Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. 2024/05/27 18:27:46 fuzzer started 2024/05/27 18:27:46 dialing manager at 10.128.0.163:30022 [ 53.200961][ T3548] cgroup: Unknown subsys name 'net' [ 53.413886][ T3548] cgroup: Unknown subsys name 'rlimit' 2024/05/27 18:27:47 starting 5 executor processes [ 54.416426][ T3554] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.292536][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.302768][ T3575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.311553][ T3575] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.320206][ T3575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.321739][ T3581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.329210][ T3575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.336749][ T3581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.342693][ T3575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.350387][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.358484][ T3575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.365065][ T3581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.370833][ T3575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.376937][ T3581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.392034][ T3575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.392193][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.400189][ T3575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.415061][ T3581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.415293][ T3575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.423069][ T3581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.430189][ T3575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.437047][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.444293][ T3575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.451682][ T3581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.466276][ T3581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.467171][ T3572] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.473667][ T3581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.480880][ T3572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.488692][ T3581] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.497007][ T3575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.536146][ T3581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.007065][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 56.020612][ T3576] chnl_net:caif_netlink_parms(): no params data found [ 56.031660][ T3566] chnl_net:caif_netlink_parms(): no params data found [ 56.042355][ T3578] chnl_net:caif_netlink_parms(): no params data found [ 56.097818][ T3571] chnl_net:caif_netlink_parms(): no params data found [ 56.202302][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.209803][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.218452][ T3576] device bridge_slave_0 entered promiscuous mode [ 56.230312][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.237658][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.246125][ T3576] device bridge_slave_1 entered promiscuous mode [ 56.322459][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.329803][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.338442][ T3566] device bridge_slave_0 entered promiscuous mode [ 56.346700][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.354244][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.361947][ T3578] device bridge_slave_0 entered promiscuous mode [ 56.376927][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.384121][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.392061][ T3567] device bridge_slave_0 entered promiscuous mode [ 56.401494][ T3576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.411189][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.421545][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.429498][ T3566] device bridge_slave_1 entered promiscuous mode [ 56.439098][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.446517][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.454599][ T3578] device bridge_slave_1 entered promiscuous mode [ 56.461677][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.469333][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.477207][ T3571] device bridge_slave_0 entered promiscuous mode [ 56.485632][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.492745][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.501313][ T3567] device bridge_slave_1 entered promiscuous mode [ 56.510333][ T3576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.538766][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.545980][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.555496][ T3571] device bridge_slave_1 entered promiscuous mode [ 56.604876][ T3566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.615951][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.628667][ T3576] team0: Port device team_slave_0 added [ 56.636792][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.656291][ T3566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.667795][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.678328][ T3576] team0: Port device team_slave_1 added [ 56.687594][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.698542][ T3571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.745354][ T3571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.779367][ T3566] team0: Port device team_slave_0 added [ 56.795299][ T3578] team0: Port device team_slave_0 added [ 56.801958][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.809249][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.836106][ T3576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.850652][ T3567] team0: Port device team_slave_0 added [ 56.858472][ T3566] team0: Port device team_slave_1 added [ 56.873013][ T3578] team0: Port device team_slave_1 added [ 56.879756][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.886906][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.913041][ T3576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.925473][ T3567] team0: Port device team_slave_1 added [ 56.941006][ T3571] team0: Port device team_slave_0 added [ 56.979176][ T3571] team0: Port device team_slave_1 added [ 57.020869][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.029133][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.055238][ T3566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.067425][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.074505][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.100560][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.135300][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.142367][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.168454][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.179923][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.187336][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.213451][ T3566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.225562][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.232526][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.258598][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.272248][ T3576] device hsr_slave_0 entered promiscuous mode [ 57.279661][ T3576] device hsr_slave_1 entered promiscuous mode [ 57.287258][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.294474][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.320688][ T3571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.332186][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.339496][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.365504][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.384729][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.391708][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.418098][ T3571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.468212][ T3566] device hsr_slave_0 entered promiscuous mode [ 57.475424][ T3566] device hsr_slave_1 entered promiscuous mode [ 57.482343][ T3566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.490340][ T3566] Cannot create hsr debugfs directory [ 57.534574][ T3581] Bluetooth: hci1: command tx timeout [ 57.534584][ T3579] Bluetooth: hci2: command tx timeout [ 57.534784][ T3579] Bluetooth: hci0: command tx timeout [ 57.575431][ T3578] device hsr_slave_0 entered promiscuous mode [ 57.582098][ T3578] device hsr_slave_1 entered promiscuous mode [ 57.588977][ T3578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.596996][ T3578] Cannot create hsr debugfs directory [ 57.603809][ T3579] Bluetooth: hci4: command tx timeout [ 57.603941][ T3583] Bluetooth: hci3: command tx timeout [ 57.613160][ T3567] device hsr_slave_0 entered promiscuous mode [ 57.621873][ T3567] device hsr_slave_1 entered promiscuous mode [ 57.628530][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.636487][ T3567] Cannot create hsr debugfs directory [ 57.645207][ T3571] device hsr_slave_0 entered promiscuous mode [ 57.652685][ T3571] device hsr_slave_1 entered promiscuous mode [ 57.659495][ T3571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.667601][ T3571] Cannot create hsr debugfs directory [ 57.978942][ T3576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.001768][ T3576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.021782][ T3576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.032744][ T3576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.070060][ T3566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.097726][ T3566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.107194][ T3566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.121028][ T3566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.216802][ T3571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.227471][ T3567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.239159][ T3567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.248588][ T3567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.263768][ T3571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.275210][ T3571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.295044][ T3567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.303979][ T3571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.343487][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.397478][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.406858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.426506][ T3578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.444848][ T3566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.457058][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.466730][ T3578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.499335][ T3578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.512403][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.521728][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.531073][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.538399][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.546780][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.555877][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.564398][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.571482][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.585018][ T3566] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.593431][ T3578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.616959][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.626267][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.634921][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.642559][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.651855][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.660923][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.669759][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.678282][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.687109][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.696779][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.733031][ T3576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.744856][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.765021][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.777960][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.786955][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.798347][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.806823][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.813936][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.821696][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.830698][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.839105][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.847977][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.856406][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.863466][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.871247][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.879108][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.907581][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.937602][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.966852][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.977477][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.987663][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.001784][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.010820][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.023949][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.042283][ T3571] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.050992][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.063454][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.072039][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.083303][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.091992][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.102556][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.128181][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.141058][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.161282][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.175433][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.188138][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.195302][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.214261][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.223470][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.232928][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.241795][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.248968][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.257026][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.266095][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.308990][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.325019][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.335286][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.349966][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.358566][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.377294][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.389204][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.397046][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.410222][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.422014][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.437746][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.464607][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.485912][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.498679][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.507792][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.520420][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.530958][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.544639][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.585551][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.601820][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.610499][ T3583] Bluetooth: hci0: command tx timeout [ 59.615931][ T3583] Bluetooth: hci1: command tx timeout [ 59.621335][ T3583] Bluetooth: hci2: command tx timeout [ 59.631117][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.640830][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.647995][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.657043][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.664810][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.672258][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.680814][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.688274][ T3583] Bluetooth: hci4: command tx timeout [ 59.693734][ T3583] Bluetooth: hci3: command tx timeout [ 59.705972][ T3566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.747255][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.764684][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.774825][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.783342][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.790503][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.800989][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.810013][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.818586][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.825722][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.833963][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.842778][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.851635][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.858780][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.866814][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.875787][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.884724][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.893369][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.902319][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.911080][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.919813][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.929329][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.939272][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.948416][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.979340][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.988490][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.011624][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.038709][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.058149][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.068018][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.077507][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.086972][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.098478][ T3576] device veth0_vlan entered promiscuous mode [ 60.117236][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.125644][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.139509][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.147679][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.160697][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.169710][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.178865][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.187936][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.197071][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.209413][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.236474][ T3567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.248671][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.271487][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.279947][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.288076][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.297109][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.310388][ T3576] device veth1_vlan entered promiscuous mode [ 60.347390][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.362367][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.384179][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.454895][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.470196][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.491700][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.500777][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.517415][ T3566] device veth0_vlan entered promiscuous mode [ 60.535159][ T3576] device veth0_macvtap entered promiscuous mode [ 60.554197][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.571354][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.594387][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.616221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.630662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.657701][ T3576] device veth1_macvtap entered promiscuous mode [ 60.672754][ T3566] device veth1_vlan entered promiscuous mode [ 60.718392][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.727860][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.736260][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.744447][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.752606][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.761671][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.769298][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.785440][ T3571] device veth0_vlan entered promiscuous mode [ 60.801694][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.809429][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.817284][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.826138][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.836911][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.850612][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.861035][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.880598][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.889650][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.899251][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.908118][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.917173][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.924768][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.934263][ T3566] device veth0_macvtap entered promiscuous mode [ 60.941917][ T3571] device veth1_vlan entered promiscuous mode [ 60.952864][ T3576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.961962][ T3576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.971172][ T3576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.980161][ T3576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.997351][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.026603][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.035007][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.042968][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.052821][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.068140][ T3566] device veth1_macvtap entered promiscuous mode [ 61.110862][ T3578] device veth0_vlan entered promiscuous mode [ 61.135680][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.144904][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.153195][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.161919][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.192948][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.209545][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.221736][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.230415][ T3578] device veth1_vlan entered promiscuous mode [ 61.238776][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.247412][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.255414][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.264056][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.278761][ T3571] device veth0_macvtap entered promiscuous mode [ 61.295735][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.308572][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.321835][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.328122][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.336684][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.349840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.359304][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.368247][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.377018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.385864][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.393714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.402269][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.412306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.428036][ T3571] device veth1_macvtap entered promiscuous mode [ 61.445579][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.455544][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.464725][ T3566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.473403][ T3566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.500752][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.508003][ T3567] device veth0_vlan entered promiscuous mode [ 61.515718][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.526907][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.536724][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.545864][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.554640][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.562375][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.574565][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.593154][ T3578] device veth0_macvtap entered promiscuous mode [ 61.604383][ T3578] device veth1_macvtap entered promiscuous mode [ 61.621236][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.633214][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.647996][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.659188][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.674866][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.683770][ T3581] Bluetooth: hci2: command tx timeout [ 61.689183][ T3581] Bluetooth: hci1: command tx timeout [ 61.696308][ T3583] Bluetooth: hci0: command tx timeout [ 61.706414][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.715269][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.724399][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.732339][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.741774][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.750957][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.763943][ T3581] Bluetooth: hci3: command tx timeout [ 61.764567][ T3583] Bluetooth: hci4: command tx timeout executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) [ 61.773389][ T3567] device veth1_vlan entered promiscuous mode [ 61.787454][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.798348][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.813421][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.830798][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.842462][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.908160][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.917307][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.926176][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.934884][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.946253][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.957105][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.965877][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.974647][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.986625][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.999934][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.010725][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.021466][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.031526][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.042035][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.053028][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1}}) [ 