last executing test programs: 1m0.198586095s ago: executing program 2 (id=658): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) io_uring_enter(r0, 0x0, 0xa9e7, 0x3, 0x0, 0x0) 57.378181846s ago: executing program 2 (id=664): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 54.658065315s ago: executing program 2 (id=669): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(0xffffffffffffffff, r0) close_range(r4, 0xffffffffffffffff, 0x0) 49.456237678s ago: executing program 2 (id=678): syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 46.920186513s ago: executing program 2 (id=682): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40, 0x0) 46.032358373s ago: executing program 2 (id=684): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 29.031152643s ago: executing program 32 (id=684): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 12.856109658s ago: executing program 0 (id=748): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(0xffffffffffffffff, r0) close_range(r4, 0xffffffffffffffff, 0x0) 11.47592766s ago: executing program 1 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) 11.402433551s ago: executing program 3 (id=751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000040004800800020001000000080001"], 0x174}}, 0x0) 11.137325628s ago: executing program 0 (id=752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 9.7238889s ago: executing program 1 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 9.723389507s ago: executing program 3 (id=755): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 9.018514496s ago: executing program 0 (id=756): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 8.888080362s ago: executing program 4 (id=757): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0) 6.10385976s ago: executing program 4 (id=758): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x5, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0xe22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x30c) 4.852573577s ago: executing program 1 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) 4.676995655s ago: executing program 4 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c00014000000000000001010800054040000001080004"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) 4.598109675s ago: executing program 3 (id=761): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) syz_io_uring_setup(0x810, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(0xffffffffffffffff, r0) close_range(r4, 0xffffffffffffffff, 0x0) 4.371641668s ago: executing program 0 (id=762): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000001240)) 3.202987943s ago: executing program 1 (id=763): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x12}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) 2.598791134s ago: executing program 4 (id=764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0xb00000000000000}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @loopback, 0x10000006, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) 2.567509868s ago: executing program 0 (id=765): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(0xffffffffffffffff, r0) close_range(r5, 0xffffffffffffffff, 0x0) 1.985105622s ago: executing program 3 (id=766): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x609c2, 0x19) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1.071360864s ago: executing program 1 (id=767): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) 1.071043991s ago: executing program 4 (id=768): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 939.81311ms ago: executing program 3 (id=769): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) 399.356765ms ago: executing program 0 (id=770): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 190.392445ms ago: executing program 4 (id=771): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 15.299154ms ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a400000000009000200"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) 0s ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c00014000000000000001010800054040000001080004"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 193.678255][ T5751] cgroup: Unknown subsys name 'net' [ 193.814121][ T5751] cgroup: Unknown subsys name 'cpuset' [ 193.830104][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 200.921430][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.054231][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.060921][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.790535][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.824085][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.844904][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.878435][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.887430][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.924795][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.936999][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.947383][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.955794][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.975311][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.987281][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.033755][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.045125][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.077937][ T5071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.094131][ T5071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.164660][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.194596][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.204643][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.237651][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.264142][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.395615][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.417945][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.431421][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.455779][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.490186][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.928207][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 207.956811][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 208.043965][ T5071] Bluetooth: hci1: command tx timeout [ 208.113733][ T5071] Bluetooth: hci0: command tx timeout [ 208.193562][ T5071] Bluetooth: hci2: command tx timeout [ 208.358383][ T5071] Bluetooth: hci3: command tx timeout [ 208.374762][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 208.430495][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 208.603198][ T5071] Bluetooth: hci4: command tx timeout [ 208.813741][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 209.344877][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.352730][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.360745][ T5777] bridge_slave_0: entered allmulticast mode [ 209.369601][ T5777] bridge_slave_0: entered promiscuous mode [ 209.473704][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.494273][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.501991][ T5769] bridge_slave_0: entered allmulticast mode [ 209.514934][ T5769] bridge_slave_0: entered promiscuous mode [ 209.531752][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.539885][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.549376][ T5777] bridge_slave_1: entered allmulticast mode [ 209.558284][ T5777] bridge_slave_1: entered promiscuous mode [ 209.641008][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.650642][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.658813][ T5769] bridge_slave_1: entered allmulticast mode [ 209.669082][ T5769] bridge_slave_1: entered promiscuous mode [ 209.751941][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.761486][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.769250][ T5782] bridge_slave_0: entered allmulticast mode [ 209.777863][ T5782] bridge_slave_0: entered promiscuous mode [ 209.961419][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.975512][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.983620][ T5782] bridge_slave_1: entered allmulticast mode [ 209.997101][ T5782] bridge_slave_1: entered promiscuous mode [ 210.010240][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.022386][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.032123][ T5773] bridge_slave_0: entered allmulticast mode [ 210.041273][ T5773] bridge_slave_0: entered promiscuous mode [ 210.097042][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.113487][ T5071] Bluetooth: hci1: command tx timeout [ 210.125008][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.163618][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.171207][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.179780][ T5773] bridge_slave_1: entered allmulticast mode [ 210.188606][ T5773] bridge_slave_1: entered promiscuous mode [ 210.199637][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.207121][ T5071] Bluetooth: hci0: command tx timeout [ 210.214321][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.221791][ T5786] bridge_slave_0: entered allmulticast mode [ 210.231274][ T5786] bridge_slave_0: entered promiscuous mode [ 210.252089][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.270999][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.283298][ T5071] Bluetooth: hci2: command tx timeout [ 210.342130][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.350078][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.358888][ T5786] bridge_slave_1: entered allmulticast mode [ 210.367479][ T5786] bridge_slave_1: entered promiscuous mode [ 210.433430][ T5071] Bluetooth: hci3: command tx timeout [ 