last executing test programs: 8.857239128s ago: executing program 4 (id=605): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000000)=[{r0, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfeff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x200400c0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0x7440, &(0x7f0000000540)={0x0, 0xe85f, 0x8000, 0x3, 0x14c}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r4 = syz_io_uring_setup(0x66b2, &(0x7f0000000200)={0x0, 0x3b02, 0x800, 0x80000, 0x1bd, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000006c0)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) shmget(0x2, 0x1000, 0x80, &(0x7f00001a8000/0x1000)=nil) capset(&(0x7f0000000340)={0x39900612, 0xffffffffffffffff}, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x0, 0x1, 0x7}) open_tree(0xffffffffffffff9c, 0x0, 0x902) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000080)={0x2c, 0x9, r7, 0xc, r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 8.372002644s ago: executing program 1 (id=609): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 8.068935763s ago: executing program 3 (id=610): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x1, 0x9, 0x0, [@private0]}}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x348}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.802989911s ago: executing program 4 (id=611): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) tkill(r0, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x40) 7.473138272s ago: executing program 1 (id=613): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000440)={[{@uni_xlateno}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@shortname_mixed}, {@fat=@check_normal}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8no}, {@shortname_lower}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") 7.235115909s ago: executing program 4 (id=614): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0xff98, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.192058951s ago: executing program 0 (id=615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000004000)={@random="ea577c93883d", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x66, 0x0, 0x2, 0x11, 0x0, @broadcast, @multicast2}, {0x4e23, 0x4e24, 0x8}}}}}, 0x0) 6.945448359s ago: executing program 1 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ef5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a29459aff1374df5c49ca11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc006b340658342d2d9e06008c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e9dffd8918de33aed5bb09cb2a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf422b7473c24b93085c51e02af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee127ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c435c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fceea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfe089e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cf594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9776f89c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba26bb91d7b1b98f11fb7a77b03206c151b00015305af815f7da19872085b503a21cbe722842c26ad8dd6b83018300000000000000000000f4ffffffffffffff000000000000000000000000000000000000798d011c62dbfdbad9e58e07d371e3a2399f2369631138ad4fb3aeb3f51233922b4c700fb163efbc55c912276685a774f2dce9bb9c54fd1f505eccf06323fad86c37adafb5e80b96ba9f925a6fd57de5fedf691e8b41c9835a840d12a224ed233c93ed92603401e5a61298294e9cab078c231121d4e32fb8286478fb12f5804d13c7bcff5dcffccd1d520dc04910239efc397b7736682e1c0ef0d001c17ec1441026ed4b1395b8e88a58d667a65cec1ddee1b30bcc96652a238c990a2701e2ee0915335fa4b8c33372bd00021f17c012451519ad56594c9469f164bb915edb1fd4ce76fb37bb9512632e9c9e7dcc772128c280c6e6cc0e859bd65c666e8b7732a2c2d517af56f4cde502f364922f3c2bbf9f4ced5c6f3d33428775b7399e6c6cf52bc8d5b48079700db251c7cdad3836c1e137b11917cff00e0ecc5e93fd7e8bdd83313a27197651c92f2f9be4a6f83662fa948c46632a979e8c66d22777a06601c5f5d3ab28b9f9e39543d2bb9de6ce57a6c1c3a635a0515c87abd11988cae405b9495f54b8d89503a8c9e96bdf08eb563e4cffe00e27272ca6e392ffca16b172ce8b6ee542ec9135e969b7b029beaeba12836110fcb686d82c066d0fc67fee8a00acda99a302a7aac9e920e34174323e7c6aeefd0a092545274fb164f21ac2f46849a6d0b51ad5a230a5ffab7a66e7dde5a335aeaa9736678319f344a32c99ac748bf200368963de24c237873ff5a01f14335de9a6d06c8b49ff27ddf0f13d5fe0901355765c397ce52791339d666eec141f0d33ca51f7b8aa6e9937631269b064d9c7323df8b7154f76708b912e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c"], 0xffdd) 6.725802956s ago: executing program 0 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xb, 0xf, 0x0, 0xd6f, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x800, 0x80000001, 0x9, 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.539944852s ago: executing program 3 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000840)) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r7, 0x8028c003, &(0x7f0000000800)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004003}, 0x4) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) 6.385537876s ago: executing program 2 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x74) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x10000000}) 6.142146024s ago: executing program 2 (id=620): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, 0x0) tkill(r0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x40) 5.493022035s ago: executing program 2 (id=621): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000000)=[{r0, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfeff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x200400c0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0x7440, &(0x7f0000000540)={0x0, 0xe85f, 0x8000, 0x3, 0x14c}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r4 = syz_io_uring_setup(0x66b2, &(0x7f0000000200)={0x0, 0x3b02, 0x800, 0x80000, 0x1bd, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000006c0)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) shmget(0x2, 0x1000, 0x80, &(0x7f00001a8000/0x1000)=nil) capset(&(0x7f0000000340)={0x39900612, 0xffffffffffffffff}, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x0, 0x1, 0x7}) open_tree(0xffffffffffffff9c, 0x0, 0x902) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000080)={0x2c, 0x9, r7, 0xc, r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x110, 0x330, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@multicast1, @rand_addr=0x64010100, 0xff, 0xffffffff, 0x7, 0x3, {@mac=@random="b85391192d27", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x7ff, 0x2, 0x7fff, 0x9, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x227}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @broadcast, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0xff, 0xffffff00, 0x8, 0xa, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x21, 0xa, 0x62, 0x4005, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x2c8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @rand_addr=0x64010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 2.978069375s ago: executing program 1 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) 2.909690877s ago: executing program 2 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e23, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x40]}}, 0x5c) 2.840262589s ago: executing program 4 (id=624): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000300000000000014001280090001007663616e00000000040002800800", @ANYRES32=r5], 0x3c}}, 0x884) 2.825599s ago: executing program 0 (id=625): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) tkill(r0, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000f0900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008064000180600002800900020073797a300000000008000180fffffffb08000180fffffffe08000180a18e0b200900020073797a32000000000900020073797a31000000000900020073797a31005995ca9eb6ca9b0000000900020073797a32000000000800034000000001140000001100010000000000000000000100000a"], 0xfc}}, 0x40) 2.390531694s ago: executing program 3 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)="e09afa", 0x0}, 0x50) 2.247963018s ago: executing program 3 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000004000)={@random="ea577c93883d", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x66, 0x0, 0x2, 0x11, 0x0, @broadcast, @multicast2}, {0x4e23, 0x4e24, 0x8}}}}}, 0x0) 1.405074055s ago: executing program 1 (id=628): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2c8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.195458962s ago: executing program 3 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0xf, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfdf1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x201, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.194112942s ago: executing program 4 (id=630): set_mempolicy(0x1, 0x0, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.126058464s ago: executing program 2 (id=631): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, 0x0) tkill(r0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x40) 925.428181ms ago: executing program 0 (id=632): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 805.015244ms ago: executing program 4 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c"], 0xffdd) 641.234969ms ago: executing program 2 (id=634): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0xff98, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 595.391261ms ago: executing program 1 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xb, 0xf, 0x0, 0xd6f, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x800, 0x80000001, 0x9, 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 452.700856ms ago: executing program 0 (id=636): unshare(0x20000400) r0 = open(&(0x7f0000000140)='.\x00', 0x741841, 0x112) getdents(r0, 0x0, 0x0) 164.970175ms ago: executing program 3 (id=637): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x2ea, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_create(0x11ffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_clone3(0x0, 0x0) tgkill(r4, r4, 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r5, 0xa931) ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000000180)={&(0x7f0000000080)="c23edfc2a81666dad50564d10fca081b", 0x10}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$setperm(0x5, r5, 0x180400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 0 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. syzkaller login: [ 77.438538][ T4262] cgroup: Unknown subsys name 'net' [ 77.579152][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.097260][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.134449][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.137699][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.145168][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.153398][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.157613][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.166673][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.172903][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.178957][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.191875][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.193489][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.201117][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.207896][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.214400][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.221983][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.227552][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.238343][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.242676][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.252631][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.257115][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.264066][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.270608][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.278707][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.286695][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.292032][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.298879][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.307841][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.313397][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.350936][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.360141][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.400626][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.792407][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 81.905416][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.914788][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.923893][ T4285] device bridge_slave_0 entered promiscuous mode [ 81.935837][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.943465][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.951751][ T4285] device bridge_slave_1 entered promiscuous mode [ 81.981613][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.994571][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.029968][ T4285] team0: Port device team_slave_0 added [ 82.036232][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 82.055491][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 82.066912][ T4285] team0: Port device team_slave_1 added [ 82.093451][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 82.120703][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.127739][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.153915][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.184465][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 82.195278][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.203745][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.231359][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.376746][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.384102][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.393085][ T4277] device bridge_slave_0 entered promiscuous mode [ 82.411751][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.419043][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.427040][ T4287] device bridge_slave_0 entered promiscuous mode [ 82.439253][ T4285] device hsr_slave_0 entered promiscuous mode [ 82.447187][ T4285] device hsr_slave_1 entered