last executing test programs: 3m10.372161221s ago: executing program 4 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) 3m9.365149863s ago: executing program 4 (id=213): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x1b, 0x80000000, 0xc, 0x7, 0x0, 0x81}) 3m8.912606177s ago: executing program 4 (id=216): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x2, 0xc9, 0x0, 0x7197}}}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x42dc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) 3m7.698113586s ago: executing program 4 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB='8\x00-'], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 3m6.858846602s ago: executing program 4 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x44802) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) 3m5.389207369s ago: executing program 4 (id=224): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7aa, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x3, 0x3, 0x1}) 3m1.409204845s ago: executing program 1 (id=238): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffdfff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m1.279568069s ago: executing program 1 (id=239): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) pidfd_send_signal(r4, 0x23, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x3}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r5, 0xfffffe4d}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001070006"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="bca142dd3401f96279745ab50ec6", 0xe}, {&(0x7f0000000600)="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", 0x14d}, {&(0x7f0000001400)="2f8e2b8da714466c24beb39410a9f6e780c85b04af1879ee17e2f39b3b8e9a4c9caf455801d283fae9d6c2919bd6032b5cc357bcc998910cd464ad56c22e3f87ea60f30c37a6f9a3470f6de99f773b2a79eef87b1163d530a98b0078009edcb0e099a93accd64ee53d0678cb329a4dcebf51dc87668979edb6ae9e8a3ff75a2b4daed7774e61e49d62370db51a98c6c61c0ae19c9fcd0840c7534d44f181808cd368c904f524c169b33a045890bad23e38e66a8bf1fc6fbb14670deea0ebd334dad68838b67c0300e3936c2ae7f41827ad2d460a9d7505551d3964870f0d188b949ee3e34ce87032cb7a5ba88a7e81713fa916816d4a7abe", 0xf8}, {&(0x7f00000011c0)="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", 0x10e}, {&(0x7f0000000500)="acf8876e33729eb78266d63375c30f05731eae130269ef53bc792b7aada2a2df052cb62e46033f9c8f63372a10b2ab2a1a45e0c77a8ba6a995d1e592a8ad3d1add34b94b93a087ac788fdc581d6e460c5d260c5b92e297e09062f46644a6f824abe5c0454407f956bf651ff83786cf15a365f4fb9f945b254931f74e59d1ed3aa99c27345cf747cf86e4d3cefc8a49097b401459e216009f4bbe082bf839db686dd5c6719bc9bcb6bae3f11545bfe7ca1ace05b9d78d8b3b9af4df3c688720fce9c09a6e00000000000000000000ca86b3f00b2467b5f486c67f274204fcacd8", 0xe0}, {&(0x7f0000000800)="95507ac442e3f29751625a536c6bdf1e1f78d77e474968b768f2e253deafc7", 0x1f}, {&(0x7f0000000240)="45591f9060b8982314918f4da7122c78f89b3b68abe986153c15ef5c9409ce55", 0x20}], 0x7) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x221000d, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101, 0x0) 2m58.864502266s ago: executing program 1 (id=242): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chmod(0x0, 0x100) syz_open_dev$usbfs(0x0, 0x6, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ftruncate(0xffffffffffffffff, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) getresgid(0x0, 0x0, &(0x7f0000000280)) openat$nullb(0xffffffffffffff9c, 0x0, 0x6000, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e74b11af0c80602ac906194acb1a1588304d5bf0675558bcba61848b15f95350e6feb341b58415dcc9f14bc5db6c6c4de6469b8830242ee907e1988110b0c31c4123985ff4d9b53e92f9f72345b7615b329afd9c04f91196088d16c63ddc42b07202e8120b8ec968058312df6d583e9c84f7ab3e9a6b86b0271c079b7638e18d904d83a37d073db81a88b37d6cdbc6002e343e9bcb9cb98b51a8f6c1ec5d671c866aca98182b06d098f2ecfe585dab3a", @ANYRESDEC], 0x0) 2m55.26109092s ago: executing program 1 (id=253): syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs$userns(r0, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) 2m51.333293114s ago: executing program 1 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x44802) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) 2m49.877980121s ago: executing program 1 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 2m49.750279895s ago: executing program 32 (id=224): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7aa, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x3, 0x3, 0x1}) 2m34.658355054s ago: executing program 33 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 17.800526056s ago: executing program 6 (id=676): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4844) 16.497987747s ago: executing program 6 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x800000000a) close_range(r4, 0xffffffffffffffff, 0x0) 15.038090524s ago: executing program 6 (id=684): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001540)={0x2020}, 0x2020) 14.414111044s ago: executing program 5 (id=686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) readv(r1, &(0x7f0000000900), 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000002c0)="4f58fb44af438e", 0x7}], 0x1}], 0x1, 0x10) 14.057782255s ago: executing program 5 (id=689): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.57495922s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x800000000a) close_range(r4, 0xffffffffffffffff, 0x0) 12.257811742s ago: executing program 0 (id=695): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) 10.714045021s ago: executing program 5 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) openat$zero(0xffffff9c, 0x0, 0xc40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.315008293s ago: executing program 2 (id=703): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 9.853358268s ago: executing program 2 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() r1 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) rseq(0x0, 0x0, 0x1, 0x0) syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 8.885255039s ago: executing program 5 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x800000000a) close_range(r4, 0xffffffffffffffff, 0x0) 8.866696239s ago: executing program 3 (id=707): socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x300, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4, 0x2, 0x2ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 8.657339446s ago: executing program 2 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 7.506482513s ago: executing program 5 (id=709): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r6, 0x6, {0x0, 0x0, 0x3}}, 0x18) 6.879559792s ago: executing program 3 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='ocfs2\x00', 0x800000, 0x0) 6.62536212s ago: executing program 2 (id=711): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.914863133s ago: executing program 0 (id=712): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/133, 0x85, 0x7f) 5.789946567s ago: executing program 3 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) 5.625400512s ago: executing program 0 (id=714): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000e4ffffff0000000000000000000000000000000800000000000000000000000000000000000000ffffffff0002000000000000000000000000000004000000eeff00"/135]}, 0xff) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x204450, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x9, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "37da54f0"}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) 5.39118415s ago: executing program 3 (id=715): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0x9, 0x80000000000006) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c900002800128009000100766574680000000018000280140001000000", @ANYBLOB="0d02020001"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') 3.548236728s ago: executing program 0 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) openat$zero(0xffffff9c, 0x0, 0xc40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.497368709s ago: executing program 3 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 3.440052822s ago: executing program 6 (id=718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="62a02a3a34096d72"], 0xa) 2.127357243s ago: executing program 3 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x800000000a) close_range(r3, 0xffffffffffffffff, 0x0) 2.054853235s ago: executing program 2 (id=720): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) 1.981191018s ago: executing program 6 (id=721): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.269607141s ago: executing program 5 (id=722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb2"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 245.336382ms ago: executing program 2 (id=723): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fa01, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 72.641068ms ago: executing program 0 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='ocfs2\x00', 0x800000, 0x0) 0s ago: executing program 6 (id=725): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c8", 0x3a, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x9, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 79.199092][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.206273][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.214701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.224585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.242728][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.284305][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.306526][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.315460][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.334101][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.344612][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.354275][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.363355][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.374120][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.392236][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.402947][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.425392][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.434338][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.444336][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.454324][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.469593][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.482035][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.494481][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.523437][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.551399][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.576552][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.606272][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 79.612424][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 79.618743][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 79.624966][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 79.637015][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 79.652893][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.663681][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.672827][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.681806][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.691025][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.700442][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.717033][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.725360][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.740685][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.753226][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.775953][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.844532][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.853122][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.863354][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.873465][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.880685][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.894924][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.904094][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.919473][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.926785][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.941108][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.950507][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.965832][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.974880][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.984859][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.992326][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.001065][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.010843][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.019587][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.027943][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.065756][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.074809][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.111711][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.119061][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.162622][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.179714][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.191868][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.219116][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.237064][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.306060][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.314493][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.366697][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.375232][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.387239][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.396742][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.405240][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.416511][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.425186][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.434267][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.443141][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.451955][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.461201][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.480604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.490778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.509621][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.526241][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.541435][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.557665][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.574342][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.593922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.607557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.619934][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.676847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.696253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.733443][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.767572][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.840288][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.852843][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.913052][ T4278] device veth0_vlan entered promiscuous mode [ 80.928579][ T4274] device veth0_vlan entered promiscuous mode [ 80.938843][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.951124][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.974679][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.993512][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.002477][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.012990][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.022662][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.031317][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.065921][ T4278] device veth1_vlan entered promiscuous mode [ 81.079301][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.096480][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.129529][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.146500][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.157831][ T4277] device veth0_vlan entered promiscuous mode [ 81.173422][ T4274] device