210.475450][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.583801][ T5777] team0: Port device team_slave_0 added [ 210.600371][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.619306][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.664709][ T5769] team0: Port device team_slave_0 added [ 210.673251][ T5071] Bluetooth: hci4: command tx timeout [ 210.684554][ T5777] team0: Port device team_slave_1 added [ 210.726371][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.779134][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.806325][ T5769] team0: Port device team_slave_1 added [ 210.949436][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.087271][ T5782] team0: Port device team_slave_0 added [ 211.110360][ T5782] team0: Port device team_slave_1 added [ 211.128630][ T5773] team0: Port device team_slave_0 added [ 211.243743][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.251038][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.290283][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.311747][ T5773] team0: Port device team_slave_1 added [ 211.320439][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.328040][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.356308][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.429287][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.437176][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.464246][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.531385][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.538569][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.565076][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.585659][ T5786] team0: Port device team_slave_0 added [ 211.594233][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.601455][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.628140][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.674979][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.682158][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.708711][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.723661][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.730893][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.758464][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.778442][ T5786] team0: Port device team_slave_1 added [ 211.815605][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.822709][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.849105][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.112006][ T5769] hsr_slave_0: entered promiscuous mode [ 212.121408][ T5769] hsr_slave_1: entered promiscuous mode [ 212.137629][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.145097][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.172262][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.193336][ T5071] Bluetooth: hci1: command tx timeout [ 212.206995][ T5777] hsr_slave_0: entered promiscuous mode [ 212.216516][ T5777] hsr_slave_1: entered promiscuous mode [ 212.225084][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 212.230928][ T5777] Cannot create hsr debugfs directory [ 212.273313][ T5071] Bluetooth: hci0: command tx timeout [ 212.308576][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.316212][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.342740][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.363221][ T5071] Bluetooth: hci2: command tx timeout [ 212.513398][ T5071] Bluetooth: hci3: command tx timeout [ 212.532439][ T5782] hsr_slave_0: entered promiscuous mode [ 212.541814][ T5782] hsr_slave_1: entered promiscuous mode [ 212.550696][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 212.556803][ T5782] Cannot create hsr debugfs directory [ 212.644351][ T5773] hsr_slave_0: entered promiscuous mode [ 212.654028][ T5773] hsr_slave_1: entered promiscuous mode [ 212.662343][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 212.668379][ T5773] Cannot create hsr debugfs directory [ 212.763365][ T5071] Bluetooth: hci4: command tx timeout [ 213.120954][ T5786] hsr_slave_0: entered promiscuous mode [ 213.130422][ T5786] hsr_slave_1: entered promiscuous mode [ 213.139631][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 213.145898][ T5786] Cannot create hsr debugfs directory [ 214.247235][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.271078][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.280177][ T5071] Bluetooth: hci1: command tx timeout [ 214.297997][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.336046][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.353323][ T5071] Bluetooth: hci0: command tx timeout [ 214.433475][ T5071] Bluetooth: hci2: command tx timeout [ 214.499338][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.525145][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.570170][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.593670][ T5071] Bluetooth: hci3: command tx timeout [ 214.595015][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.808789][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.834976][ T5071] Bluetooth: hci4: command tx timeout [ 214.889733][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.959302][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.036784][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.300537][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.330814][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.411393][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.478776][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.800147][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.828473][ T5786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.889159][ T5786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.951156][ T5786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.981538][ T5786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.089075][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.206025][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.213612][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.282612][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.290084][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.456059][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.710800][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.778289][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.881795][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.912433][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.920001][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.983535][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.991184][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.055098][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.074988][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.082434][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.159155][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.166828][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.381004][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.478948][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.486675][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.651229][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.659048][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.691509][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.158411][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.396060][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.403860][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.500194][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.507902][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.774207][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.539230][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.730189][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.742592][ T5769] veth0_vlan: entered promiscuous mode [ 219.910558][ T5769] veth1_vlan: entered promiscuous mode [ 220.221415][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.452723][ T5777] veth0_vlan: entered promiscuous mode [ 220.486051][ T5769] veth0_macvtap: entered promiscuous mode [ 220.510388][ T5782] veth0_vlan: entered promiscuous mode [ 220.572274][ T5777] veth1_vlan: entered promiscuous mode [ 220.611595][ T5769] veth1_macvtap: entered promiscuous mode [ 220.709876][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.785906][ T5782] veth1_vlan: entered promiscuous mode [ 221.061151][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.133310][ T5773] veth0_vlan: entered promiscuous mode [ 221.191812][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.268081][ T5777] veth0_macvtap: entered promiscuous mode [ 221.346911][ T5782] veth0_macvtap: entered promiscuous mode [ 221.366643][ T134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.385557][ T5773] veth1_vlan: entered promiscuous mode [ 221.413687][ T5777] veth1_macvtap: entered promiscuous mode [ 221.447224][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.459971][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.519190][ T134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.561046][ T5782] veth1_macvtap: entered promiscuous mode [ 221.721887][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.829126][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.882634][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.022716][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.032429][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.047981][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.060762][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.106185][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.162434][ T5773] veth0_macvtap: entered promiscuous mode [ 222.229197][ T134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.242062][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.300215][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.333110][ T5773] veth1_macvtap: entered promiscuous mode [ 222.401258][ T134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.657944][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.767990][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.086833][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.116773][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.188608][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.228584][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.308850][ T5786] veth0_vlan: entered promiscuous mode [ 223.625024][ T5786] veth1_vlan: entered promiscuous mode [ 224.223772][ T5786] veth0_macvtap: entered promiscuous mode [ 224.307665][ T5786] veth1_macvtap: entered promiscuous mode [ 224.652373][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.784995][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.961644][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.998471][ T160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.045709][ T134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.065383][ T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.041202][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.073132][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.412027][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.478668][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.931690][ T5769] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.771846][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.813281][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.178923][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.203141][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.363391][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.398916][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.805490][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.824125][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.793239][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.801466][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.409606][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.455497][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.526564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 238.590435][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.663260][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.071126][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.096899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.230343][ T5984] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 246.904641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 247.136856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 248.556769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.973323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 248.985308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.683022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.873720][ T29] audit: type=1326 audit(1772381414.515:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 249.923617][ T29] audit: type=1326 audit(1772381414.525:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 249.972682][ T29] audit: type=1326 audit(1772381414.525:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.063564][ T29] audit: type=1326 audit(1772381414.525:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.183450][ T29] audit: type=1326 audit(1772381414.525:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.239867][ T29] audit: type=1326 audit(1772381414.525:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.321265][ T29] audit: type=1326 audit(1772381414.525:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.361561][ T29] audit: type=1326 audit(1772381414.565:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 250.391150][ T29] audit: type=1326 audit(1772381414.565:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 254.260298][ T6037] loop3: detected capacity change from 0 to 16 [ 254.404216][ T6037] erofs (device loop3): mounted with root inode @ nid 36. [ 254.571322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.610994][ T6037] syz.3.24: attempt to access beyond end of device [ 254.610994][ T6037] loop3: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 254.716323][ T6037] syz.3.24: attempt to access beyond end of device [ 254.716323][ T6037] loop3: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 254.877346][ T29] audit: type=1800 audit(1772381419.445:11): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.24" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 255.523772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 260.844784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.349459][ T6070] kAFS: No cell specified [ 265.750347][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.784613][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.497760][ T6099] comedi comedi2: board detection failed [ 276.943606][ T6126] Bluetooth: MGMT ver 1.23 [ 277.736953][ T6139] comedi: valid board names for 8255 driver are: [ 277.782153][ T6139] 8255 [ 277.810326][ T6139] comedi: valid board names for vmk80xx driver are: [ 277.831425][ T6138] kAFS: No cell specified [ 277.900984][ T6139] vmk80xx [ 277.939999][ T6139] comedi: valid board names for usbduxsigma driver are: [ 277.983752][ T6139] usbduxsigma [ 278.065541][ T6139] comedi: valid board names for usbduxfast driver are: [ 278.083716][ T6139] usbduxfast [ 278.093484][ T6139] comedi: valid board names for usbdux driver are: [ 278.104423][ T6139] usbdux [ 278.107935][ T6139] comedi: valid board names for ni6501 driver are: [ 278.115498][ T6139] ni6501 [ 278.119044][ T6139] comedi: valid board names for dt9812 driver are: [ 278.147955][ T6139] dt9812 [ 278.194129][ T6139] comedi: valid board names for ni_labpc_cs driver are: [ 278.201822][ T6139] ni_labpc_cs [ 278.220504][ T6139] comedi: valid board names for ni_daq_700 driver are: [ 278.274870][ T6139] ni_daq_700 [ 278.292535][ T6139] comedi: valid board names for labpc_pci driver are: [ 278.353599][ T6139] labpc_pci [ 278.373730][ T6139] comedi: valid board names for adl_pci9118 driver are: [ 278.413596][ T6139] pci9118dg [ 278.417014][ T6139] pci9118hg [ 278.420381][ T6139] pci9118hr [ 278.514983][ T6139] comedi: valid board names for 8255_pci driver are: [ 278.521988][ T6139] 8255_pci [ 278.572311][ T6139] comedi: valid board names for s526 driver are: [ 278.630520][ T6139] s526 [ 278.645621][ T29] audit: type=1326 audit(1772381443.355:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 278.680241][ T6139] comedi: valid board names for multiq3 driver are: [ 278.725631][ T6139] multiq3 [ 278.728874][ T6139] comedi: valid board names for pcmuio driver are: [ 278.750750][ T29] audit: type=1326 audit(1772381443.355:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 278.788988][ T6139] pcmuio48 [ 278.792326][ T6139] pcmuio96 [ 278.809260][ T6139] comedi: valid board names for pcmmio driver are: [ 278.840945][ T29] audit: type=1326 audit(1772381443.425:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 278.876546][ T6139] pcmmio [ 278.879683][ T6139] comedi: valid board names for pcmda12 driver are: [ 278.914400][ T6139] pcmda12 [ 278.929605][ T6139] comedi: valid board names for pcmad driver are: [ 278.954001][ T6139] pcmad12 [ 278.957253][ T6139] pcmad16 [ 279.033865][ T6139] comedi: valid board names for ni_labpc driver are: [ 279.040754][ T6139] lab-pc-1200 [ 279.055160][ T29] audit: type=1326 audit(1772381443.425:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 279.079319][ T29] audit: type=1326 audit(1772381443.425:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 279.104953][ T6139] lab-pc-1200ai [ 279.108797][ T6139] lab-pc+ [ 279.153544][ T6139] comedi: valid board names for atmio16 driver are: [ 279.160497][ T6139] atmio16 [ 279.223957][ T6139] atmio16d [ 279.227289][ T6139] comedi: valid board names for ni_at_ao driver are: [ 279.353630][ T6139] at-ao-6 [ 279.356878][ T6139] at-ao-10 [ 279.360257][ T6139] comedi: valid board names for ni_at_a2150 driver are: [ 279.479966][ T6139] ni_at_a2150 [ 279.673560][ T6139] comedi: valid board names for adq12b driver are: [ 279.680199][ T6139] adq12b [ 279.836351][ T6139] comedi: valid board names for mpc624 driver are: [ 279.891116][ T6139] mpc624 [ 279.943333][ T6139] comedi: valid board names for c6xdigio driver are: [ 279.950410][ T6139] c6xdigio [ 280.023412][ T6139] comedi: valid board names for aio_iiro_16 driver are: [ 280.071233][ T6139] aio_iiro_16 [ 280.117587][ T6139] comedi: valid board names for aio_aio12_8 driver are: [ 280.136743][ T6139] aio_aio12_8 [ 280.151726][ T6139] aio_ai12_8 [ 280.184807][ T6139] aio_ao12_4 [ 280.199667][ T6139] comedi: valid board names for fl512 driver are: [ 280.238207][ T6139] fl512 [ 280.241306][ T6139] comedi: valid board names for dmm32at driver are: [ 280.279766][ T6139] dmm32at [ 280.296126][ T6139] comedi: valid board names for dt282x driver are: [ 280.372715][ T6139] dt2821 [ 280.401489][ T6139] dt2821-f [ 280.420412][ T6139] dt2821-g [ 280.443525][ T6139] dt2823 [ 280.452244][ T6139] dt2824-pgh [ 280.479445][ T6139] dt2824-pgl [ 280.500537][ T6139] dt2825 [ 280.515545][ T6139] dt2827 [ 280.544912][ T6139] dt2828 [ 280.558780][ T6139] dt2829 [ 280.570846][ T6139] dt21-ez [ 280.592849][ T6139] dt23-ez [ 280.620139][ T6139] dt24-ez [ 280.637456][ T6139] dt24-ez-pgl [ 280.653338][ T6139] comedi: valid board names for dt2817 driver are: [ 280.703852][ T6139] dt2817 [ 280.718473][ T6139] comedi: valid board names for dt2815 driver are: [ 280.773718][ T6139] dt2815 [ 280.789931][ T6139] comedi: valid board names for dt2814 driver are: [ 280.831211][ T6139] dt2814 [ 280.858266][ T6139] comedi: valid board names for dt2811 driver are: [ 280.881063][ T6139] dt2811-pgh [ 280.892419][ T6139] dt2811-pgl [ 280.902229][ T6139] comedi: valid board names for dt2801 driver are: [ 280.918613][ T6139] dt2801 [ 280.926407][ T6139] comedi: valid board names for das6402 driver are: [ 280.966132][ T6139] das6402-12 [ 281.033777][ T6139] das6402-16 [ 281.053466][ T6139] comedi: valid board names for das1800 driver are: [ 281.197316][ T6139] das-1701st [ 281.204585][ T6139] das-1701st-da [ 281.212689][ T6139] das-1702st [ 281.291991][ T6139] das-1702st-da [ 281.337710][ T6139] das-1702hr [ 281.376378][ T6139] das-1702hr-da [ 281.410727][ T6139] das-1701ao [ 281.454354][ T6139] das-1702ao [ 281.501171][ T6139] das-1801st [ 281.584737][ T6139] das-1801st-da [ 281.611060][ T6139] das-1802st [ 281.669164][ T6139] das-1802st-da [ 281.731421][ T6139] das-1802hr [ 281.814121][ T6139] das-1802hr-da [ 281.889628][ T6139] das-1801hc [ 281.961578][ T6139] das-1802hc [ 282.027467][ T6139] das-1801ao [ 282.105918][ T6139] das-1802ao [ 282.188989][ T6139] comedi: valid board names for das800 driver are: [ 282.288591][ T6139] das-800 [ 282.370340][ T6139] cio-das800 [ 282.490653][ T6139] das-801 [ 282.591478][ T6139] cio-das801 [ 282.671967][ T6139] das-802 [ 282.676470][ T6139] cio-das802 [ 282.706574][ T6139] cio-das802/16 [ 282.786725][ T6139] comedi: valid board names for isa-das08 driver are: [ 282.907880][ T6139] isa-das08 [ 283.001830][ T6139] das08-pgm [ 283.110375][ T6139] das08-pgh [ 283.328579][ T6139] das08-pgl [ 283.361569][ T6139] das08-aoh [ 283.405765][ T6139] das08-aol [ 283.429131][ T6139] das08-aom [ 283.466763][ T6139] das08/jr-ao [ 283.534257][ T6139] das08jr-16-ao [ 283.608797][ T6139] pc104-das08 [ 283.648937][ T6139] das08jr/16 [ 283.720911][ T6139] comedi: valid board names for das16m1 driver are: [ 283.866865][ T6139] das16m1 [ 283.928300][ T6139] comedi: valid board names for dac02 driver are: [ 284.068473][ T6139] dac02 [ 284.120573][ T6139] comedi: valid board names for rti802 driver are: [ 284.366720][ T6139] rti802 [ 284.369935][ T6139] comedi: valid board names for rti800 driver are: [ 284.490470][ T6139] rti800 [ 284.515051][ T6139] rti815 [ 284.539766][ T6139] comedi: valid board names for pcm3724 driver are: [ 284.574053][ T6139] pcm3724 [ 284.577289][ T6139] comedi: valid board names for pcl818 driver are: [ 284.633916][ T6139] pcl818l [ 284.637262][ T6139] pcl818h [ 284.743471][ T6139] pcl818hd [ 284.758820][ T6139] pcl818hg [ 284.887085][ T6139] pcl818 [ 285.040517][ T6139] pcl718 [ 285.057904][ T6139] pcm3718 [ 285.094522][ T6139] comedi: valid board names for pcl816 driver are: [ 285.162536][ T6139] pcl816 [ 285.196988][ T6139] pcl814b [ 285.211994][ T6139] comedi: valid board names for pcl812 driver are: [ 285.412625][ T6139] pcl812 [ 285.473851][ T6139] pcl812pg [ 285.594789][ T6139] acl8112pg [ 285.701084][ T6139] acl8112dg [ 285.780020][ T6139] acl8112hg [ 285.856140][ T6139] a821pgl [ 285.896100][ T6139] a821pglnda [ 285.972062][ T6139] a821pgh [ 285.989293][ T6139] a822pgl [ 286.017657][ T6139] a822pgh [ 286.059578][ T6139] a823pgl [ 286.103136][ T6139] a823pgh [ 286.131492][ T6139] pcl813 [ 286.181434][ T6139] pcl813b [ 286.213458][ T6139] acl8113 [ 286.302605][ T6139] iso813 [ 286.352257][ T6139] acl8216 [ 286.359408][ T6139] a826pg [ 286.376652][ T6139] comedi: valid board names for pcl730 driver are: [ 286.438481][ T6139] pcl730 [ 286.488172][ T6139] iso730 [ 286.529954][ T6139] acl7130 [ 286.579698][ T6139] pcm3730 [ 286.630235][ T6139] pcl725 [ 286.682453][ T6139] p8r8dio [ 286.734030][ T6139] acl7225b [ 286.785726][ T6139] p16r16dio [ 286.852179][ T6139] pcl733 [ 287.033353][ T6139] pcl734 [ 287.088668][ T6139] opmm-1616-xt [ 287.142373][ T6139] pearl-mm-p [ 287.199509][ T6139] ir104-pbf [ 287.261535][ T6139] comedi: valid board names for pcl726 driver are: [ 287.448106][ T6139] pcl726 [ 287.517287][ T6139] pcl727 [ 287.557214][ T6139] pcl728 [ 287.611424][ T6139] acl6126 [ 287.662825][ T6139] acl6128 [ 287.747628][ T6139] comedi: valid board names for pcl724 driver are: [ 287.901175][ T6139] pcl724 [ 287.946679][ T6139] pcl722 [ 287.989022][ T6139] pcl731 [ 287.992439][ T6139] acl7122 [ 288.041455][ T6139] acl7124 [ 288.104919][ T6139] pet48dio [ 288.142709][ T6139] pcmio48 [ 288.181784][ T6139] onyx-mm-dio [ 288.311820][ T6139] comedi: valid board names for pcl711 driver are: [ 288.370380][ T6139] pcl711 [ 288.414886][ T6139] pcl711b [ 288.426873][ T6139] acl8112hg [ 288.456155][ T6139] acl8112dg [ 288.510974][ T6139] comedi: valid board names for amplc_pc263 driver are: [ 288.589861][ T6139] pc263 [ 288.621979][ T6139] comedi: valid board names for amplc_pc236 driver are: [ 288.682404][ T6139] pc36at [ 288.733930][ T6139] comedi: valid board names for amplc_dio200 driver are: [ 288.806689][ T6139] pc212e [ 288.810389][ T6139] pc214e [ 288.855604][ T6139] pc215e [ 288.878001][ T6139] pc218e [ 288.925756][ T6139] pc272e [ 288.956313][ T6139] comedi: valid board names for comedi_parport driver are: [ 289.034765][ T6139] comedi_parport [ 289.058243][ T6139] comedi: valid board names for comedi_test driver are: [ 289.168273][ T6139] comedi_test [ 289.198484][ T6139] comedi: valid board names for comedi_bond driver are: [ 289.295824][ T6139] comedi_bond [ 290.030230][ T6158] comedi comedi1: dmm32at: I/O port conflict (0x10003c4,16) [ 290.260779][ T6187] kAFS: No cell specified [ 290.655475][ T6190] kAFS: No cell specified [ 301.286611][ T6237] kAFS: No cell specified [ 301.466487][ T6240] kAFS: No cell specified [ 308.257422][ T6268] bond2: option arp_all_targets: invalid value (129) [ 308.341304][ T6268] bond2 (unregistering): Released all slaves [ 313.664864][ T6282] kAFS: No cell specified [ 314.232706][ T6289] kAFS: No cell specified [ 314.238192][ T6290] warning: `syz.4.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.705916][ T6296] loop3: detected capacity change from 0 to 128 [ 315.882779][ T6296] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 316.011515][ T6296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.132381][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 316.504595][ T6302] loop2: detected capacity change from 0 to 64 [ 320.265146][ T6327] kAFS: No cell specified [ 321.084223][ T6333] kAFS: No cell specified [ 322.770880][ T29] audit: type=1326 audit(1772381487.475:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 322.953816][ T29] audit: type=1326 audit(1772381487.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 323.027173][ T29] audit: type=1326 audit(1772381487.595:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 323.051314][ T29] audit: type=1326 audit(1772381487.595:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 323.219762][ T29] audit: type=1326 audit(1772381487.595:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 323.498125][ T6346] loop4: detected capacity change from 0 to 512 [ 323.614017][ T6346] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 323.638730][ T6346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 323.650268][ T6346] System zones: 0-1, 15-15, 18-18, 34-34 [ 323.659175][ T6346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 323.685691][ T6346] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 323.731717][ T6346] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 323.802216][ T6346] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 323.856309][ T6346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.118: bg 0: block 40: padding at end of block bitmap is not set [ 323.927778][ T6346] loop4: lost filesystem error report for type 5 error -117 [ 323.929452][ T6346] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 323.937301][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 323.937413][ C1] EXT4-fs (loop4): initial error at time 1772381488: ext4_validate_block_bitmap:441 [ 323.937768][ C1] EXT4-fs (loop4): last error at time 1772381488: ext4_validate_block_bitmap:441 [ 324.564592][ T6346] loop4: lost filesystem error report for type 5 error -117 [ 324.568146][ T6346] EXT4-fs (loop4): 1 truncate cleaned up [ 324.595640][ T6346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.882058][ T6346] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.118: bad symlink. [ 325.866485][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.939206][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.947247][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.268794][ T6380] kAFS: No cell specified [ 328.813558][ T6383] loop0: detected capacity change from 0 to 8 [ 328.921440][ T6383] ======================================================= [ 328.921440][ T6383] WARNING: The mand mount option has been deprecated and [ 328.921440][ T6383] and is ignored by this kernel. Remove the mand [ 328.921440][ T6383] option from the mount to silence this warning. [ 328.921440][ T6383] ======================================================= [ 329.061603][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 329.069058][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 329.078142][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 329.084786][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 329.091131][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 330.229060][ T6387] kAFS: No cell specified [ 331.737320][ T6404] netlink: 'syz.4.134': attribute type 21 has an invalid length. [ 331.769167][ T6404] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.880894][ T6404] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 337.269141][ T6434] afs: Unknown parameter 'dy' [ 339.327599][ T6455] kAFS: No cell specified [ 340.990807][ T29] audit: type=1326 audit(1772381505.675:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 341.470111][ T29] audit: type=1326 audit(1772381505.695:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 343.318323][ T29] audit: type=1326 audit(1772381505.805:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 343.726447][ T29] audit: type=1326 audit(1772381505.805:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 345.167350][ T6493] afs: Unknown parameter 'dy' [ 348.564653][ T6513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.704343][ T6536] kAFS: No cell specified [ 353.767627][ T6554] Zero length message leads to an empty skb [ 354.127287][ T6557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.140037][ T6599] kAFS: No cell specified [ 366.293838][ T29] audit: type=1326 audit(1772381531.005:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 366.393212][ T29] audit: type=1326 audit(1772381531.035:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=453 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 366.516089][ T29] audit: type=1326 audit(1772381531.035:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 366.646653][ T29] audit: type=1326 audit(1772381531.035:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 366.791728][ T29] audit: type=1326 audit(1772381531.065:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 366.924275][ T29] audit: type=1326 audit(1772381531.065:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 367.092054][ T29] audit: type=1326 audit(1772381531.065:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 367.160285][ T6656] loop2: detected capacity change from 0 to 128 [ 367.255172][ T29] audit: type=1326 audit(1772381531.065:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 367.292171][ T6656] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 367.375524][ T6656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.731089][ T6661] loop0: detected capacity change from 0 to 512 [ 367.822224][ T6661] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 367.906776][ T6661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 368.173879][ T6661] System zones: 0-1, 15-15, 18-18, 34-34 [ 368.181047][ T6661] EXT4-fs (loop0): orphan cleanup on readonly fs [ 368.624845][ T6661] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 368.806464][ T6661] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 369.253318][ T6661] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 369.649031][ T6661] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.194: bg 0: block 40: padding at end of block bitmap is not set [ 369.933358][ T6661] loop0: lost filesystem error report for type 5 error -117 [ 369.943139][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 369.957845][ C0] EXT4-fs (loop0): initial error at time 1772381534: ext4_validate_block_bitmap:441 [ 369.967847][ C0] EXT4-fs (loop0): last error at time 1772381534: ext4_validate_block_bitmap:441 [ 369.989805][ T6661] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 370.236511][ T6661] loop0: lost filesystem error report for type 5 error -117 [ 370.259572][ T6661] EXT4-fs (loop0): 1 truncate cleaned up [ 370.456872][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.092280][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.362087][ T6701] loop3: detected capacity change from 0 to 4096 [ 375.533562][ T6701] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 378.423180][ T6701] ntfs3(loop3): Failed to read $AttrDef (-4). [ 379.973862][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 380.197712][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.291304][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 380.427793][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.516656][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.643922][ T24] usb 3-1: Product: syz [ 380.648346][ T24] usb 3-1: Manufacturer: syz [ 380.722233][ T24] usb 3-1: SerialNumber: syz [ 380.961478][ T24] usb 3-1: config 0 descriptor?? [ 381.221598][ T24] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 381.918728][ T29] audit: type=1326 audit(1772381546.605:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 382.169647][ T29] audit: type=1326 audit(1772381546.715:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 382.934024][ T24] usb 3-1: USB disconnect, device number 2 [ 384.250846][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.691622][ T6754] CIFS: VFS: Malformed UNC in devname [ 386.633694][ T6759] loop4: detected capacity change from 0 to 2048 [ 386.880096][ T6759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.390103][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.483176][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.141477][ T29] audit: type=1326 audit(1772381556.805:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 392.275494][ T29] audit: type=1326 audit(1772381556.835:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 392.450568][ T29] audit: type=1326 audit(1772381556.875:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 392.589588][ T29] audit: type=1326 audit(1772381556.875:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 392.728565][ T29] audit: type=1326 audit(1772381556.885:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 392.963495][ T29] audit: type=1326 audit(1772381556.885:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 393.414309][ T29] audit: type=1326 audit(1772381556.885:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 393.774335][ T29] audit: type=1326 audit(1772381556.885:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 393.806319][ T29] audit: type=1326 audit(1772381556.905:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 394.530515][ T6853] loop3: detected capacity change from 0 to 128 [ 398.425195][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 398.498280][ T6895] vlan0: entered promiscuous mode [ 405.753573][ T29] audit: type=1326 audit(1772381570.275:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 405.911198][ T29] audit: type=1326 audit(1772381570.385:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 405.935317][ T29] audit: type=1326 audit(1772381570.445:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 406.081442][ T29] audit: type=1326 audit(1772381570.535:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 406.105313][ T29] audit: type=1326 audit(1772381570.535:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 406.128860][ T29] audit: type=1326 audit(1772381570.535:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 406.153816][ T29] audit: type=1326 audit(1772381570.535:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 406.256407][ T29] audit: type=1326 audit(1772381570.535:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 409.491659][ T7004] loop3: detected capacity change from 0 to 4096 [ 409.821728][ T7004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.506815][ C1] hrtimer: interrupt took 369019 ns [ 411.976139][ T29] audit: type=1326 audit(1772381576.645:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.100881][ T29] audit: type=1326 audit(1772381576.645:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.147574][ T29] audit: type=1326 audit(1772381576.645:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.213476][ T29] audit: type=1326 audit(1772381576.645:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.238569][ T29] audit: type=1326 audit(1772381576.645:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.269027][ T29] audit: type=1326 audit(1772381576.645:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.495726][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.580856][ T7027] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 412.581966][ T29] audit: type=1326 audit(1772381576.645:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.616250][ T29] audit: type=1326 audit(1772381576.645:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.639365][ T29] audit: type=1326 audit(1772381576.645:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 412.672059][ T29] audit: type=1326 audit(1772381576.645:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ff00000 [ 415.270703][ T7055] capability: warning: `syz.0.305' uses 32-bit capabilities (legacy support in use) [ 419.023616][ T7076] syz.1.310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 420.002418][ T7083] bridge0: port 3(erspan0) entered blocking state [ 420.043705][ T7083] bridge0: port 3(erspan0) entered disabled state [ 420.050774][ T7083] erspan0: entered allmulticast mode [ 420.473345][ T7083] erspan0: entered promiscuous mode [ 420.766197][ T7083] bridge0: port 3(erspan0) entered blocking state [ 420.773640][ T7083] bridge0: port 3(erspan0) entered forwarding state [ 421.765493][ T7085] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 429.741323][ T5776] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 429.915335][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 429.915422][ T29] audit: type=1326 audit(1772381594.625:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 430.073296][ T29] audit: type=1326 audit(1772381594.625:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 430.296503][ T29] audit: type=1326 audit(1772381594.625:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 430.896281][ T29] audit: type=1326 audit(1772381594.625:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 431.080997][ T29] audit: type=1326 audit(1772381594.625:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 431.229519][ T29] audit: type=1326 audit(1772381594.635:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 431.363235][ T29] audit: type=1326 audit(1772381594.645:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 431.460061][ T29] audit: type=1326 audit(1772381594.645:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 435.015372][ T7202] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.124428][ T5776] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 442.972214][ T29] audit: type=1326 audit(1772381607.665:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 443.093438][ T29] audit: type=1326 audit(1772381607.715:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 443.243858][ T29] audit: type=1326 audit(1772381607.755:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 445.148587][ T29] audit: type=1326 audit(1772381607.755:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 445.203890][ T29] audit: type=1326 audit(1772381607.755:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 449.817310][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.824102][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.235635][ T29] audit: type=1326 audit(1772381628.935:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 464.464514][ T29] audit: type=1326 audit(1772381628.935:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 464.608871][ T29] audit: type=1326 audit(1772381628.995:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 464.905697][ T29] audit: type=1326 audit(1772381629.005:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 465.068994][ T29] audit: type=1326 audit(1772381629.005:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 467.925472][ T29] audit: type=1326 audit(1772381632.635:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 468.078314][ T29] audit: type=1326 audit(1772381632.665:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 468.401682][ T29] audit: type=1326 audit(1772381632.665:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 468.623064][ T29] audit: type=1326 audit(1772381632.665:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 468.762044][ T29] audit: type=1326 audit(1772381632.665:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 468.896387][ T7475] [U] .h0FwZ,iqgҏV2sO [ 468.902727][ T7475] [U] ` w*BBOLhU [ 468.907507][ T7475] [U] w$n|#%o.z\̧mРw [ 468.973483][ T7475] [U] R{ꫢ S [ 468.979217][ T7474] [U] [ 471.966971][ T7498] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 473.096742][ T7509] loop0: detected capacity change from 0 to 512 [ 473.374495][ T7509] EXT4-fs (loop0): orphan cleanup on readonly fs [ 473.520341][ T7509] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 473.613480][ T7509] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 473.659458][ T7509] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.423: Failed to acquire dquot type 1 [ 473.713493][ T7509] loop0: lost filesystem error report for type 5 error -5 [ 473.723022][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 473.737240][ C1] EXT4-fs (loop0): last error at time 1772381638: ext4_acquire_dquot:7001 [ 473.768334][ T7509] EXT4-fs (loop0): 1 truncate cleaned up [ 473.809506][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.957679][ T7509] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 474.062402][ T7509] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 474.231537][ T5776] Bluetooth: hci4: unexpected event for opcode 0x042f [ 474.453266][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.178734][ T29] audit: type=1326 audit(1772381641.865:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 477.403413][ T29] audit: type=1326 audit(1772381641.945:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 477.526539][ T29] audit: type=1326 audit(1772381641.945:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 477.630987][ T29] audit: type=1326 audit(1772381641.965:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 479.078435][ T29] audit: type=1326 audit(1772381642.285:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.436" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x0 [ 480.123443][ T7567] vlan0: entered promiscuous mode [ 483.303370][ T5940] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 485.262762][ T5940] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 485.319114][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.333090][ T5940] usb 3-1: config 0 has no interface number 0 [ 485.333246][ T5940] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 485.333425][ T5940] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 485.333589][ T5940] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.333770][ T5940] usb 3-1: config 0 interface 52 has no altsetting 0 [ 485.805735][ T5940] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 485.805917][ T5940] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 485.806055][ T5940] usb 3-1: Manufacturer: syz [ 485.848494][ T5940] usb 3-1: config 0 descriptor?? [ 485.857654][ T5940] hub 3-1:0.52: bad descriptor, ignoring hub [ 485.857747][ T5940] hub 3-1:0.52: probe with driver hub failed with error -5 [ 486.384840][ T5940] usb 3-1: Can not set alternate setting to 1, error: -71 [ 486.421543][ T5940] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 486.647401][ T5940] usb 3-1: USB disconnect, device number 3 [ 490.768817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.382554][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 493.392100][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 496.007807][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 496.195830][ T5776] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 510.631099][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 510.958784][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 511.032371][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.044018][ T5835] usb 5-1: config 0 has no interfaces? [ 511.049968][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.059710][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.090202][ T5835] usb 5-1: config 0 descriptor?? [ 511.257056][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.283917][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.759328][ T5940] usb 5-1: USB disconnect, device number 2 [ 511.873285][ T7779] usb usb8: usbfs: process 7779 (syz.0.497) did not claim interface 0 before use [ 515.160763][ T29] audit: type=1326 audit(1772381679.835:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.0.500" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x0 [ 524.077501][ T7849] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 524.144741][ T29] audit: type=1326 audit(1772381688.855:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.517" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0 [ 524.750522][ T5940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 524.952597][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 524.983962][ T5940] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 525.016646][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.663953][ T5940] usb 3-1: config 0 has no interface number 0 [ 525.670620][ T5940] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.069695][ T5940] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.084992][ T5940] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 526.097918][ T5940] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.112182][ T5940] usb 3-1: config 0 interface 52 has no altsetting 0 [ 526.125169][ T5940] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 526.136527][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.155896][ T5940] usb 3-1: config 0 descriptor?? [ 528.647099][ T5940] usb 3-1: Can not set alternate setting to 1, error: -71 [ 528.656045][ T5940] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 528.689138][ T5940] usb 3-1: USB disconnect, device number 4 [ 529.366585][ T7878] loop4: detected capacity change from 0 to 764 [ 533.813501][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 535.773908][ T5940] usb 3-1: device descriptor read/all, error -71 [ 536.391011][ T7905] bond11 (unregistering): Released all slaves [ 537.955382][ T7929] afs: Unknown parameter 'dy' [ 542.813419][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 543.443166][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 543.541830][ T9] usb 2-1: config 0 has no interfaces? [ 543.632540][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.709103][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.818297][ T9] usb 2-1: Product: syz [ 543.822632][ T9] usb 2-1: Manufacturer: syz [ 543.988680][ T9] usb 2-1: SerialNumber: syz [ 544.073454][ T9] usb 2-1: config 0 descriptor?? [ 544.938973][ T5835] usb 2-1: USB disconnect, device number 2 [ 547.617579][ T7976] netlink: 72 bytes leftover after parsing attributes in process `syz.2.549'. [ 547.823088][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 548.023381][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 548.100271][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.173093][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.226526][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.270115][ T5835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 548.337446][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.844363][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.272635][ T5835] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.281246][ T5835] usb 1-1: Manufacturer: syz [ 550.348842][ T5835] usb 1-1: config 0 descriptor?? [ 551.453245][ T5835] rc_core: IR keymap rc-hauppauge not found [ 551.495679][ T5835] Registered IR keymap rc-empty [ 551.526539][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 