pid=16079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2047" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1568.090338][T15072] hfsplus: b-tree write err: -5, ino 25 [ 1568.096167][T15072] hfsplus: b-tree write err: -5, ino 4 [ 1568.110905][T15072] hfsplus: b-tree write err: -5, ino 2 [ 1568.148439][T15072] hfsplus: b-tree write err: -5, ino 20 [ 1568.530207][T14670] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1568.682550][T14670] usb 9-1: device descriptor read/64, error -71 [ 1569.070372][T14670] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1569.421837][T14670] usb 9-1: device descriptor read/64, error -71 [ 1569.554350][T14670] usb usb9-port1: attempt power cycle [ 1569.713791][T16081] loop2: detected capacity change from 0 to 32768 [ 1569.799780][T16081] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1570.436172][T14670] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1571.082584][T14670] usb 9-1: device descriptor read/8, error -71 [ 1572.314919][T14670] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1572.408423][T14670] usb 9-1: device descriptor read/8, error -71 [ 1572.435432][T16081] XFS (loop2): Ending clean mount [ 1572.531431][T16081] XFS (loop2): Quotacheck needed: Please wait. [ 1572.550516][T14670] usb usb9-port1: unable to enumerate USB device [ 1572.692008][T16081] XFS (loop2): Quotacheck: Done. [ 1573.005210][T16129] loop6: detected capacity change from 0 to 1024 [ 1573.081152][ T5827] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1573.096336][ T30] audit: type=1800 audit(1773708675.634:59): pid=16129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2064" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1573.197416][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1573.226960][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1573.262805][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1573.268786][ T13] hfsplus: b-tree write err: -5, ino 20 [ 1576.021528][T13453] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1576.176444][T13453] usb 1-1: device descriptor read/64, error -71 [ 1576.490563][T13453] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1576.630183][T13453] usb 1-1: device descriptor read/64, error -71 [ 1576.800739][T13453] usb usb1-port1: attempt power cycle [ 1576.866567][T16155] loop6: detected capacity change from 0 to 32768 [ 1577.014088][T16155] JBD2: Ignoring recovery information on journal [ 1577.076693][T16155] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 1577.150183][T16155] JBD2: bad block at offset 32 [ 1577.185471][T13453] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1577.224765][T16155] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1577.241210][T13453] usb 1-1: device descriptor read/8, error -71 [ 1577.629180][T13453] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1577.667979][T13453] usb 1-1: device descriptor read/8, error -71 [ 1577.675958][T14084] ocfs2: Unmounting device (7,6) on (node local) [ 1578.487171][T13453] usb usb1-port1: unable to enumerate USB device [ 1581.557678][T16211] syzkaller0: entered promiscuous mode [ 1581.563353][T16211] syzkaller0: entered allmulticast mode [ 1584.898978][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2107'. [ 1587.770910][T16270] syzkaller0: entered promiscuous mode [ 1587.817804][T16270] syzkaller0: entered allmulticast mode [ 1588.950334][T10546] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1589.320168][T10546] usb 8-1: device descriptor read/64, error -71 [ 1589.580357][T10546] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1589.730271][T10546] usb 8-1: device descriptor read/64, error -71 [ 1589.785927][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 1589.920392][T10546] usb usb8-port1: attempt power cycle [ 1590.300472][T10546] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1590.371020][T10546] usb 8-1: device descriptor read/8, error -71 [ 1590.505502][T16289] loop8: detected capacity change from 0 to 32768 [ 1590.603702][T16289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2121 (16289) [ 1590.640225][T10546] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1590.683806][T16289] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1590.691012][T10546] usb 8-1: device descriptor read/8, error -71 [ 1590.830783][T16289] BTRFS info (device loop8): using crc32c checksum algorithm [ 1591.910889][T10546] usb usb8-port1: unable to enumerate USB device [ 1593.060477][T16289] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1593.062918][T16289] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1593.085093][T16289] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1593.156495][T16289] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1593.447127][T16289] BTRFS