veth1_vlan entered promiscuous mode [ 81.200033][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.233041][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.251387][ T4277] device veth1_vlan entered promiscuous mode [ 81.365944][ T4277] device veth0_macvtap entered promiscuous mode [ 81.381514][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.390527][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.401441][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.410996][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.420366][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.429914][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.439672][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.449578][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.458752][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.471125][ T4278] device veth0_macvtap entered promiscuous mode [ 81.483836][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.497965][ T4274] device veth0_macvtap entered promiscuous mode [ 81.508490][ T4277] device veth1_macvtap entered promiscuous mode [ 81.534587][ T4278] device veth1_macvtap entered promiscuous mode [ 81.554987][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.564199][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.573476][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.582916][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.591943][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.600123][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.609990][ T4274] device veth1_macvtap entered promiscuous mode [ 81.627558][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.658609][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.674934][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.687754][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.696984][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 81.703057][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 81.709630][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 81.710281][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.724432][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 81.730742][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 81.748560][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.771171][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.782487][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.800738][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.808572][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.817682][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.826826][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.837075][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.846567][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.855501][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.872744][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.895730][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.906979][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.924507][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.945258][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.957035][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.968152][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.980702][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.000086][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.013304][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.033910][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.045310][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057642][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.065233][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.076677][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.088315][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.102621][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.115368][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.129507][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.144201][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.159848][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.177791][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.187195][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.204551][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.214579][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240098][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.254267][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.263538][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272681][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.305159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.338385][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367124][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385652][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.394514][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.420521][ T4273] device veth0_vlan entered promiscuous mode [ 82.439103][ T4275] device veth0_vlan entered promiscuous mode [ 82.453543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.461764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.507444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.516356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.524898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.533543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.558172][ T4275] device veth1_vlan entered promiscuous mode [ 82.598691][ T4273] device veth1_vlan entered promiscuous mode [ 82.724646][ T4275] device veth0_macvtap entered promiscuous mode [ 82.733564][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.745296][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.753775][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.762479][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.771564][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.780954][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.790631][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.802677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.813230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.842802][ T4275] device veth1_macvtap entered promiscuous mode [ 82.857579][ T4273] device veth0_macvtap entered promiscuous mode [ 82.886594][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.894821][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.921934][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.934543][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.945462][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.956251][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.967593][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.978244][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.990071][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.999070][ T4273] device veth1_macvtap entered promiscuous mode [ 