551.672134][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 551.793762][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 552.797096][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 554.010945][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 554.123923][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 554.253629][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 554.395771][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.593927][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.788964][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.813538][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.833329][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.853526][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.883433][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.967939][ T5835] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 556.023976][ T5835] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 556.203380][ T5835] usb 1-1: USB disconnect, device number 2 [ 556.644881][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 556.981510][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 557.143136][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.173071][ T9] usb 3-1: Product: syz [ 557.203039][ T9] usb 3-1: Manufacturer: syz [ 557.359589][ T8021] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 557.540633][ T9] usb 3-1: SerialNumber: syz [ 557.586279][ T9] usb 3-1: config 0 descriptor?? [ 559.934587][ T9] usb 3-1: USB disconnect, device number 7 [ 562.678363][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 563.183702][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 563.256832][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 563.304647][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.624979][ T9] usb 4-1: config 0 descriptor?? [ 564.404851][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 565.026876][ T6773] udevd[6773]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.103923][ T9] gspca_sunplus: reg_w_riv err -110 [ 565.110006][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 565.170836][ T9] usb 4-1: USB disconnect, device number 2 [ 568.894440][ T5776] Bluetooth: hci1: unexpected subevent 0x0a length: 232 > 30 [ 568.984637][ T5780] Bluetooth: hci1: ACL packet too small [ 571.110271][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 572.710401][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.718908][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.153434][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 578.147968][ T8123] loop2: detected capacity change from 0 to 1024 [ 584.744403][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 584.911918][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 584.972607][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.075823][ T9] usb 3-1: config 0 descriptor?? [ 585.329657][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 585.565051][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 585.702333][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 585.843875][ T9] [drm] Initialized udl on minor 2 [ 585.893041][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 586.315560][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 586.424308][ T7952] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 586.462615][ T7952] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 586.492014][ T9] usb 3-1: USB disconnect, device number 8 [ 589.213449][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 590.046195][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 590.407046][ T5835] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.416416][ T5835] usb 2-1: config 0 has no interface number 0 [ 590.423324][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.437240][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.448021][ T5835] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 590.457766][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.479445][ T5835] usb 2-1: config 0 descriptor?? [ 591.279303][ T5835] uclogic 0003:28BD:0094.0001: failed retrieving string descriptor #100: -71 [ 591.343558][ T5835] uclogic 0003:28BD:0094.0001: failed retrieving pen parameters: -71 [ 591.352045][ T5835] uclogic 0003:28BD:0094.0001: pen probing failed: -71 [ 591.393332][ T5835] uclogic 0003:28BD:0094.0001: failed probing parameters: -71 [ 591.402255][ T5835] uclogic 0003:28BD:0094.0001: probe with driver uclogic failed with error -71 [ 591.525331][ T5835] usb 2-1: USB disconnect, device number 3 [ 591.968633][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 597.854600][ T8225] loop0: detected capacity change from 0 to 4096 [ 599.040022][ T8225] ntfs3(loop0): ino=5, "/" fiemap is not supported for directories [ 600.090626][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 601.339154][ T8251] bridge0: entered promiscuous mode [ 601.959937][ T8252] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 608.776023][ T29] audit: type=1326 audit(1772381773.485:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 608.820907][ T29] audit: type=1326 audit(1772381773.485:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 608.845971][ T29] audit: type=1326 audit(1772381773.525:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 608.870295][ T29] audit: type=1326 audit(1772381773.525:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 616.150300][ T8314] loop0: detected capacity change from 0 to 4096 [ 616.588803][ T8330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.698771][ T8338] loop3: detected capacity change from 0 to 512 [ 618.115078][ T8338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.223521][ T8338] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.007193][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.715588][ T5780] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 624.170386][ T8389] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 624.721773][ T8394] loop3: detected capacity change from 0 to 512 [ 624.770136][ T8394] EXT4-fs: Ignoring removed nobh option [ 624.963811][ T8394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 625.052045][ T8394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 625.227871][ T8394] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 625.367910][ T8394] EXT4-fs (loop3): 1 truncate cleaned up [ 625.400146][ T8394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.862235][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.479845][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 629.490741][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 629.504554][ T5776] Bluetooth: hci1: hardware error 0x00 [ 630.760065][ T8421] netlink: 7 bytes leftover after parsing attributes in process `syz.0.675'. [ 632.298117][ T5776] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 632.919563][ T5776] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 634.433647][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.444347][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.044127][ T8463] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 641.145955][ T8479] Bluetooth: MGMT ver 1.23 [ 642.555245][ T8488] capability: warning: `syz.1.695' uses deprecated v2 capabilities in a way that may be insecure [ 643.244123][ T8492] loop0: detected capacity change from 0 to 512 [ 643.374360][ T8492] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.696: inode has both inline data and extents flags [ 643.475272][ T8492] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 643.482910][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 643.498977][ C0] EXT4-fs (loop0): initial error at time 1772381808: ext4_orphan_get:1391: inode 15 [ 643.508966][ C0] EXT4-fs (loop0): last error at time 1772381808: ext4_orphan_get:1391: inode 15 [ 643.527287][ T8492] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.696: couldn't read orphan inode 15 (err -117) [ 643.550152][ T8492] loop0: lost filesystem error report for type 5 error -117 [ 643.561411][ T8492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.175812][ T8492] EXT4-fs (loop0): can't disable delalloc during remount [ 645.062371][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.918642][ T8543] loop4: detected capacity change from 0 to 128 [ 651.997019][ T8543] EXT4-fs: Ignoring removed nobh option [ 652.223662][ T8543] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.279950][ T8543] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 653.365922][ T8553] netlink: 100 bytes leftover after parsing attributes in process `syz.1.715'. [ 653.486280][ T5786] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 653.719588][ T8558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.734260][ T8558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.793728][ T8558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.812438][ T8558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.834191][ T8558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.953077][ T8558] Bluetooth: hci5: command tx timeout [ 658.033264][ T8558] Bluetooth: hci5: command tx timeout [ 658.805755][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 659.796862][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.124391][ T5776] Bluetooth: hci5: command tx timeout [ 660.867597][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 661.286179][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.789439][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.193095][ T5776] Bluetooth: hci5: command 0x0419 tx timeout [ 662.919971][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.284516][ T8558] Bluetooth: hci5: command 0x0419 tx