promiscuous mode [ 82.455627][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.463154][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.471340][ T4277] device bridge_slave_1 entered promiscuous mode [ 82.480021][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.487305][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.495732][ T4276] device bridge_slave_0 entered promiscuous mode [ 82.507500][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.514790][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.523626][ T4287] device bridge_slave_1 entered promiscuous mode [ 82.544210][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.551337][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.559780][ T4276] device bridge_slave_1 entered promiscuous mode [ 82.598290][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.605931][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.614061][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.646036][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.660110][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.667475][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.676319][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.691891][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.704183][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.721289][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.762605][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.779116][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.804346][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.821686][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.833509][ T4287] team0: Port device team_slave_0 added [ 82.843033][ T4277] team0: Port device team_slave_0 added [ 82.855546][ T4287] team0: Port device team_slave_1 added [ 82.879495][ T4277] team0: Port device team_slave_1 added [ 82.935338][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.942421][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.969143][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.981512][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.988899][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.015360][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.035754][ T4276] team0: Port device team_slave_0 added [ 83.044452][ T4275] team0: Port device team_slave_0 added [ 83.052386][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.059385][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.088971][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.101113][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.111658][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.138312][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.157257][ T4276] team0: Port device team_slave_1 added [ 83.165133][ T4275] team0: Port device team_slave_1 added [ 83.245701][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.253288][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.281754][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.302579][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.309585][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.340501][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.360993][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.369190][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.396186][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.407626][ T4295] Bluetooth: hci2: command 0x0409 tx timeout [ 83.418621][ T4277] device hsr_slave_0 entered promiscuous mode [ 83.425836][ T4277] device hsr_slave_1 entered promiscuous mode [ 83.432537][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.440392][ T4277] Cannot create hsr debugfs directory [ 83.452984][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.459967][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.483241][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 83.486681][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.492890][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 83.502752][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 83.510838][ T4295] Bluetooth: hci3: command 0x0409 tx timeout [ 83.529008][ T4287] device hsr_slave_0 entered promiscuous mode [ 83.535848][ T4287] device hsr_slave_1 entered promiscuous mode [ 83.542575][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.550266][ T4287] Cannot create hsr debugfs directory [ 83.618392][ T4275] device hsr_slave_0 entered promiscuous mode [ 83.625244][ T4275] device hsr_slave_1 entered promiscuous mode [ 83.631739][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.639848][ T4275] Cannot create hsr debugfs directory [ 83.715020][ T4276] device hsr_slave_0 entered promiscuous mode [ 83.721789][ T4276] device hsr_slave_1 entered promiscuous mode [ 83.729233][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.736892][ T4276] Cannot create hsr debugfs directory [ 83.744919][ T4285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.759495][ T4285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.806672][ T4285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.860096][ T4285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.055693][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.098044][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.135203][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.157828][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.216777][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.226058][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.255709][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.265556][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.314737][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.359932][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.375082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.386480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.397633][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.435339][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.447107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.457116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.468758][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.476108][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.487547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.501050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.515628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.527671][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.534954][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.552978][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.563871][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.613217][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.624507][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.634871][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.649956][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.677003][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.700480][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.710293][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.719734][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.730616][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.755315][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.775363][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.786016][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.798083][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.810086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.819568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.828882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.839474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.848911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.857689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.866852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.906012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.918542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.929931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.942026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.956808][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.974771][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.994101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.019508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.029494][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.036697][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.050999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.063579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.080948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.097983][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.105176][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.154276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.171313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.184700][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.191834][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.200695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.209839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.220967][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.228154][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.237855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.247413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.257667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.297680][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.314756][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.331263][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.349162][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.366152][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.390604][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.408429][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.421294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.437594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.450077][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.464893][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.482774][ T4295] Bluetooth: hci2: command 0x041b tx timeout [ 85.499579][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.512028][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.534787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.544467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.560039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.568757][ T4295] Bluetooth: hci3: command 0x041b tx timeout [ 85.569939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.575493][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 85.575525][ T4293] Bluetooth: hci1: command 0x041b tx timeout [ 85.575552][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 85.614021][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.639232][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.653325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.661210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.679772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.690609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.704724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.716986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.725921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.750791][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.782272][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.790232][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.801622][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.810299][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.818089][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.827689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.836537][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.843715][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.853608][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.862837][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.871579][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.878798][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.887671][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.905038][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.917334][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.933228][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.950099][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.958222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.967525][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.979251][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.989865][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.999074][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.006238][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.015451][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.024732][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.033891][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.041000][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.098775][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.115467][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.143410][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.164251][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.183159][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.193070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.213919][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.224468][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.263122][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.285452][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.308725][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.328400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.338805][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.354217][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.369189][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.379693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.389019][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.399266][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.408475][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.417691][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.431787][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.448397][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.470729][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.483733][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.507863][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.516467][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.533097][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.543051][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.551681][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.560593][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.569841][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.625623][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.635342][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.699568][ T4285] device veth0_vlan entered promiscuous mode [ 86.728162][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.752679][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.761389][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.785311][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.838199][ T4285] device veth1_vlan entered promiscuous mode [ 86.855286][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.866148][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.891612][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.909542][ T4275] device veth0_vlan entered promiscuous mode [ 86.930863][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.953905][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.973344][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.016335][ T4275] device veth1_vlan entered promiscuous mode [ 87.029300][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.051975][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.072814][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.093549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.112608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.141865][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.153359][ T4285] device veth0_macvtap entered promiscuous mode [ 87.217675][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.243148][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.277437][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.299218][ T4285] device veth1_macvtap entered promiscuous mode [ 87.336133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.353368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.382276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.391008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.412362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.421465][ T4275] device veth0_macvtap entered promiscuous mode [ 87.446868][ T4275] device veth1_macvtap entered promiscuous mode [ 87.468954][ T4277] device veth0_vlan entered promiscuous mode [ 87.487190][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.510081][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.521783][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.530717][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.546569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.559023][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.569615][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 87.585659][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.622560][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.644204][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 87.650278][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 87.657075][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 87.663229][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 87.680593][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.693249][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.705015][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.719452][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.729952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.740176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.749146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.758400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.767370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.776277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.787111][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.812169][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.824937][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.844266][ T4277] device veth1_vlan entered promiscuous mode [ 87.854608][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.864473][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.873280][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.882030][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.899982][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.910109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.918840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.945072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.963393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.982403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.991409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.007118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.017696][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.027413][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.036677][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.049438][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.076420][ T4276] device veth0_vlan entered promiscuous mode [ 88.104956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.115005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.125745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.137012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.145652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.208316][ T4276] device veth1_vlan entered promiscuous mode [ 88.247266][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.258271][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.309101][ T4277] device veth0_macvtap entered promiscuous mode [ 88.358344][ T4277] device veth1_macvtap entered promiscuous mode [ 88.383181][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.411727][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.412175][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.444831][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.455551][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.466681][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.479526][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.504051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.516230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.525311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.535916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.553638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.564201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.573804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.584977][ T4276] device veth0_macvtap entered promiscuous mode [ 88.603108][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.610990][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.628482][ T4276] device veth1_macvtap entered promiscuous mode [ 88.653545][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.674269][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.685465][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.697096][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.708884][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.716728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.731212][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.739905][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.748980][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.759612][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.779804][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.792178][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.803348][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.814097][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.824136][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.834986][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.847518][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.860333][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.873598][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.887651][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.895139][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904125][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912984][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.926513][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.939475][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.950869][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.969630][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.981861][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.995981][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.009456][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.025441][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.038444][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.056399][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.082872][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.103437][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.126542][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.138632][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.151395][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.177987][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.187448][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.204221][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.215696][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.360519][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.377361][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.471108][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.484838][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.500640][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.509442][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.536768][ T4287] device veth0_vlan entered promiscuous mode [ 89.554777][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.566314][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.579931][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.610575][ T4287] device veth1_vlan entered promiscuous mode [ 89.625090][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.645771][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 89.648722][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.699269][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.708387][ T3598] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.724042][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 89.730195][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 89.735854][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.741125][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 89.744561][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 89.774631][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.774637][ T4374] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.809797][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.824045][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.832241][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.876908][ T4287] device veth0_macvtap entered promiscuous mode [ 89.897389][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.935012][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.956381][ T3598] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 89.956818][ T4287] device veth1_macvtap entered promiscuous mode [ 89.982888][ T3598] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.008245][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.017075][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.030419][ T3598] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.034335][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.047834][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.058747][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.066366][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.075869][ T3598] usb 1-1: Product: syz [ 90.080153][ T3598] usb 1-1: Manufacturer: syz [ 90.096291][ T3598] usb 1-1: SerialNumber: syz [ 90.145735][ T3598] rtl8150 1-1:1.0: couldn't find required endpoints [ 90.153096][ T3598] rtl8150: probe of 1-1:1.0 failed with error -5 [ 90.226153][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.238637][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.250541][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.261283][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.271390][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.282012][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.300059][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.310807][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.325394][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.338455][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.365812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.405097][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.422381][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.438497][ T3598] usb 1-1: USB disconnect, device number 2 [ 90.450883][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.467081][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.481123][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.492161][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.506651][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.541960][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.564234][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.576832][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.590951][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.654409][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.671923][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.690732][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.701383][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.887595][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.917933][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.985279][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.017521][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.051328][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.093581][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.102732][ T3598] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.298165][ T3598] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.318886][ T3598] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 91.349079][ T3598] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.373336][ T3598] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 91.383957][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.392519][ T3598] usb 3-1: Product: syz [ 91.396973][ T3598] usb 3-1: Manufacturer: syz [ 91.401679][ T3598] usb 3-1: SerialNumber: syz [ 91.422575][ T4389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.436097][ T4389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.804879][ T27] cfg80211: failed to load regulatory.db [ 91.937962][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 91.942587][ T4264] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.154299][ T4264] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.168082][ T4264] usb 2-1: config 0 has no interface number 0 [ 92.185792][ T4264] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.199128][ T4264] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.213659][ T4264] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.227398][ T4264] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 92.238198][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.253385][ T4264] usb 2-1: config 0 descriptor?? [ 92.432256][ T4330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.494300][ T3598] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 92.634339][ T4330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.667437][ T4330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.733659][ T3598] usb 3-1: USB disconnect, device number 2 [ 92.743161][ T4330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.782157][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.800571][ T4330] usb 4-1: Product: syz [ 92.810754][ T4330] usb 4-1: Manufacturer: syz [ 92.831115][ T4330] usb 4-1: SerialNumber: syz [ 92.867087][ T4330] cdc_mbim 4-1:1.0: skipping garbage [ 92.909050][ T4264] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0001/input/input5 [ 93.007557][ T4264] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0001/input/input6 [ 93.059953][ T4264] uclogic 0003:28BD:0042.0001: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 93.127038][ T7] usb 2-1: USB disconnect, device number 2 [ 93.402839][ T4295] Bluetooth: hci5: command 0x1003 tx timeout [ 93.402865][ T4293] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 93.503150][ T4436] loop2: detected capacity change from 0 to 136 [ 93.588481][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.649558][ T4436] Attempt to read inode for relocated directory [ 93.701576][ T4436] syz.2.20: attempt to access beyond end of device [ 93.701576][ T4436] loop2: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 93.749737][ T4442] Invalid ELF header type: 2 != 1 [ 93.779395][ T4436] syz.2.20: attempt to access beyond end of device [ 93.779395][ T4436] loop2: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 93.821428][ T26] audit: type=1800 audit(1778951855.312:2): pid=4436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.20" name="file1" dev="loop2" ino=1487 res=0 errno=0 [ 93.921750][ T4330] cdc_mbim 4-1:1.0: bind() failure [ 93.957706][ T4330] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 93.983828][ T4330] cdc_ncm 4-1:1.1: bind() failure [ 94.158714][ T4330] usb 4-1: USB disconnect, device number 2 [ 95.182251][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.384567][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.409120][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.455762][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.485699][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.514533][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.534927][ T27] usb 4-1: config 0 descriptor?? [ 95.551647][ T4500] loop0: detected capacity change from 0 to 512 [ 95.579027][ T4500] EXT4-fs: Ignoring removed nobh option [ 95.622796][ T4500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.656646][ T4500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.719904][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 95.732561][ T4500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.802903][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.908624][ T4285] EXT4-fs (loop0): unmounting filesystem. [ 95.955019][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.992501][ T4264] usb 3-1: Using ep0 maxpacket: 8 [ 96.003230][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.017196][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.058859][ T4264] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.092663][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.128536][ T4264] usb 3-1: config 0 descriptor?? [ 96.366687][ T4264] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 96.387411][ T4522] loop4: detected capacity change from 0 to 256 [ 96.438355][ T4522] FAT-fs (loop4): Directory bread(block 1285) failed [ 96.474128][ T4522] FAT-fs (loop4): Directory bread(block 1286) failed [ 96.520043][ T4522] FAT-fs (loop4): Directory bread(block 1287) failed [ 96.540400][ T4522] FAT-fs (loop4): Directory bread(block 1288) failed [ 96.641668][ T4522] FAT-fs (loop4): Directory bread(block 1285) failed [ 96.688567][ T4522] FAT-fs (loop4): Directory bread(block 1286) failed [ 96.704926][ T4522] FAT-fs (loop4): Directory bread(block 1287) failed [ 96.733087][ T4522] FAT-fs (loop4): Directory bread(block 1288) failed [ 96.756800][ T4522] FAT-fs (loop4): Directory bread(block 1285) failed [ 96.780586][ T4522] FAT-fs (loop4): Directory bread(block 1286) failed [ 97.055673][ T4536] loop4: detected capacity change from 0 to 512 [ 97.180804][ T4536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.248074][ T4536] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.334434][ T4330] usb 3-1: USB disconnect, device number 3 [ 97.387753][ T4537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 97.422512][ T27] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 97.533674][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 97.676249][ T4550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.49'. [ 98.052222][ T22] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.257326][ T22] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 98.266411][ T4264] usb 4-1: USB disconnect, device number 3 [ 98.293407][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 98.344779][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 98.384344][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.414356][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.426421][ T4563] netlink: 'syz.4.54': attribute type 2 has an invalid length. [ 98.444491][ T4563] netlink: 151 bytes leftover after parsing attributes in process `syz.4.54'. [ 98.453825][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.679427][ T22] usb 3-1: GET_CAPABILITIES returned 0 [ 98.685215][ T22] usbtmc 3-1:16.0: can't read capabilities [ 98.889676][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 98.900103][ T4553] usbtmc 3-1:16.0: Unable to send data, error -71 [ 99.154791][ T4572] loop3: detected capacity change from 0 to 1024 [ 99.177065][ T4572] ======================================================= [ 99.177065][ T4572] WARNING: The mand mount option has been deprecated and [ 99.177065][ T4572] and is ignored by this kernel. Remove the mand [ 99.177065][ T4572] option from the mount to silence this warning. [ 99.177065][ T4572] ======================================================= [ 99.455484][ T4572] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.57: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.510054][ T4575] device syzkaller0 entered promiscuous mode [ 99.541508][ T4572] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 99.623217][ T4572] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.57: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.655656][ T4572] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 99.669975][ T4572] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.57: Failed to acquire dquot type 0 [ 99.698645][ T4572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 99.718718][ T4572] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.57: mark_inode_dirty error [ 99.745768][ T4572] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 99.763973][ T4572] EXT4-fs (loop3): 1 orphan inode deleted [ 99.777289][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.797472][ T4340] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.869904][ T4340] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 99.907245][ T4340] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 100.011719][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 100.034816][ T1223] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.055543][ T1223] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 100.078522][ T1223] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 100.099725][ T4276] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 100.135121][ T4276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 100.160015][ T4276] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 100.406681][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 100.839247][ T26] audit: type=1804 audit(1778951862.332:3): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.63" name="/newroot/14/file0" dev="fuse" ino=1 res=1 errno=0 [ 100.860084][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.196143][ T22] usb 3-1: USB disconnect, device number 4 [ 101.869049][ T4601] loop3: detected capacity change from 0 to 164 [ 102.347967][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'. [ 103.652307][ T4330] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.876580][ T4330] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 103.896964][ T4330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 103.942505][ T4330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 103.967465][ T4646] binder: 4645:4646 ioctl c0306201 0 returned -14 [ 103.997589][ T4330] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.053447][ T4330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.091076][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.371118][ T4330] usb 5-1: GET_CAPABILITIES returned 0 [ 104.376880][ T4330] usbtmc 5-1:16.0: can't read capabilities [ 104.424483][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.588511][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 104.598416][ T4649] usbtmc 5-1:16.0: Unable to send data, error -71 [ 104.616718][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 104.640342][ T126] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 104.648698][ T126] usb 4-1: config 0 has no interface number 0 [ 104.667644][ T126] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 104.680424][ T126] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.698599][ T126] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.716053][ T126] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 104.725408][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.733730][ T126] usb 4-1: Product: syz [ 104.738129][ T126] usb 4-1: Manufacturer: syz [ 104.743248][ T126] usb 4-1: SerialNumber: syz [ 104.750527][ T126] usb 4-1: config 0 descriptor?? [ 104.756702][ T4648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.959797][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 104.982432][ T4640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 104.999250][ T126] usb-storage 4-1:0.20: USB Mass Storage device detected [ 105.026225][ T4640] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.035389][ T4640] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.044331][ T4640] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.053136][ T4640] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.079666][ T126] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 105.105567][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 105.114478][ T4640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 105.124137][ T4640] Zero length message leads to an empty skb [ 105.239158][ T126] scsi host1: usb-storage 4-1:0.20 [ 105.295526][ T4657] loop1: detected capacity change from 0 to 512 [ 105.340918][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.442328][ T126] usb 4-1: USB disconnect, device number 4 [ 105.501142][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 105.594899][ T4667] [U]  [ 105.688060][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 105.904025][ T4678] binder: 4677:4678 ioctl c0306201 0 returned -14 [ 106.171085][ T4682] device syzkaller0 entered promiscuous mode [ 106.399114][ T4325] usb 5-1: USB disconnect, device number 2 [ 107.136661][ T4718] binder: 4716:4718 ioctl c0306201 0 returned -14 [ 107.187233][ T4719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 107.389471][ T4724] loop3: detected capacity change from 0 to 512 [ 107.501403][ T4724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.108: inode #1: comm syz.3.108: iget: illegal inode # [ 107.614947][ T4724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.108: error while reading EA inode 1 err=-117 [ 107.669522][ T4724] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.731083][ T4724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.108: inode #1: comm syz.3.108: iget: illegal inode # [ 107.763766][ T4724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.108: error while reading EA inode 1 err=-117 [ 107.836639][ T4724] EXT4-fs (loop3): 1 orphan inode deleted [ 107.852200][ T4724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.982230][ T4724] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.108: invalid