62.088553][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.097449][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.113721][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.129077][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.139534][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.150117][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.160679][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.172760][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.190075][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.224054][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.225164][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x40043d0d, 0x0) [ 62.232725][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.255836][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.263944][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.275007][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.304170][ T3578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.312913][ T3578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.330955][ T3578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') [ 62.360193][ T3578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 62.409161][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.422080][ T3567] device veth0_macvtap entered promiscuous mode [ 62.478434][ T3567] device veth1_macvtap entered promiscuous mode [ 62.552546][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.567686][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.582624][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.594328][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.605503][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.616848][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.627088][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.638065][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.651663][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.672324][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.680506][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.696424][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.704448][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.718862][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.743315][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.771148][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.796610][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.807844][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.818374][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.829620][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.846769][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.858184][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.875531][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.888197][ T3567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.898037][ T3567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.911032][ T3567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.923374][ T3567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.963404][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.974550][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.986914][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.033811][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.044347][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.057490][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) [ 63.086004][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.099147][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) [ 63.173694][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x7ffffffe, 0x0, 0x0, 0x0, 0x0, "9ed0ca0c91cf81094d742212f69e20853b0a74"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "4415264a88b82c522013fb235902af2556c6b6"}) [ 63.228588][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.240290][ T3663] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 63.252585][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.264382][ T3663] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 63.419321][ T3668] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.640414][ T3668] kvm: emulating exchange as write executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) [ 63.764125][ T3581] Bluetooth: hci0: command tx timeout [ 63.764148][ T3583] Bluetooth: hci1: command tx timeout [ 63.769599][ T3581] Bluetooth: hci2: command tx timeout [ 63.846581][ T3581] Bluetooth: hci3: command tx timeout [ 63.853808][ T3579] Bluetooth: hci4: command tx timeout executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) close(r2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7"], 0x1, 0x258, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$eJzs3MtvG8UfAPCv13H6/iW/Uh4tLQQKouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCgqHckSVuCOOSPwFXCgXBJyQuMIJDgipQr1QOBmtves6je3EtROH+vOR1p3xjDvz3d1pZ2fXDmBgjaUvhYjtEfFzRIzUsksrjNX+uHnj0szfNy7NFKJSee3PQrXeXzcuzeRV889tq2UqlTbtXnkzYrpcnjuf5ScWz74zsXDh4jOnz06fmjs1d27q2LHDh/YNH5060mWExerrjrSve96f37v7pTeuvjJz4upb33+Z9nd7Vqsxjl4Zq+3dph7vdWN9tqMhXRjqY0foSDo60sNVqo7/kSjGlnrZSLz4UV87B6ypSiWpbGpdfLkC3MXSiTowiPL/6NPr33xbp6nHhnD9eNTXMW5mW61kKJKsTim7RloLYxFx4vI/n6VbLF2HSNaoSQBgwF07HhFPN5v/JXFfQ73/ZfeGRiPi/xGxMyLuiYhdEXFvRLXu/RHxQIft336HZPn8szJyR4GtUjr/ey67t7V0/leffo0Ws9yOavylwsnT5bmD2T45EKVNaX6yTRvfvPDTJ63KGud/6Za2n88Fs378MbRkga5x1t696x9G7BlqFn+hPudN58e7I2JPq7/k1/ZtnH7yi72tylaOv40eTMorn0c8UTv+l+O2+HOFlvcnJ589OnVkYnOU5w5O5GfFcj/8eOXVVu13FX8PXL9Wia1Nz/96/KOFzRELFy6eqd6vXei8jSu/fNzymrLz8z9idnpxerjwejU9nL333vTi4vnJiOHCy8vfn7r12Tyf10/P/wP7m4//nXFrTzwYEelJvC8iHoqIh7O+PxIRj0bE/jbxf/f8Y293Hn+bVfkeSuOfXen4R+Px7zxRPPPtV53Hn0uP/+Fq6kD2Tnr8V4prtR3sZt8BAADAf0VSfQa+kIzX00kyPl57hn9XbE3K8wuLT52cf/fcbO1Z+dEoJflK10jDeuhktjac56duyx/K1o0/LW6p5sdn5suz/Q4eBty2FuM/9Xux370D1pzva8HgMv5hcBn/MLjS8f/bsX73AuiDtX3CGtjQms3/P+hDP4D1t8L1/5b16gew/qz/weAy/mFwGf8wkFp+Nz7p6iv/En1KfD3c3W81rD4RyQYJ+a5JlKJp0dCqf8ziDhObmhb1+18mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//4KU6IQ=") syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d0000ffe40000090400000202002b0009"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800a6e86aa200000000000000000000f6604b26", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x0, 0x13, r7, 0x0) [ 63.955898][ T3674] loop3: detected capacity change from 0 to 128 [ 64.293798][ T3613] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.703936][ T3613] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 64.750792][ T3613] usb 4-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 64.802796][ T3613] usb 4-1: config 255 has no interfaces? [ 64.838014][ T3613] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 64.883056][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.198425][ T27] audit: type=1800 audit(1716834478.634:2): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048586 res=0 errno=0 [ 65.284039][ T3613] usb 4-1: string descriptor 0 read error: -71 [ 65.300945][ T3613] usb 4-1: USB disconnect, device number 2 executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)=ANY=[], 0x12, 0xa07, &(0x7f0000000d40)="$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") ioctl$BLKFLSBUF(r0, 0x1261, 0x0) [ 