83.006830][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.017941][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.026908][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.034938][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.043677][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.052700][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.072728][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.073043][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.080938][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.102307][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.112974][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.124230][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.135071][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.146248][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162605][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.184485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.199739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.209793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.231833][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242749][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.252374][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.261682][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275189][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.287300][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.297479][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.311330][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.321736][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.332919][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.346895][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.358688][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.372475][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.396567][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.413033][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.423002][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.425149][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.448553][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.462040][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.472472][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.483448][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.493640][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.504295][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.514158][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.524620][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.537183][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.549842][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.560686][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.570563][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.590080][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.599539][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.609762][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.618864][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.630530][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.639739][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.678147][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.688713][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.725693][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.749047][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.765737][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 83.771835][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 83.779165][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 83.779191][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 83.785755][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 83.906210][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.922173][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.989317][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.040398][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.124195][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.206961][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.214366][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.305133][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.387892][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.089869][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.128493][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.163268][ T4378] Zero length message leads to an empty skb [ 85.276399][ T4373] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.382763][ T4380] IPv6: sit1: Disabled Multicast RS [ 85.476697][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.542235][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.620755][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.762110][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.955593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.985597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.005608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.015592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.025615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.035596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.045595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.055594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.065589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 87.075594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 87.741526][ T127] cfg80211: failed to load regulatory.db [ 89.308254][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.688958][ T1249] block nbd0: Attempted send on invalid socket [ 89.695790][ T1249] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 89.706198][ T4427] exFAT-fs (nbd0): unable to read boot sector [ 89.712707][ T4427] exFAT-fs (nbd0): failed to read boot sector [ 90.625044][ T4427] exFAT-fs (nbd0): failed to recognize exfat type [ 92.776597][ T4433] loop3: detected capacity change from 0 to 131072 [ 92.800737][ T4433] F2FS-fs (loop3): invalid crc value [ 92.905598][ T4433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.087854][ T4433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.119314][ T4433] F2FS-fs (loop3): invalid namelen(0), ino:8, run fsck to fix. [ 95.541209][ T4460] loop0: detected capacity change from 0 to 64 [ 95.859830][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 96.433804][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.441347][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.371216][ T4323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.615700][ T4323] usb 5-1: Using ep0 maxpacket: 16 [ 97.687774][ T4475] (syz.2.31,4475,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 97.696722][ T4475] (syz.2.31,4475,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 98.079350][ T4323] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.088094][ T4323] usb 5-1: config 0 has no interface number 0 [ 98.114028][ T4323] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 98.159020][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.167742][ T4323] usb 5-1: Product: syz [ 98.172050][ T4323] usb 5-1: Manufacturer: syz [ 98.179290][ T4323] usb 5-1: SerialNumber: syz [ 98.210534][ T4323] usb 5-1: config 0 descriptor?? [ 98.463390][ T4323] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 98.976228][ T4323] gspca_spca1528: reg_w err -110 [ 99.285682][ T4323] spca1528: probe of 5-1:0.1 failed with error -110 [ 99.773588][ T4491] netlink: 56 bytes leftover after parsing attributes in process `syz.3.35'. [ 99.834142][ T4492] process 'syz.2.34' launched './file0' with NULL argv: empty string added [ 100.505788][ T4495] loop2: detected capacity change from 0 to 32768 [ 100.518898][ T4495] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.36 (4495) [ 100.542297][ T4495] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.552999][ T4495] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 100.561982][ T4495] BTRFS info (device loop2): setting nodatacow, compression disabled [ 100.570565][ T4495] BTRFS info (device loop2): force clearing of disk cache [ 100.578278][ T4495] BTRFS info (device loop2): turning on sync discard [ 100.585010][ T4495] BTRFS info (device loop2): turning off barriers [ 100.591588][ T4495] BTRFS info (device loop2): use no compression [ 100.597959][ T4495] BTRFS info (device loop2): disabling free space tree [ 100.604844][ T4495] BTRFS info (device loop2): enabling ssd optimizations [ 100.612064][ T4495] BTRFS info (device loop2): using spread ssd allocation scheme [ 100.619783][ T4495] BTRFS info (device loop2): not using ssd optimizations [ 100.627009][ T4495] BTRFS info (device loop2): not using spread ssd allocation scheme [ 100.651437][ T4361] usb 5-1: USB disconnect, device number 2 [ 100.864415][ T4510] netlink: 'syz.4.38': attribute type 20 has an invalid length. [ 101.955521][ T4495] BTRFS info (device loop2): rebuilding free space tree [ 101.983373][ T4495] BTRFS info (device loop2): disabling free space tree [ 101.991184][ T4495] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.001165][ T4495] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.076283][ T4495] overlayfs: missing 'lowerdir' [ 