indirect mapped block 234881024 (level 0) [ 108.148100][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 108.348758][ T4729] [U]  [ 110.511157][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 110.868456][ T4735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'. [ 110.977731][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 111.090322][ T27] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 111.284024][ T27] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 111.320611][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 111.349125][ T4753] binder: BINDER_SET_CONTEXT_MGR already set [ 111.362241][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 111.386489][ T4753] binder: 4752:4753 ioctl 4018620d 200000000040 returned -16 [ 111.399749][ T4756] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 111.407429][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.437609][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.449618][ T4756] loop0: detected capacity change from 0 to 764 [ 111.456463][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.750449][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 111.756181][ T27] usbtmc 2-1:16.0: can't read capabilities [ 111.959539][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.969494][ T4740] usbtmc 2-1:16.0: Unable to send data, error -71 [ 111.980275][ T4767] device syzkaller0 entered promiscuous mode [ 114.192100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.202110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 114.222088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 114.242088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 114.262085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 114.282083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 114.312099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 114.332087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 114.352085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 114.372084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 114.455189][ T4330] usb 2-1: USB disconnect, device number 3 [ 114.947680][ T4787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 115.522981][ T4797] fuse: Unknown parameter 'fd0x0000000000000004' [ 117.926553][ T4829] fuse: Unknown parameter 'fd0x0000000000000004' [ 118.064973][ T4835] serio: Serial port ptm0 [ 118.441695][ T4325] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 118.629921][ T4325] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 118.654953][ T4325] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 118.671649][ T4325] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 118.692604][ T4325] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.731245][ T4325] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.748364][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.979683][ T4325] usb 5-1: GET_CAPABILITIES returned 0 [ 118.985474][ T4325] usbtmc 5-1:16.0: can't read capabilities [ 119.189223][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.200578][ T4825] usbtmc 5-1:16.0: Unable to send data, error -71 [ 119.637490][ T4866] device syzkaller0 entered promiscuous mode [ 120.170000][ T4874] fuse: Unknown parameter 'fd0x0000000000000004' [ 120.941208][ T4330] usb 5-1: USB disconnect, device number 3 [ 122.941176][ T4907] loop2: detected capacity change from 0 to 764 [ 124.070741][ T4891] device vcan1 entered promiscuous mode [ 124.135580][ C0] hrtimer: interrupt took 1207340 ns [ 124.722222][ T4264] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 124.945059][ T4264] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 124.967296][ T4264] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 125.011750][ T4936] loop2: detected capacity change from 0 to 256 [ 125.025209][ T26] audit: type=1326 audit(1778951886.522:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.1.170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eabd9ce59 code=0x0 [ 125.051657][ T4264] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 125.165539][ T4264] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.279001][ T4264] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.321906][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.627534][ T4264] usb 1-1: GET_CAPABILITIES returned 0 [ 125.633689][ T4264] usbtmc 1-1:16.0: can't read capabilities [ 125.838064][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 125.849618][ T4925] usbtmc 1-1:16.0: Unable to send data, error -71 [ 126.329705][ T4950] device vcan1 entered promiscuous mode [ 127.284976][ T4958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 127.313152][ T4957] loop2: detected capacity change from 0 to 764 [ 127.586812][ T4330] usb 1-1: USB disconnect, device number 3 [ 128.452809][ T26] audit: type=1326 audit(1778951889.942:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ed99ce59 code=0x0 [ 129.037677][ T4982] device vcan1 entered promiscuous mode [ 129.406532][ T4986] loop4: detected capacity change from 0 to 764 [ 129.728002][ T4264] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 129.912386][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.962932][ T4264] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 129.971134][ T4264] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 130.030661][ T4264] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 130.062248][ T4264] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.082187][ T22] usb 4-1: device descriptor read/64, error -71 [ 130.110987][ T4264] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.172178][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.352168][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.524998][ T4264] usb 3-1: GET_CAPABILITIES returned 0 [ 130.535335][ T4264] usbtmc 3-1:16.0: can't read capabilities [ 130.618876][ T22] usb 4-1: device descriptor read/64, error -71 [ 130.728140][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.738589][ T4988] usbtmc 3-1:16.0: Unable to send data, error -71 [ 130.753089][ T22] usb usb4-port1: attempt power cycle [ 131.162315][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.212872][ T22] usb 4-1: device descriptor read/8, error -71 [ 131.482156][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.523932][ T22] usb 4-1: device descriptor read/8, error -71 [ 131.642478][ T22] usb usb4-port1: unable to enumerate USB device [ 131.770903][ T5017] tipc: Enabling of bearer rejected, failed to enable media [ 132.469851][ T4264] usb 3-1: USB disconnect, device number 5 [ 132.765959][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772760][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114575][ T26] audit: type=1326 audit(1778951894.612:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.3.200" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x0 [ 133.611527][ T5044] loop1: detected capacity change from 0 to 764 [ 134.003480][ T5049] process 'syz.1.205' launched './file0' with NULL argv: empty string added [ 134.122884][ T5049] Invalid argument reading file caps for ./file0 [ 134.465117][ T5060] tipc: Enabling of bearer rejected, failed to enable media [ 134.519644][ T5062] Illegal XDP return value 1403125804 on prog (id 7) dev syz_tun, expect packet loss! [ 134.692157][ T126] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 134.742169][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.884481][ T126] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 134.902254][ T22] usb 5-1: device descriptor read/64, error -71 [ 134.911066][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 134.973431][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 135.065869][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.151892][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.172252][ T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.206231][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.231407][ T5074] device vcan1 entered promiscuous mode [ 135.333103][ T22] usb 5-1: device descriptor read/64, error -71 [ 135.452345][ T22] usb usb5-port1: attempt power cycle [ 135.492602][ T126] usb 3-1: GET_CAPABILITIES returned 0 [ 135.502519][ T126] usbtmc 3-1:16.0: can't read capabilities [ 135.702209][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 135.711805][ T5056] usbtmc 3-1:16.0: Unable to send data, error -71 [ 135.882813][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.932977][ T22] usb 5-1: device descriptor read/8, error -71 [ 136.222181][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.282905][ T22] usb 5-1: device descriptor read/8, error -71 [ 136.412383][ T22] usb usb5-port1: unable to enumerate USB device [ 136.551640][ T5085] loop3: detected capacity change from 0 to 764 [ 137.539080][ T126] usb 3-1: USB disconnect, device number 6 [ 138.388998][ T5102] device syzkaller0 entered promiscuous mode [ 138.457588][ T5104] tipc: Enabling of bearer rejected, failed to enable media [ 139.762295][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 139.892433][ T5127] loop2: detected capacity change from 0 to 764 [ 140.822261][ T26] audit: type=1326 audit(1778951902.312:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.1.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eabd9ce59 code=0x7fc00000 [ 143.022465][ T27] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 143.225415][ T27] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 143.252383][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 143.327162][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 143.430939][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.454534][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.481236][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.774537][ T27] usb 5-1: GET_CAPABILITIES returned 0 [ 143.780126][ T27] usbtmc 5-1:16.0: can't read capabilities [ 143.988842][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 143.998338][ T5135] usbtmc 5-1:16.0: Unable to send data, error -71 [ 144.169600][ T5154] device syzkaller0 entered promiscuous mode [ 144.501619][ T5161] tipc: Started in network mode [ 144.525839][ T5161] tipc: Node identity 6e96e940a12d, cluster identity 4711 [ 144.572752][ T5161] tipc: Enabled bearer , priority 0 [ 144.674647][ T5161] tipc: Resetting bearer [ 144.785357][ T5160] tipc: Disabling bearer [ 145.304352][ T27] usb 5-1: USB disconnect, device number 8 [ 146.172359][ T4330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.392337][ T4330] usb 4-1: Using ep0 maxpacket: 8 [ 146.400473][ T4330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.420621][ T4330] usb 4-1: config 0 has no interfaces? [ 146.531381][ T4330] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.777905][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.950008][ T4330] usb 4-1: config 0 descriptor?? [ 147.617974][ T5229] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 148.164691][ T26] audit: type=1804 audit(1778951909.662:8): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.249" name="/newroot/46/file0" dev="fuse" ino=1 res=1 errno=0 [ 148.410488][ T5266] device syzkaller0 entered promiscuous mode [ 148.798532][ T5270] tipc: Started in network mode [ 148.838053][ T5270] tipc: Node identity 1e54db6afeca, cluster identity 4711 [ 148.887920][ T5270] tipc: Enabled bearer , priority 0 [ 149.030514][ T7] usb 4-1: USB disconnect, device number 9 [ 149.265754][ T5268] tipc: Disabling bearer [ 149.692374][ T7] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 149.934051][ T7] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 149.949840][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 149.972975][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 150.036908][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.098736][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.480586][ T26] audit: type=1326 audit(1778951913.962:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5281 comm="syz.4.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f499ce59 code=0x7fc00000 [ 152.513457][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.051299][ T7] usb 4-1: can't set config #16, error -71 [ 153.105164][ T7] usb 4-1: USB disconnect, device number 10 [ 155.232249][ T26] audit: type=1804 audit(1778951916.722:10): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.261" name="/newroot/45/file0" dev="fuse" ino=1 res=1 errno=0 [ 155.393918][ T5343] device syzkaller0 entered promiscuous mode [ 155.892130][ T126] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.272183][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 156.279289][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.419495][ T126] usb 5-1: config 0 has no interfaces? [ 156.448914][ T126] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.481421][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.532208][ T126] usb 5-1: config 0 descriptor?? [ 156.703038][ T4328] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 157.334334][ T4328] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 157.391792][ T4328] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 157.423031][ T5361] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 157.480980][ T4328] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 157.535547][ T4328] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.824862][ T4328] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.870430][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.070357][ T5371] loop0: detected capacity change from 0 to 4096 [ 158.078683][ T5371] EXT4-fs: Ignoring removed bh option [ 162.461352][ T5371] EXT4-fs: failed to create workqueue [ 162.466888][ T5371] EXT4-fs (loop0): mount failed [ 163.242394][ T4328] usb 3-1: usb_control_msg returned -110 [ 163.248128][ T4328] usbtmc 3-1:16.0: can't read capabilities [ 163.844229][ T126] usb 3-1: USB disconnect, device number 7 [ 164.256130][ T7] usb 5-1: USB disconnect, device number 9 [ 164.839679][ T26] audit: type=1804 audit(1778951926.322:11): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.276" name="/newroot/52/file0" dev="fuse" ino=1 res=1 errno=0 [ 166.158762][ T5436] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.214455][ T5436] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 166.642264][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.815514][ T7] usb 1-1: device descriptor read/64, error -71 [ 166.837200][ T5446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.283'. [ 166.873483][ T5443] device syzkaller0 entered promiscuous mode [ 167.112301][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.282246][ T7] usb 1-1: device descriptor read/64, error -71 [ 167.412537][ T7] usb usb1-port1: attempt power cycle [ 167.843414][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.902429][ T4366] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.905174][ T7] usb 1-1: device descriptor read/8, error -71 [ 168.092299][ T4366] usb 4-1: Using ep0 maxpacket: 8 [ 168.099504][ T4366] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.166420][ T4366] usb 4-1: config 0 has no interfaces? [ 168.186946][ T4366] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.221386][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.242481][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.288712][ T4366] usb 4-1: config 0 descriptor?? [ 168.313253][ T7] usb 1-1: device descriptor read/8, error -71 [ 168.423409][ T26] audit: type=1804 audit(1778951929.922:12): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.288" name="/newroot/56/file0" dev="fuse" ino=1 res=1 errno=0 [ 168.462749][ T7] usb usb1-port1: unable to enumerate USB device [ 174.476348][ T5465] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 174.892346][ T4330] usb 4-1: USB disconnect, device number 11 [ 175.502157][ T26] audit: type=1804 audit(1778951936.992:13): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.299" name="/newroot/59/file0" dev="fuse" ino=1 res=1 errno=0 [ 175.890406][ T5512] loop2: detected capacity change from 0 to 512 [ 176.059246][ T5512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.305: inode #1: comm syz.2.305: iget: illegal inode # [ 176.133476][ T5512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.305: error while reading EA inode 1 err=-117 [ 176.213296][ T5512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.305: inode #1: comm syz.2.305: iget: illegal inode # [ 176.284830][ T5512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.305: error while reading EA inode 1 err=-117 [ 176.302620][ T4366] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.392815][ T5512] EXT4-fs (loop2): 1 orphan inode deleted [ 176.399593][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.487839][ T4366] usb 2-1: device descriptor read/64, error -71 [ 176.706978][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 176.762348][ T4366] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.842287][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.922819][ T4366] usb 2-1: device descriptor read/64, error -71 [ 176.993261][ T5525] device syzkaller0 entered promiscuous mode [ 177.032205][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 177.039164][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.049690][ T4366] usb usb2-port1: attempt power cycle [ 177.116931][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.143932][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.176194][ T27] usb 1-1: config 0 descriptor?? [ 177.210908][ T27] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 177.462195][ T4366] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.502925][ T4366] usb 2-1: device descriptor read/8, error -71 [ 177.578624][ T5537] loop3: detected capacity change from 0 to 512 [ 177.686979][ T5537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.312: inode #1: comm syz.3.312: iget: illegal inode # [ 177.732697][ T5537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.312: error while reading EA inode 1 err=-117 [ 177.747481][ T5537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.312: inode #1: comm syz.3.312: iget: illegal inode # [ 177.761256][ T5537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.312: error while reading EA inode 1 err=-117 [ 177.776350][ T5537] EXT4-fs (loop3): 1 orphan inode deleted [ 177.782385][ T4366] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.790112][ T5537] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.831174][ T4366] usb 2-1: device descriptor read/8, error -71 [ 177.962834][ T4366] usb usb2-port1: unable to enumerate USB device [ 178.014575][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 178.368128][ T26] audit: type=1804 audit(1778951939.862:14): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.314" name="/newroot/61/file0" dev="fuse" ino=1 res=1 errno=0 [ 182.476419][ T5539] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 182.892697][ T14] usb 1-1: USB disconnect, device number 8 [ 183.202132][ T26] audit: type=1804 audit(1778951944.652:15): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.327" name="/newroot/65/file0" dev="fuse" ino=1 res=1 errno=0 [ 184.321279][ T4330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.525708][ T4330] usb 1-1: no configurations [ 184.537519][ T4330] usb 1-1: can't read configurations, error -22 [ 184.722228][ T4330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.368832][ T5632] device syzkaller0 entered promiscuous mode [ 185.562677][ T4330] usb 1-1: no configurations [ 185.567613][ T4330] usb 1-1: can't read configurations, error -22 [ 185.574916][ T4330] usb usb1-port1: attempt power cycle [ 185.812148][ T4325] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.992133][ T4330] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.042184][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 186.062606][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.093484][ T4330] usb 1-1: device descriptor read/8, error -71 [ 186.112197][ T4325] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.153145][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.196910][ T4325] usb 2-1: config 0 descriptor?? [ 186.234510][ T4325] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 188.804609][ T5657] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 189.159847][ T4330] usb 2-1: USB disconnect, device number 8 [ 189.268550][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 190.786674][ T5701] device bond1 entered promiscuous mode [ 190.852135][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.891446][ T5704] device syzkaller0 entered promiscuous mode [ 191.052849][ T126] usb 2-1: no configurations [ 191.057527][ T126] usb 2-1: can't read configurations, error -22 [ 191.155214][ T4328] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.238567][ T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.352450][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 191.371537][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.391462][ T4328] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.410506][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.442794][ T4328] usb 4-1: config 0 descriptor?? [ 191.476750][ T126] usb 2-1: no configurations [ 191.481945][ T126] usb 2-1: can't read configurations, error -22 [ 191.491217][ T4328] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 191.521463][ T126] usb usb2-port1: attempt power cycle [ 191.992205][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.047149][ T126] usb 2-1: no configurations [ 192.051857][ T126] usb 2-1: can't read configurations, error -22 [ 192.212206][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.269124][ T126] usb 2-1: no configurations [ 192.274121][ T126] usb 2-1: can't read configurations, error -22 [ 192.336404][ T126] usb usb2-port1: unable to enumerate USB device [ 193.367664][ T5713] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 194.262885][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269658][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.693995][ T4325] usb 4-1: USB disconnect, device number 12 [ 195.028283][ T5746] device syzkaller0 entered promiscuous mode [ 197.382132][ T4328] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.587731][ T4328] usb 4-1: no configurations [ 197.592648][ T4328] usb 4-1: can't read configurations, error -22 [ 197.756558][ T4328] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 197.955881][ T4328] usb 4-1: no configurations [ 197.960696][ T4328] usb 4-1: can't read configurations, error -22 [ 197.978434][ T4328] usb usb4-port1: attempt power cycle [ 198.397478][ T4328] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.450319][ T4328] usb 4-1: no configurations [ 198.456015][ T4328] usb 4-1: can't read configurations, error -22 [ 198.612291][ T4328] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.654695][ T4328] usb 4-1: no configurations [ 198.660501][ T4328] usb 4-1: can't read configurations, error -22 [ 198.686824][ T4328] usb usb4-port1: unable to enumerate USB device [ 200.042143][ T4328] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.159881][ T5803] loop3: detected capacity change from 0 to 136 [ 200.209949][ T5803] Attempt to read inode for relocated directory [ 200.233396][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 200.241022][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.254135][ T5803] syz.3.382: attempt to access beyond end of device [ 200.254135][ T5803] loop3: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 200.285510][ T4328] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.313402][ T4328] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.319957][ T5803] syz.3.382: attempt to access beyond end of device [ 200.319957][ T5803] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 200.336680][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.359619][ T4328] usb 1-1: config 0 descriptor?? [ 200.376438][ T26] audit: type=1800 audit(1778951961.872:16): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.382" name="file1" dev="loop3" ino=1487 res=0 errno=0 [ 200.410037][ T4328] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 200.796508][ T5812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 201.012815][ T5824] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 201.760346][ T26] audit: type=1326 audit(1778951963.252:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.4.386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f499ce59 code=0x7fc00000 [ 202.750079][ T26] audit: type=1326 audit(1778951964.242:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x0 [ 202.925119][ T4325] usb 1-1: USB disconnect, device number 13 [ 202.935530][ T5842] device syzkaller0 entered promiscuous mode [ 206.010530][ T5863] device vcan2 entered promiscuous mode [ 206.537673][ T4295] Bluetooth: hci1: command 0x0406 tx timeout [ 206.537698][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 206.544195][ T4295] Bluetooth: hci0: command 0x0406 tx timeout [ 206.544227][ T4295] Bluetooth: hci4: command 0x0406 tx timeout [ 206.544256][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 206.628847][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 208.679439][ T26] audit: type=1326 audit(1778951970.172:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.1.406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eabd9ce59 code=0x0 [ 208.913288][ T126] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 209.112156][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 209.119858][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.158030][ T5910] device syzkaller0 entered promiscuous mode [ 209.164433][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.198043][ T126] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.225152][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.251945][ T126] usb 5-1: config 0 descriptor?? [ 209.272799][ T126] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 212.155877][ T5916] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 212.198039][ T5917] device vcan2 entered promiscuous mode [ 212.298372][ T4365] usb 5-1: USB disconnect, device number 10 [ 212.755273][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 213.612346][ T26] audit: type=1326 audit(1778951975.112:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x0 [ 215.082556][ T4328] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.292375][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 215.305118][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.331011][ T4328] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.379053][ T4328] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.399378][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.456552][ T4328] usb 4-1: config 0 descriptor?? [ 215.499075][ T4328] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 215.641665][ T5972] device syzkaller0 entered promiscuous mode [ 216.211050][ T5977] device bond1 entered promiscuous mode [ 216.257340][ T5980] device vcan1 entered promiscuous mode [ 216.296014][ T5980] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 216.334209][ T5980] bond1: (slave vcan1): Error -95 calling set_mac_address [ 216.379562][ T5981] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 217.819020][ T14] usb 4-1: USB disconnect, device number 17 [ 219.076810][ T26] audit: type=1326 audit(1778951980.562:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x0 [ 221.222294][ T4365] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.443708][ T4365] usb 1-1: Using ep0 maxpacket: 8 [ 221.472900][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.515537][ T4365] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.558537][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.636090][ T4365] usb 1-1: config 0 descriptor?? [ 221.673807][ T4365] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 221.681408][ T6059] device syzkaller0 entered promiscuous mode [ 221.838961][ T26] audit: type=1326 audit(1778951983.312:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a1dd9ce59 code=0x0 [ 222.257171][ T6064] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 223.099562][ T6073] device bond1 entered promiscuous mode [ 223.179474][ T6078] device vcan2 entered promiscuous mode [ 223.646807][ T6084] device syzkaller0 entered promiscuous mode [ 224.297822][ T126] usb 1-1: USB disconnect, device number 14 [ 225.226316][ T26] audit: type=1326 audit(1778951986.