65.908952][ T3676] loop3: detected capacity change from 0 to 1764 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)) executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 66.246642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 66.683014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000001e00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x200002d0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) close(r2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x258, &(0x7f0000001140)="$eJzs3E9rI3UYB/DHtm7/LLvpQQQF8Yde9DJs6wuQILsgFpS6EfUgzNqpho5JyYRKRNy9efV1LB71JLi+gV68effWi+BlD2KkabpN1oIgG6c2nw8k84RfvuQZZhKeCSRH73/z2d5ule3m/VhYSbEQcS8eRqwfV2NPjbcLo/pKTLoXr179/ZcX3v3gw7eaW1s3t1O61bz92mZK6fqLP37+5bcv/dS/+t53139YjsP1j45+2/z18NnD547+vP1pu0rtKnW6/ZSnO91uP79TFmmnXe1lKb1TFnlVpHanKnpT67tld39/kPLOzrW1/V5RVSnvDNJeMUj9bur3Bin/JG93UpZl6dpa8E9a97e382bdXTAzS8d3vV4zX4yI1b8tt+7X0RQAUK+LPf8fTy3m/9kx/8+D4/l/bfz+nWb+BwAAAAAAAAAAAACA/4OHw2FjOBw2Trent+WIWImI08d198lsOP7zbeKHeysR5dcHrYPWyfZkvbkb7SijiBvRiD9G58PYSX3rza2bN9LIejwo747zdw9ai9P5jWjE+vn5jZN8igffL57ln461yfxmNOKZ8/Obj/KTr38lXnl5Ip9FI37+OLpRxs7ovD7Lf7WR0htvbz2WXx09DwAAAC6DLD1y7vV7lk2vL49z/+L7gceur5fi+aX69hsAAADmSTX4Yi8vy6KnuITF6xFxAdpQTBYrT/qgrMYsWq37kwkAAHjSzob+ujsBAAAAAAAAAAAAAAAAAACA+fVf/OFZ3fsIAAAAAAAAAAAAAAAAAAAAAAAAF8VfAQAA//+gfid7") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d0000ffe40000090400000202002b0009"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800a6e86aa200000000000000000000f6604b26", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x0, 0x13, r7, 0x0) [ 68.426212][ T3696] loop3: detected capacity change from 0 to 128 [ 68.733703][ T3615] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.109006][ T3615] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 69.148820][ T3615] usb 4-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 69.195148][ T3615] usb 4-1: config 255 has no interfaces? [ 69.219933][ T3615] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 69.261702][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.547080][ T27] audit: type=1800 audit(1716834482.984:3): pid=3696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048588 res=0 errno=0 [ 69.684311][ T3615] usb 4-1: string descriptor 0 read error: -71 [ 69.699248][ T3615] usb 4-1: USB disconnect, device number 3 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) close(r2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x258, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d0000ffe40000090400000202002b0009"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800a6e86aa200000000000000000000f6604b26", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x0, 0x13, r7, 0x0) [ 70.311227][ T3698] loop3: detected capacity change from 0 to 128 [ 70.683783][ T935] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.054585][ T935] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 71.086513][ T935] usb 4-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 71.123742][ T935] usb 4-1: config 255 has no interfaces? [ 71.139553][ T935] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 71.165428][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.295140][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301672][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.427264][ T27] audit: type=1800 audit(1716834484.864:4): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 71.543791][ T935] usb 4-1: string descriptor 0 read error: -71 [ 71.559680][ T935] usb 4-1: USB disconnect, device number 4 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flistxattr(r0, 0x0, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x0, 0x0, &(0x7f0000000080)) executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbf, &(0x7f0000000040), &(0x7f0000000080)=0x4) executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x6) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001020000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r5, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r2}, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x13b, 0xfffffffffffffff9}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) executing program 3: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000440), 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1868, 0x0, 0x0, &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRES32=0x41424344], 0x4e) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300)={0x1, "8f"}, 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x6, @dev}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001002dbd70000000000000000000", @ANYRES32=r3], 0x20}}, 0x0) [ 76.137521][ T3727] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 76.410412][ T14] cfg80211: failed to load regulatory.db executing program 4: r0 = socket(0x23, 0x2, 0x0) getpeername$l2tp6(r0, 0x0, &(0x7f00000000c0)) [ 93.333892][ T3583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.342613][ T3583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.350360][ T3583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.358477][ T3583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.366167][ T3583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.377087][ T3583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.444229][ T3583] Bluetooth: hci5: command tx timeout [ 97.523620][ T3583] Bluetooth: hci5: command tx timeout [ 99.603765][ T3583] Bluetooth: hci5: command tx timeout [ 101.683666][ T3583] Bluetooth: hci5: command tx timeout executing program 3: syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64697363617264000000000089bd4700"/30], 0x1, 0xedb, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) creat(&(0x7f0000001d80)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 106.387231][ T3581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.396160][ T3581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.405084][ T3581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.413626][ T3581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.424122][ T3581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.431476][ T3581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.484088][ T3581] Bluetooth: hci6: command tx timeout [ 110.563685][ T3581] Bluetooth: hci6: command tx timeout [ 112.643646][ T3581] Bluetooth: hci6: command tx timeout [ 114.723682][ T3581] Bluetooth: hci6: command tx timeout [ 120.366523][ T3583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.376139][ T3583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.384580][ T3583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.392781][ T3583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.400530][ T3583] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.407840][ T3583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.438938][ T3581] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 120.448923][ T3581] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 120.461744][ T3581] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 120.469651][ T3581] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 120.478048][ T3581] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 120.486582][ T47] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 120.487082][ T3581] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 120.501802][ T47] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 120.502780][ T3581] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 120.535053][ T3583] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 120.543107][ T3583] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 120.551093][ T3583] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 122.486033][ T3583] Bluetooth: hci7: command tx timeout [ 122.563690][ T3583] Bluetooth: hci9: command tx timeout [ 122.574245][ T3583] Bluetooth: hci8: command tx timeout [ 124.563884][ T3583] Bluetooth: hci7: command tx timeout [ 124.643716][ T3583] Bluetooth: hci8: command tx timeout [ 124.643725][ T3579] Bluetooth: hci9: command tx timeout [ 126.643642][ T3579] Bluetooth: hci7: command tx timeout [ 126.723701][ T3579] Bluetooth: hci9: command tx timeout [ 126.723709][ T3583] Bluetooth: hci8: command tx timeout [ 128.723702][ T3583] Bluetooth: hci7: command tx timeout [ 128.803822][ T3583] Bluetooth: hci8: command tx timeout [ 128.809403][ T3583] Bluetooth: hci9: command tx timeout [ 132.726211][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.732556][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.404517][ T47] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 158.413922][ T47] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 158.421947][ T47] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 158.430492][ T47] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 158.439508][ T47] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 158.447285][ T47] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 160.484565][ T47] Bluetooth: hci10: command tx timeout [ 162.564003][ T47] Bluetooth: hci10: command tx timeout [ 164.644156][ T47] Bluetooth: hci10: command tx timeout [ 166.723764][ T47] Bluetooth: hci10: command tx timeout [ 171.481672][ T47] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 171.490700][ T47] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 171.499133][ T47] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 171.507082][ T47] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 171.515916][ T47] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 171.523268][ T47] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 173.603894][ T3583] Bluetooth: hci11: command tx timeout [ 175.683648][ T3583] Bluetooth: hci11: command tx timeout [ 177.763792][ T3583] Bluetooth: hci11: command tx timeout [ 179.843658][ T3568] Bluetooth: hci11: command tx timeout [ 180.893736][ T3583] Bluetooth: hci1: command 0x0406 tx timeout [ 180.893758][ T3581] Bluetooth: hci2: command 0x0406 tx timeout [ 180.893790][ T3581] Bluetooth: hci0: command 0x0406 tx timeout [ 180.899771][ T3583] Bluetooth: hci3: command 0x0406 tx timeout [ 180.905864][ T3579] Bluetooth: hci4: command 0x0406 tx timeout [ 185.397409][ T3581] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 185.409742][ T3581] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 185.418849][ T3581] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 185.434464][ T3581] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 185.442330][ T3581] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 185.450383][ T3581] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 185.486371][ T3581] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 185.497087][ T3581] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 185.505234][ T3581] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 185.514366][ T3581] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 185.524637][ T3581] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 185.531995][ T3581] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 185.549541][ T3581] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 185.570108][ T3581] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 185.578228][ T3581] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 185.586309][ T3581] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 185.594640][ T3581] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 185.601986][ T3581] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 187.524059][ T3583] Bluetooth: hci12: command tx timeout [ 187.603744][ T3583] Bluetooth: hci13: command tx timeout [ 187.683668][ T3583] Bluetooth: hci14: command tx timeout [ 189.603725][ T3583] Bluetooth: hci12: command tx timeout [ 189.684308][ T3583] Bluetooth: hci13: command tx timeout [ 189.763781][ T3583] Bluetooth: hci14: command tx timeout [ 191.683975][ T3583] Bluetooth: hci12: command tx timeout [ 191.763717][ T3583] Bluetooth: hci13: command tx timeout [ 191.843642][ T3583] Bluetooth: hci14: command tx timeout [ 193.764152][ T3583] Bluetooth: hci12: command tx timeout [ 193.843644][ T3583] Bluetooth: hci13: command tx timeout [ 193.923804][ T3583] Bluetooth: hci14: command tx timeout [ 194.183986][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.190974][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.563904][ T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 216.571728][ T28] Not tainted 6.1.92-syzkaller #0 2024/05/27 18:30:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 216.606579][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.650482][ T28] task:kworker/1:0 state:D stack:23576 pid:22 ppid:2 flags:0x00004000 [ 216.683895][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 216.689981][ T28] Call Trace: [ 216.693264][ T28] [ 216.713239][ T28] __schedule+0x142d/0x4550 [ 216.723698][ T3583] Bluetooth: hci5: command 0x0406 tx timeout [ 216.735681][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.741648][ T28] ? __sched_text_start+0x8/0x8 [ 216.775741][ T28] ? print_irqtrace_events+0x210/0x210 [ 216.781282][ T28] schedule+0xbf/0x180 [ 216.812395][ T28] schedule_preempt_disabled+0xf/0x20 [ 216.845225][ T28] __mutex_lock+0x6b9/0xd80 [ 216.849798][ T28] ? __mutex_lock+0x53c/0xd80 [ 216.881463][ T28] ? addrconf_dad_work+0xcc/0x16b0 [ 216.889814][ T28] ? mutex_lock_nested+0x10/0x10 [ 216.906001][ T28] addrconf_dad_work+0xcc/0x16b0 [ 216.910994][ T28] ? read_lock_is_recursive+0x10/0x10 [ 216.932572][ T28] ? ipv6_get_saddr_eval+0xe90/0xe90 [ 216.950941][ T28] ? print_irqtrace_events+0x210/0x210 [ 216.963299][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.977527][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.982879][ T28] ? process_one_work+0x7a9/0x11d0 [ 217.001950][ T28] process_one_work+0x8a9/0x11d0 [ 217.010248][ T28] ? worker_detach_from_pool+0x260/0x260 [ 217.019283][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 217.027376][ T28] ? kthread_data+0x4e/0xc0 [ 217.031914][ T28] ? wq_worker_running+0x97/0x190 [ 217.040486][ T28] worker_thread+0xa47/0x1200 [ 217.047740][ T28] ? __sched_text_start+0x8/0x8 [ 217.052656][ T28] kthread+0x28d/0x320 [ 217.062