error (device loop8): open_ctree failed: -12 [ 1594.765117][T16332] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN NOPTI [ 1594.777223][T16332] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 1594.785812][T16332] CPU: 1 UID: 0 PID: 16332 Comm: syz.7.2133 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.796847][T16332] Tainted: [L]=SOFTLOCKUP [ 1594.801177][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.811239][T16332] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 1594.817311][T16332] Code: 40 04 00 f3 f3 f3 65 48 8b 05 8e a9 3c 12 48 89 44 24 70 31 c0 e8 da 84 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 1594.836921][T16332] RSP: 0018:ffffc900070c7ba0 EFLAGS: 00010216 [ 1594.843025][T16332] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9001ed83000 [ 1594.851003][T16332] RDX: 0000000000080000 RSI: ffffffff81d12686 RDI: 0000000000000000 [ 1594.858980][T16332] RBP: 1ffff92000e18f77 R08: 0000000000000007 R09: 0000000000000000 [ 1594.866957][T16332] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d12220 [ 1594.875143][T16332] R13: ffff88802d3d7280 R14: dffffc0000000000 R15: 00000000000009e0 [ 1594.883144][T16332] FS: 00007f65823af6c0(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 1594.892091][T16332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.898680][T16332] CR2: 0000001b2e221ff8 CR3: 000000005afa4000 CR4: 0000000000350ef0 [ 1594.906654][T16332] Call Trace: [ 1594.909940][T16332] [ 1594.912965][T16332] ? __pfx_task_work_cancel_match+0x10/0x10 [ 1594.918875][T16332] ? __rcu_read_unlock+0x26a/0x5e0 [ 1594.924011][T16332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1594.929660][T16332] ? rcu_is_watching+0x12/0xc0 [ 1594.934533][T16332] task_work_cancel+0x23/0x30 [ 1594.939308][T16332] landlock_restrict_sibling_threads+0xafe/0x1280 [ 1594.945770][T16332] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 1594.952642][T16332] ? __pfx___schedule+0x10/0x10 [ 1594.957515][T16332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1594.963184][T16332] ? __pfx___might_resched+0x10/0x10 [ 1594.968484][T16332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1594.974132][T16332] ? landlock_merge_ruleset+0x213/0x830 [ 1594.979691][T16332] __do_sys_landlock_restrict_self+0x5c9/0x9e0 [ 1594.985901][T16332] do_syscall_64+0x106/0xf80 [ 1594.990523][T16332] ? irqentry_exit+0x138/0x670 [ 1594.995321][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.001227][T16332] RIP: 0033:0x7f658159c799 [ 1595.005651][T16332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.025273][T16332] RSP: 002b:00007f65823af028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1595.033879][T16332] RAX: ffffffffffffffda RBX: 00007f6581816090 RCX: 00007f658159c799 [ 1595.041856][T16332] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 1595.050008][T16332] RBP: 00007f6581632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1595.057997][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.065988][T16332] R13: 00007f6581816128 R14: 00007f6581816090 R15: 00007fff8fd8a308 [ 1595.073980][T16332] [ 1595.076999][T16332] Modules linked in: [ 1595.081724][T16332] ---[ end trace 0000000000000000 ]--- [ 1595.130195][T16332] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 1595.136341][T16332] Code: 40 04 00 f3 f3 f3 65 48 8b 05 8e a9 3c 12 48 89 44 24 70 31 c0 e8 da 84 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 1595.254592][T16342] syzkaller0: entered promiscuous mode [ 1595.273351][T16332] RSP: 0018:ffffc900070c7ba0 EFLAGS: 00010216 [ 1595.279550][T16332] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9001ed83000 [ 1595.290185][T16342] syzkaller0: entered allmulticast mode [ 1595.290265][T16332] RDX: 0000000000080000 RSI: ffffffff81d12686 RDI: 0000000000000000 [ 1595.335012][T16332] RBP: 1ffff92000e18f77 R08: 0000000000000007 R09: 0000000000000000 [ 1595.388295][T16332] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d12220 [ 1595.400651][T16332] R13: ffff88802d3d7280 R14: dffffc0000000000 R15: 00000000000009e0 [ 1595.408743][T16332] FS: 00007f65823af6c0(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 1595.418098][T16332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1595.426199][T16332] CR2: 00007f77b8fe92f8 CR3: 000000005afa4000 CR4: 0000000000350ef0 [ 1595.435644][T16332] Kernel panic - not syncing: Fatal exception [ 1595.442373][T16332] Kernel Offset: disabled [ 1595.446709][T16332] Rebooting in 86400 seconds..