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.4.458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f499ce59 code=0x0 [ 232.802424][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.022183][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 233.034134][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.133967][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.233031][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.340272][ T14] usb 1-1: config 0 descriptor?? [ 233.370675][ T14] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 233.602261][ T26] audit: type=1326 audit(1778951995.092:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.1.470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eabd9ce59 code=0x0 [ 234.165941][ T6170] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 234.436028][ T26] audit: type=1326 audit(1778951995.932:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.3.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x7fc00000 [ 234.732048][ C0] sched: RT throttling activated [ 235.278777][ T6173] device syzkaller0 entered promiscuous mode [ 235.961474][ T4328] usb 1-1: USB disconnect, device number 15 [ 236.144433][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 236.302154][ T7] usb 3-1: device descriptor read/64, error -71 [ 236.572979][ T7] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 236.732220][ T7] usb 3-1: device descriptor read/64, error -71 [ 236.852288][ T7] usb usb3-port1: attempt power cycle [ 237.266311][ T7] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 237.317272][ T7] usb 3-1: device descriptor read/8, error -71 [ 237.613179][ T7] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 237.679890][ T7] usb 3-1: device descriptor read/8, error -71 [ 237.808695][ T7] usb usb3-port1: unable to enumerate USB device [ 238.976971][ T6210] netlink: 324 bytes leftover after parsing attributes in process `syz.2.478'. [ 241.078471][ T26] audit: type=1326 audit(1778952002.452:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x0 [ 241.188649][ T6226] loop1: detected capacity change from 0 to 256 [ 241.502140][ T4330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.712184][ T4330] usb 3-1: Using ep0 maxpacket: 8 [ 241.719985][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.754133][ T6240] netlink: 324 bytes leftover after parsing attributes in process `syz.1.489'. [ 241.793903][ T4330] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.831775][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.903989][ T4330] usb 3-1: config 0 descriptor?? [ 241.957389][ T4330] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 242.234988][ T6248] loop4: detected capacity change from 0 to 512 [ 242.432226][ T26] audit: type=1326 audit(1778952003.842:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.3.488" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50039ce59 code=0x7fc00000 [ 242.552949][ T6251] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 242.657787][ T6248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.492: inode #1: comm syz.4.492: iget: illegal inode # [ 242.688521][ T6248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.492: error while reading EA inode 1 err=-117 [ 242.718607][ T6248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.492: inode #1: comm syz.4.492: iget: illegal inode # [ 242.744050][ T6256] device syzkaller0 entered promiscuous mode [ 242.750641][ T6248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.492: error while reading EA inode 1 err=-117 [ 242.773471][ T6248] EXT4-fs (loop4): 1 orphan inode deleted [ 242.779584][ T6248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.967112][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 245.515269][ T14] usb 3-1: USB disconnect, device number 12 [ 246.583096][ T26] audit: type=1326 audit(1778952008.052:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f499ce59 code=0x7fc00000 [ 248.334128][ T26] audit: type=1326 audit(1778952009.512:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.0.498" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ed99ce59 code=0x0 [ 248.357464][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.396583][ T6339] loop4: detected capacity change from 0 to 512 [ 252.479574][ T6339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.505: inode #1: comm syz.4.505: iget: illegal inode # [ 252.722122][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 253.219706][ T26] audit: type=1326 audit(1778952014.712:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.1.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eabd9ce59 code=0x7fc00000 [ 254.599749][ T6339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.505: error while reading EA inode 1 err=-117 [ 254.696869][ T6339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.505: inode #1: comm syz.4.505: iget: illegal inode # [ 254.760430][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 254.767842][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.810444][ T6339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.505: error while reading EA inode 1 err=-117 [ 254.851402][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.885795][ T6339] EXT4-fs (loop4): 1 orphan inode deleted [ 254.891647][ T6339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.920492][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.985178][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.646382][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652899][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.707577][ T26] audit: type=1326 audit(1778952017.202:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.2.509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1dd9ce59 code=0x7fc00000 [ 255.834008][ T7] usb 1-1: config 0 descriptor?? [ 257.280213][ T7] usb 1-1: can't set config #0, error -71 [ 257.303425][ T7] usb 1-1: USB disconnect, device number 16 [ 257.541564][ T6364] device bond2 entered promiscuous mode [ 257.643411][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 257.651402][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 257.732233][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 259.844039][ T6392] tipc: Enabling of bearer rejected, failed to enable media [ 260.006781][ T6397] [U]  [ 260.025768][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 260.741527][ T6408] netlink: 324 bytes leftover after parsing attributes in process `syz.0.521'. [ 260.898864][ T6410] loop0: detected capacity change from 0 to 512 [ 260.959239][ T6410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.522: inode #1: comm syz.0.522: iget: illegal inode # [ 260.996975][ T6410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.522: error while reading EA inode 1 err=-117 [ 261.038767][ T6410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.522: inode #1: comm syz.0.522: iget: illegal inode # [ 261.058949][ T6410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.522: error while reading EA inode 1 err=-117 [ 261.077932][ T6410] EXT4-fs (loop0): 1 orphan inode deleted [ 261.084114][ T6410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 261.230538][ T4285] EXT4-fs (loop0): unmounting filesystem. [ 262.738011][ T4325] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 262.784428][ T6420] device bond2 entered promiscuous mode [ 262.830937][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 262.867930][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 262.881338][ T6420] device vcan1 entered promiscuous mode [ 262.945877][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 262.959800][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.984754][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.999248][ T4325] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.020081][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.064236][ T4325] usb 1-1: config 0 descriptor?? [ 263.306021][ T4325] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 263.582886][ T6415] iowarrior 1-1:0.0: Error -90 while submitting URB [ 263.650033][ T6415] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 264.316505][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 264.328261][ T6435] device syzkaller0 entered promiscuous mode [ 265.015397][ T4324] usb 1-1: USB disconnect, device number 17 [ 265.042189][ T4328] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 265.245879][ T4328] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 265.272519][ T4328] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 265.378666][ T4328] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 265.395837][ T26] audit: type=1804 audit(1778952026.852:32): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.533" name="/newroot/104/file0" dev="fuse" ino=1 res=1 errno=0 [ 268.437647][ T4328] usb 3-1: config 16 has no interface number 0 [ 268.445022][ T4328] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 268.458964][ T4328] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 268.475467][ T4328] usb 3-1: config 16 interface 48 has no altsetting 0 [ 268.487713][ T4328] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.529664][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.602741][ T4328] usb 3-1: can't set config #16, error -71 [ 268.633280][ T4328] usb 3-1: USB disconnect, device number 13 [ 269.145799][ T6489] device bond2 entered promiscuous mode [ 269.279842][ T6490] device syzkaller0 entered promiscuous mode [ 269.290944][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 269.330159][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 269.371132][ T6493] device vcan3 entered promiscuous mode [ 270.128653][ T4325] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 270.342991][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 270.364391][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.382809][ T6511] fuse: Bad value for 'fd' [ 270.388666][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.410034][ T4325] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.431243][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.458152][ T4325] usb 1-1: config 0 descriptor?? [ 270.790471][ T4325] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 270.961746][ T6519] netlink: 316 bytes leftover after parsing attributes in process `syz.1.547'. [ 271.103393][ T6508] iowarrior 1-1:0.0: Error -90 while submitting URB [ 271.204037][ T4328] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 271.408647][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 271.439512][ T4328] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 271.460623][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.500989][ T4328] usb 5-1: Product: syz [ 271.526878][ T4328] usb 5-1: Manufacturer: syz [ 271.547654][ T4328] usb 5-1: SerialNumber: syz [ 271.560791][ T4328] usb 5-1: config 0 descriptor?? [ 271.581746][ T6517] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 271.595360][ T4328] hub 5-1:0.0: bad descriptor, ignoring hub [ 271.613066][ T4328] hub: probe of 5-1:0.0 failed with error -5 [ 271.639075][ T4328] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 271.744829][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 272.311498][ T126] usb 5-1: USB disconnect, device number 11 [ 275.581480][ T6508] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 275.947641][ T27] usb 1-1: USB disconnect, device number 18 [ 276.775963][ T26] audit: type=1804 audit(1778952038.272:33): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.557" name="/newroot/96/file0" dev="fuse" ino=1 res=1 errno=0 [ 277.126784][ T6589] netlink: 316 bytes leftover after parsing attributes in process `syz.4.558'. [ 277.527265][ T6596] device syzkaller0 entered promiscuous mode [ 277.692236][ T27] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 277.896079][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 277.922160][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.945923][ T27] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 277.992851][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.033128][ T27] usb 3-1: Product: syz [ 278.038077][ T27] usb 3-1: Manufacturer: syz [ 278.052105][ T27] usb 3-1: SerialNumber: syz [ 278.096993][ T27] usb 3-1: config 0 descriptor?? [ 278.112305][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 278.120225][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.134354][ T6597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.154962][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 278.161923][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 278.180654][ T27] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 278.181578][ T14] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.257017][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.377363][ T14] usb 2-1: config 0 descriptor?? [ 278.617483][ T14] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 279.022658][ T14] usb 3-1: USB disconnect, device number 14 [ 281.632317][ T6601] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 281.901407][ T27] usb 2-1: USB disconnect, device number 13 [ 282.103084][ T6652] netlink: 324 bytes leftover after parsing attributes in process `syz.1.572'. [ 282.977654][ T26] audit: type=1804 audit(1778952044.472:34): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.575" name="/newroot/114/file0" dev="fuse" ino=1 res=1 errno=0 [ 284.002161][ T4325] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 284.037534][ T6677] device syzkaller0 entered promiscuous mode [ 284.202405][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 284.212296][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 284.254770][ T4325] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 284.308294][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.336331][ T4325] usb 5-1: Product: syz [ 284.348838][ T4325] usb 5-1: Manufacturer: syz [ 284.360776][ T4325] usb 5-1: SerialNumber: syz [ 284.405239][ T4325] usb 5-1: config 0 descriptor?? [ 284.412511][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 284.428673][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.450666][ T6695] tipc: Enabling of bearer rejected, failed to enable media [ 284.460759][ T6674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.474375][ T4325] hub 5-1:0.0: bad descriptor, ignoring hub [ 284.485955][ T4325] hub: probe of 5-1:0.0 failed with error -5 [ 284.493542][ T14] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.531099][ T4325] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 