timeout [ 666.873850][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.900087][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.919618][ T8557] bridge_slave_0: entered allmulticast mode [ 666.977295][ T8557] bridge_slave_0: entered promiscuous mode [ 667.040601][ T34] bridge_slave_1: left allmulticast mode [ 667.073096][ T34] bridge_slave_1: left promiscuous mode [ 667.111392][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.278797][ T34] bridge_slave_0: left allmulticast mode [ 667.313057][ T34] bridge_slave_0: left promiscuous mode [ 667.320103][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.445820][ T8665] loop4: detected capacity change from 0 to 256 [ 667.506689][ T8665] exfat: Deprecated parameter 'namecase' [ 667.591324][ T8665] exfat: Deprecated parameter 'namecase' [ 667.924341][ T8665] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 669.437117][ T8680] netlink: 332 bytes leftover after parsing attributes in process `syz.3.751'. [ 670.422313][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.629568][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.726273][ T34] bond0 (unregistering): Released all slaves [ 670.800516][ T34] bond1 (unregistering): Released all slaves [ 671.307971][ T34] bond2 (unregistering): Released all slaves [ 671.782690][ T34] bond3 (unregistering): Released all slaves [ 672.290073][ T34] bond4 (unregistering): Released all slaves [ 672.419906][ T34] bond5 (unregistering): Released all slaves [ 673.217396][ T34] bond6 (unregistering): Released all slaves [ 673.530347][ T34] bond7 (unregistering): Released all slaves [ 674.318902][ T34] bond8 (unregistering): Released all slaves [ 674.416045][ T34] bond9 (unregistering): Released all slaves [ 674.493660][ T34] bond10 (unregistering): Released all slaves [ 674.547957][ T34] bond11 (unregistering): Released all slaves [ 674.587865][ T34] bond12 (unregistering): Released all slaves [ 674.614299][ T34] bond13 (unregistering): Released all slaves [ 674.698667][ T34] bond14 (unregistering): Released all slaves [ 674.720342][ T34] bond15 (unregistering): Released all slaves [ 674.740536][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.759057][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.770772][ T8557] bridge_slave_1: entered allmulticast mode [ 674.804383][ T8557] bridge_slave_1: entered promiscuous mode [ 674.921869][ T8694] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 674.976828][ T8702] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 675.347412][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.753687][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.060616][ T8557] team0: Port device team_slave_0 added [ 677.744045][ T8557] team0: Port device team_slave_1 added [ 678.773681][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.826807][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.952658][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.116071][ T34] hsr_slave_0: left promiscuous mode [ 679.220543][ T34] hsr_slave_1: left promiscuous mode [ 679.284614][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.303203][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.346511][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.400376][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.616566][ T34] veth1_macvtap: left promiscuous mode [ 679.666916][ T34] veth0_macvtap: left promiscuous mode [ 679.685602][ T34] veth1_vlan: left promiscuous mode [ 681.052085][ T8753] ===================================================== [ 681.060023][ T8753] BUG: KMSAN: uninit-value in try_module_get+0x122/0x290 [ 681.067760][ T8753] try_module_get+0x122/0x290 [ 681.072902][ T8753] dvb_device_open+0x17a/0x680 [ 681.077970][ T8753] chrdev_open+0x88d/0xb80 [ 681.082680][ T8753] do_dentry_open+0x827/0x1fd0 [ 681.088080][ T8753] vfs_open+0x52/0x5f0 [ 681.092415][ T8753] path_openat+0x5733/0x64c0 [ 681.098680][ T8753] do_file_open+0x2aa/0x680 [ 681.103821][ T8753] do_sys_openat2+0x163/0x380 [ 681.108941][ T8753] __ia32_compat_sys_openat+0x238/0x300 [ 681.114843][ T8753] ia32_sys_call+0x330b/0x4360 [ 681.119805][ T8753] do_int80_emulation+0x15a/0x330 [ 681.125364][ T8753] asm_int80_emulation+0x1f/0x30 [ 681.130502][ T8753] [ 681.133009][ T8753] Uninit was created at: [ 681.137556][ T8753] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 681.144901][ T8753] kmemdup_noprof+0x48/0x100 [ 681.149735][ T8753] neigh_parms_alloc+0x94/0x9e0 [ 681.155359][ T8753] ipv6_add_dev+0x5aa/0x1d50 [ 681.160253][ T8753] addrconf_notify+0x808/0x1cf0 [ 681.165504][ T8753] raw_notifier_call_chain+0x106/0x480 [ 681.171207][ T8753] call_netdevice_notifiers+0x191/0x260 [ 681.177799][ T8753] register_netdevice+0x24c8/0x28a0 [ 681.183404][ T8753] veth_newlink+0xcfe/0x1630 [ 681.188236][ T8753] rtnl_newlink_create+0x41c/0x1250 [ 681.193798][ T8753] rtnl_newlink+0x2b3c/0x39a0 [ 681.199861][ T8753] rtnetlink_rcv_msg+0x106f/0x14b0 [ 681.205818][ T8753] netlink_rcv_skb+0x54d/0x680 [ 681.210949][ T8753] rtnetlink_rcv+0x35/0x40 [ 681.215649][ T8753] netlink_unicast+0xf04/0x12b0 [ 681.220839][ T8753] netlink_sendmsg+0x10b2/0x1250 [ 681.226108][ T8753] __sys_sendto+0xa77/0xb90 [ 681.230836][ T8753] __ia32_compat_sys_socketcall+0x717/0x1b70 [ 681.237296][ T8753] ia32_sys_call+0x2c57/0x4360 [ 681.242247][ T8753] do_int80_emulation+0x15a/0x330 [ 681.247646][ T8753] asm_int80_emulation+0x1f/0x30 [ 681.253175][ T8753] [ 681.255646][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(full) [ 681.265722][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.276104][ T8753] ===================================================== [ 681.283281][ T8753] Disabling lock debugging due to kernel taint [ 681.292048][ T8753] Kernel panic - not syncing: kmsan.panic set ... [ 681.298837][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.4.771 Tainted: G B syzkaller #0 PREEMPT(full) [ 681.309965][ T8753] Tainted: [B]=BAD_PAGE [ 681.314335][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.324542][ T8753] Call Trace: [ 681.328039][ T8753] [ 681.331102][ T8753] __dump_stack+0x26/0x30 [ 681.335689][ T8753] dump_stack_lvl+0x50/0x1c0 [ 681.340533][ T8753] ? dump_stack+0x12/0x25 [ 681.345166][ T8753] dump_stack+0x1e/0x25 [ 681.349623][ T8753] vpanic+0x7b4/0x1430 [ 681.354067][ T8753] panic+0x15d/0x160 [ 681.358261][ T8753] kmsan_report+0x31a/0x320 [ 681.363379][ T8753] ? __msan_warning+0x1b/0x30 [ 681.368325][ T8753] ? try_module_get+0x122/0x290 [ 681.373964][ T8753] ? dvb_device_open+0x17a/0x680 [ 681.379171][ T8753] ? chrdev_open+0x88d/0xb80 [ 681.384008][ T8753] ? do_dentry_open+0x827/0x1fd0 [ 681.389398][ T8753] ? vfs_open+0x52/0x5f0 [ 681.393823][ T8753] ? path_openat+0x5733/0x64c0 [ 681.398834][ T8753] ? do_file_open+0x2aa/0x680 [ 681.403936][ T8753] ? do_sys_openat2+0x163/0x380 [ 681.409004][ T8753] ? __ia32_compat_sys_openat+0x238/0x300 [ 681.415053][ T8753] ? ia32_sys_call+0x330b/0x4360 [ 681.420580][ T8753] ? do_int80_emulation+0x15a/0x330 [ 681.426006][ T8753] ? asm_int80_emulation+0x1f/0x30 [ 681.431408][ T8753] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 681.437825][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.443212][ T8753] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 681.449804][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.455281][ T8753] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 681.461481][ T8753] ? tomoyo_check_open_permission+0xad9/0xc60 [ 681.467934][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.473501][ T8753] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 681.480090][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.485477][ T8753] __msan_warning+0x1b/0x30 [ 681.490320][ T8753] try_module_get+0x122/0x290 [ 681.495357][ T8753] dvb_device_open+0x17a/0x680 [ 681.500454][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.505936][ T8753] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 681.512196][ T8753] ? __pfx_dvb_device_open+0x10/0x10 [ 681.517758][ T8753] chrdev_open+0x88d/0xb80 [ 681.522458][ T8753] ? __pfx_chrdev_open+0x10/0x10 [ 681.527744][ T8753] do_dentry_open+0x827/0x1fd0 [ 681.532751][ T8753] vfs_open+0x52/0x5f0 [ 681.537015][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.542381][ T8753] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 681.548558][ T8753] path_openat+0x5733/0x64c0 [ 681.553533][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.559200][ T8753] ? kernel_tmpfile_open+0xf1/0x190 [ 681.564663][ T8753] ? stack_depot_save_flags+0x35/0x790 [ 681.570321][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.575779][ T8753] ? kmsan_get_metadata+0xf1/0x160 [ 681.581295][ T8753] do_file_open+0x2aa/0x680 [ 681.586217][ T8753] do_sys_openat2+0x163/0x380 [ 681.591234][ T8753] __ia32_compat_sys_openat+0x238/0x300 [ 681.597075][ T8753] ia32_sys_call+0x330b/0x4360 [ 681.602213][ T8753] do_int80_emulation+0x15a/0x330 [ 681.607454][ T8753] ? clear_bhb_loop+0x50/0xa0 [ 681.612426][ T8753] ? clear_bhb_loop+0x50/0xa0 [ 681.617501][ T8753] asm_int80_emulation+0x1f/0x30 [ 681.622658][ T8753] RIP: 0023:0xf7165cab [ 681.626981][ T8753] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 681.647066][ T8753] RSP: 002b:00000000f53e403c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 681.655697][ T8753] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e4100 [ 681.664057][ T8753] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.672180][ T8753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.680410][ T8753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 681.688723][ T8753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.696909][ T8753] [ 681.700426][ T8753] Kernel Offset: disabled [ 681.704829][ T8753] Rebooting in 86400 seconds..