284.540638][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.604714][ T14] usb 2-1: config 0 descriptor?? [ 284.860647][ T14] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.048227][ T6702] netlink: 324 bytes leftover after parsing attributes in process `syz.3.584'. [ 285.133022][ T126] usb 5-1: USB disconnect, device number 12 [ 287.720954][ T6693] device syzkaller0 entered promiscuous mode [ 287.836324][ T6705] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 288.063654][ T7] usb 2-1: USB disconnect, device number 14 [ 289.323157][ T6749] netlink: 324 bytes leftover after parsing attributes in process `syz.2.595'. [ 289.545269][ T6746] device syzkaller0 entered promiscuous mode [ 290.012185][ T126] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 290.067365][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 290.207300][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 290.238404][ T126] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 290.255728][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.265518][ T126] usb 1-1: Product: syz [ 290.270609][ T126] usb 1-1: Manufacturer: syz [ 290.272594][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 290.278039][ T126] usb 1-1: SerialNumber: syz [ 290.294847][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.333139][ T126] usb 1-1: config 0 descriptor?? [ 290.349433][ T6765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.356975][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.384549][ T126] hub 1-1:0.0: bad descriptor, ignoring hub [ 290.410721][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.414273][ T126] hub: probe of 1-1:0.0 failed with error -5 [ 290.450561][ T7] usb 3-1: config 0 descriptor?? [ 290.471682][ T126] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 290.688729][ T7] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 291.041112][ T4330] usb 1-1: USB disconnect, device number 19 [ 291.041383][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 293.134585][ T6793] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 293.404985][ T4328] usb 3-1: USB disconnect, device number 15 [ 294.007618][ T6815] loop1: detected capacity change from 0 to 1024 [ 294.118681][ T6815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.369654][ T6815] EXT4-fs (loop1): unmounting filesystem. [ 294.723806][ T6829] loop1: detected capacity change from 0 to 256 [ 295.392336][ T4328] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 295.533501][ T6848] device syzkaller0 entered promiscuous mode [ 295.585050][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 295.620304][ T4328] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 295.645381][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.655447][ T4328] usb 5-1: Product: syz [ 295.660712][ T4328] usb 5-1: Manufacturer: syz [ 295.666528][ T4328] usb 5-1: SerialNumber: syz [ 295.679654][ T4328] usb 5-1: config 0 descriptor?? [ 295.686996][ T6839] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.715771][ T6847] device syzkaller0 entered promiscuous mode [ 295.745186][ T4328] hub 5-1:0.0: bad descriptor, ignoring hub [ 295.772294][ T4328] hub: probe of 5-1:0.0 failed with error -5 [ 295.796698][ T4328] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 295.993438][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 296.231811][ T27] usb 5-1: USB disconnect, device number 13 [ 296.243302][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 296.250961][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.266776][ T14] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.283149][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.316614][ T14] usb 4-1: config 0 descriptor?? [ 296.538675][ T14] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 298.992231][ T6852] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 299.572789][ T14] usb 4-1: USB disconnect, device number 18 [ 299.901350][ T6880] device bond3 entered promiscuous mode [ 300.663321][ T6881] device vcan2 entered promiscuous mode [ 301.761723][ T6919] device syzkaller0 entered promiscuous mode [ 302.002652][ T27] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 407.141971][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 407.149271][ C0] rcu: 1-...!: (10 ticks this GP) idle=23ec/1/0x4000000000000000 softirq=26722/26722 fqs=0 [ 407.160544][ C0] (detected by 0, t=10506 jiffies, g=37921, q=12 ncpus=2) [ 407.167782][ C0] Sending NMI from CPU 0 to CPUs 1: [ 407.173022][ C1] NMI backtrace for cpu 1 [ 407.173053][ C1] CPU: 1 PID: 6934 Comm: syz.3.637 Not tainted syzkaller #0 [ 407.173070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.173087][ C1] RIP: 0010:check_preemption_disabled+0x1/0x110 [ 407.173122][ C1] Code: 20 a6 bc 8c 4c 89 f6 e8 7d 1e 0b fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 40 1b df 8a 48 c7 c6 80 1b df 8a eb 00 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 407.173135][ C1] RSP: 0000:ffffc900001e0b50 EFLAGS: 00000087 [ 407.173150][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8164d150 [ 407.173161][ C1] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40 [ 407.173173][ C1] RBP: ffffc900001e0c90 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 407.173185][ C1] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000 [ 407.173198][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff9200003c17c [ 407.173209][ C1] FS: 00007fe5012f56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 407.173224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.173236][ C1] CR2: fffffffffffffe70 CR3: 0000000027623000 CR4: 00000000003506e0 [ 407.173250][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.173260][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.173271][ C1] Call Trace: [ 407.173281][ C1] [ 407.173289][ C1] rcu_is_watching+0x11/0xa0 [ 407.173324][ C1] lock_release+0xcf/0x920 [ 407.173359][ C1] ? __hrtimer_run_queues+0x432/0xd50 [ 407.173390][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 407.173420][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 407.173454][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 407.173480][ C1] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 407.173508][ C1] ? _raw_spin_unlock+0x40/0x40 [ 407.173538][ C1] ? timerqueue_del+0xaa/0x100 [ 407.173566][ C1] __hrtimer_run_queues+0x432/0xd50 [ 407.173598][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 407.173638][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 407.173662][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 407.173694][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 407.173722][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 407.173741][ C1] [ 407.173745][ C1] [ 407.173751][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.173774][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 407.173796][ C1] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 0d a4 e4 7f 7e 65 8b 15 a5 e4 7f 7e 81 e2 00 01 ff 00 74 [ 407.173808][ C1] RSP: 0000:ffffc90003f3ece0 EFLAGS: 00000246 [ 407.173821][ C1] RAX: ffffffff81c58d93 RBX: ffffea00014aae80 RCX: dac717808f4c3d00 [ 407.173834][ C1] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.173843][ C1] RBP: 0000000000000001 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 407.173855][ C1] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000 [ 407.173867][ C1] R13: 1ffffd40002955d0 R14: ffff888020dac360 R15: ffffea0001a0ae48 [ 407.173884][ C1] ? page_add_file_rmap+0x903/0x1500 [ 407.173908][ C1] page_add_file_rmap+0x903/0x1500 [ 407.173930][ C1] do_set_pte+0x2f4/0x460 [ 407.173947][ C1] ? PageHeadHuge+0x8f/0x1c0 [ 407.173966][ C1] filemap_map_pages+0xc8b/0x11c0 [ 407.173990][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 407.174020][ C1] ? filemap_map_pages+0x1af/0x11c0 [ 407.174044][ C1] ? filemap_read_folio+0x770/0x770 [ 407.174067][ C1] ? count_memcg_event_mm+0x8a/0x3c0 [ 407.174086][ C1] ? follow_page_pte+0x398/0x16b0 [ 407.174114][ C1] handle_mm_fault+0x2991/0x3ee0 [ 407.174153][ C1] ? numa_migrate_prep+0x250/0x250 [ 407.174180][ C1] __get_user_pages+0x40d/0xec0 [ 407.174209][ C1] ? populate_vma_page_range+0x2b0/0x2b0 [ 407.174233][ C1] ? up_write+0x1bb/0x420 [ 407.174253][ C1] ? get_dump_page+0xe7/0x680 [ 407.174274][ C1] ? down_read_killable+0x1cc/0x340 [ 407.174299][ C1] ? generic_file_write_iter+0x1d9/0x2e0 [ 407.174325][ C1] get_dump_page+0x190/0x680 [ 407.174351][ C1] ? fault_in_readable+0x1f0/0x1f0 [ 407.174376][ C1] ? dump_user_range+0x607/0x850 [ 407.174401][ C1] ? iov_iter_bvec+0x4a/0x1f0 [ 407.174418][ C1] dump_user_range+0x123/0x850 [ 407.174448][ C1] ? dump_skip+0x40/0x40 [ 407.174470][ C1] ? dump_emit+0x74/0xe0 [ 407.174498][ C1] ? dump_emit+0x32/0xe0 [ 407.174521][ C1] ? dump_emit+0xa2/0xe0 [ 407.174542][ C1] ? elf_core_dump+0x2a8b/0x35d0 [ 407.174563][ C1] elf_core_dump+0x30a6/0x35d0 [ 407.174591][ C1] ? load_elf_binary+0x2800/0x2800 [ 407.174614][ C1] ? verify_lock_unused+0x140/0x140 [ 407.174645][ C1] ? mas_next_entry+0xe41/0xed0 [ 407.174685][ C1] ? rcu_read_lock_any_held+0xb0/0x130 [ 407.174706][ C1] ? 0xffffffffff600000 [ 407.174722][ C1] ? getname_kernel+0x142/0x2f0 [ 407.174743][ C1] do_coredump+0x165b/0x22f0 [ 407.174778][ C1] ? nfs_stat_to_errno+0x190/0x190 [ 407.174805][ C1] ? rcu_is_watching+0x11/0xa0 [ 407.174840][ C1] ? _raw_spin_unlock_irq+0x25/0x40 [ 407.174860][ C1] get_signal+0x10aa/0x1350 [ 407.174897][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 407.174922][ C1] ? _raw_spin_unlock+0x40/0x40 [ 407.174944][ C1] ? get_sigframe_size+0x10/0x10 [ 407.174969][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 407.174998][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 407.175025][ C1] exit_to_user_mode_loop+0x70/0x110 [ 407.175050][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 407.175075][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 407.175093][ C1] exc_page_fault+0x88/0x100 [ 407.175112][ C1] asm_exc_page_fault+0x22/0x30 [ 407.175132][ C1] RIP: 0033:0x7fe50039ce61 [ 407.175146][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 407.175159][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 407.175171][ C1] RAX: 0000000000000000 RBX: 00007fe500615fa0 RCX: 00007fe50039ce59 [ 407.175183][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 407.175194][ C1] RBP: 00007fe500432d6f R08: 0000000000000000 R09: 0000000000000000 [ 407.175204][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 407.175213][ C1] R13: 00007fe500616038 R14: 00007fe500615fa0 R15: 00007ffe21451c48 [ 407.175233][ C1] [ 407.176017][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g37921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 407.811518][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 407.821517][ C0] rcu: RCU grace-period kthread stack dump: [ 407.827427][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 ppid:2 flags:0x00004000 [ 407.838245][ C0] Call Trace: [ 407.841557][ C0] [ 407.844527][ C0] __schedule+0x11d1/0x40e0 [ 407.849086][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 407.855019][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 407.860961][ C0] ? __sched_text_start+0x8/0x8 [ 407.865858][ C0] ? __mod_timer+0x91e/0xd00 [ 407.870495][ C0] schedule+0xb9/0x180 [ 407.874609][ C0] schedule_timeout+0x184/0x2d0 [ 407.879497][ C0] ? console_conditional_schedule+0x40/0x40 [ 407.885517][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 407.891540][ C0] ? update_process_times+0x1b0/0x1b0 [ 407.896949][ C0] ? prepare_to_swait_event+0x335/0x350 [ 407.902545][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 407.907436][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 407.912342][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 407.918365][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 407.923164][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 407.928067][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 407.933738][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 407.938986][ C0] rcu_gp_kthread+0x99/0x3b0 [ 407.943612][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 407.948761][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 407.954719][ C0] ? __kthread_parkme+0x162/0x1c0 [ 407.959810][ C0] kthread+0x29d/0x330 [ 407.963916][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 407.969069][ C0] ? kthread_blkcg+0xd0/0xd0 [ 407.973692][ C0] ret_from_fork+0x1f/0x30 [ 407.978358][ C0] [ 407.981407][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 407.987754][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 407.994808][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.004901][ C0] RIP: 0010:default_idle+0xb/0x10 [ 408.009961][ C0] Code: 48 89 df e8 d7 a4 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 ba 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 408.029612][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 408.035738][ C0] RAX: a7f358165e130000 RBX: ffffffff8a37f307 RCX: a7f358165e130000 [ 408.043742][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 408.051760][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 408.059769][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 408.067774][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 408.075901][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 408.085123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.091835][ C0] CR2: 000000110c3ebfbb CR3: 000000007c650000 CR4: 00000000003506f0 [ 408.099845][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.107860][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.115865][ C0] Call Trace: [ 408.119261][ C0] [ 408.122228][ C0] default_idle_call+0x84/0xc0 [ 408.127033][ C0] do_idle+0x250/0x680 [ 408.131152][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 408.136391][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 408.141894][ C0] ? asm_sysvec_error_interrupt+0x11/0x20 [ 408.147669][ C0] ? schedule_idle+0x57/0x90 [ 408.152478][ C0] cpu_startup_entry+0x3f/0x60 [ 408.157294][ C0] rest_init+0x2dc/0x300 [ 408.161662][ C0] ? time_init+0x33/0x33 [ 408.165957][ C0] arch_call_rest_init+0xa/0xa [ 408.170856][ C0] start_kernel+0x493/0x53c [ 408.175404][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 408.181350][ C0] [ 408.184774][ C0] vkms_vblank_simulate: vblank timer overrun