102.374417][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 102.388822][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.396080][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.216187][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.043904][ T4412] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.818986][ T4550] usb usb1: usbfs: process 4550 (syz.2.41) did not claim interface 0 before use [ 106.085816][ T4279] Bluetooth: hci5: command 0xfc11 tx timeout [ 106.105708][ T47] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 107.007493][ T4558] netlink: 56 bytes leftover after parsing attributes in process `syz.4.48'. [ 110.442143][ T4588] usb usb1: usbfs: process 4588 (syz.0.57) did not claim interface 0 before use [ 112.018936][ T4333] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.249603][ T4595] loop3: detected capacity change from 0 to 32768 [ 113.283739][ T4595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.51 (4595) [ 113.331352][ T4595] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.342003][ T4595] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.351914][ T4595] BTRFS info (device loop3): setting nodatacow, compression disabled [ 113.361059][ T4595] BTRFS info (device loop3): force clearing of disk cache [ 113.369542][ T4595] BTRFS info (device loop3): turning on sync discard [ 113.377395][ T4595] BTRFS info (device loop3): turning off barriers [ 113.378384][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.383984][ T4595] BTRFS info (device loop3): use no compression [ 113.405188][ T4595] BTRFS info (device loop3): disabling free space tree [ 113.435819][ T4595] BTRFS info (device loop3): enabling ssd optimizations [ 113.445234][ T4595] BTRFS info (device loop3): using spread ssd allocation scheme [ 113.476488][ T4595] BTRFS info (device loop3): not using ssd optimizations [ 113.485056][ T4595] BTRFS info (device loop3): not using spread ssd allocation scheme [ 113.487572][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.690355][ T4279] Bluetooth: hci5: command 0xfc11 tx timeout [ 113.697977][ T47] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 113.711943][ T4595] BTRFS info (device loop3): rebuilding free space tree [ 113.824027][ T4595] BTRFS info (device loop3): disabling free space tree [ 113.855727][ T4595] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.943273][ T4595] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.484995][ T4639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.64'. [ 115.600771][ T4275] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.627693][ T4642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.65'. [ 116.359047][ T4576] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.368587][ T4576] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.378767][ T4576] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.389733][ T4576] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.705354][ T4641] IPv6: sit1: Disabled Multicast RS [ 117.315642][ T4280] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.517620][ T4280] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.532366][ T4280] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.574060][ T4280] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.612849][ T4280] usb 1-1: config 220 has no interface number 2 [ 117.632157][ T4280] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.680588][ T4280] usb 1-1: config 220 interface 0 has no altsetting 0 [ 117.708012][ T4280] usb 1-1: config 220 interface 76 has no altsetting 0 [ 117.728670][ T4280] usb 1-1: config 220 interface 1 has no altsetting 0 [ 117.772879][ T4280] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.844406][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.853011][ T4280] usb 1-1: Product: syz [ 117.867622][ T4280] usb 1-1: Manufacturer: syz [ 117.872329][ T4280] usb 1-1: SerialNumber: syz [ 117.947676][ T52] block nbd1: Attempted send on invalid socket [ 117.953996][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 117.964955][ T4680] exFAT-fs (nbd1): unable to read boot sector [ 117.971387][ T4680] exFAT-fs (nbd1): failed to read boot sector [ 117.977997][ T4680] exFAT-fs (nbd1): failed to recognize exfat type [ 118.965548][ C1] sched: RT throttling activated [ 119.162858][ T4682] loop2: detected capacity change from 0 to 32768 [ 119.213300][ T4682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.76 (4682) [ 119.242307][ T4682] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.252690][ T4682] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.261505][ T4682] BTRFS info (device loop2): setting nodatacow, compression disabled [ 119.269838][ T4682] BTRFS info (device loop2): force clearing of disk cache [ 119.277175][ T4682] BTRFS info (device loop2): turning on sync discard [ 119.284178][ T4682] BTRFS info (device loop2): turning off barriers [ 119.291009][ T4682] BTRFS info (device loop2): use no compression [ 119.297377][ T4682] BTRFS info (device loop2): disabling free space tree [ 119.304354][ T4682] BTRFS info (device loop2): enabling ssd optimizations [ 119.311651][ T4682] BTRFS info (device loop2): using spread ssd allocation scheme [ 119.320003][ T4682] BTRFS info (device loop2): not using ssd optimizations [ 119.327168][ T4682] BTRFS info (device loop2): not using spread ssd allocation scheme [ 119.643392][ T4682] BTRFS info (device loop2): rebuilding free space tree [ 119.671487][ T4682] BTRFS info (device loop2): disabling free space tree [ 119.678730][ T4682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.688488][ T4682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.736701][ T4682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.745797][ T4682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.059777][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.227585][ T4280] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 120.234025][ T4280] usb 1-1: No valid video chain found. [ 120.240241][ T4280] usb 1-1: selecting invalid altsetting 0 [ 120.262832][ T4280] usb 1-1: selecting invalid altsetting 0 [ 120.268965][ T4280] usbtest: probe of 1-1:220.1 failed with error -22 [ 120.314007][ T4280] usb 1-1: USB disconnect, device number 2 [ 120.433668][ T4712] netlink: 56 bytes leftover after parsing attributes in process `syz.4.82'. [ 121.247807][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.255296][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.447774][ T4718] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 123.723965][ T4718] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 123.742773][ T4718] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 123.759733][ T4718] usb 4-1: config 150 has no interface number 0 [ 123.781039][ T4718] usb 4-1: config 150 interface 204 has no altsetting 0 [ 123.801199][ T4718] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 123.814762][ T4718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.823605][ T4718] usb 4-1: Product: syz [ 123.828558][ T4718] usb 4-1: Manufacturer: syz [ 123.833370][ T4718] usb 4-1: SerialNumber: syz [ 124.117430][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.147972][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.417889][ T4755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 124.425303][ T4755] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.441235][ T4755] vhci_hcd vhci_hcd.0: Device attached [ 125.063938][ T4756] vhci_hcd: connection closed [ 125.067907][ T4369] vhci_hcd: stop threads [ 125.180894][ T4369] vhci_hcd: release socket [ 125.237569][ T14] usb 38-1: SetAddress Request (2) to port 0 [ 125.259247][ T14] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 125.271284][ T4369] vhci_hcd: disconnect device [ 125.385921][ T14] usb 38-1: enqueue for inactive port 0 [ 125.572741][ T4718] xr_serial 4-1:150.204: skipping garbage [ 125.659341][ T4718] xr_serial 4-1:150.204: xr_serial converter detected [ 125.688982][ T4718] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 125.709381][ T4718] xr_serial: probe of ttyUSB0 failed with error -71 [ 125.724164][ T4718] usb 4-1: USB disconnect, device number 2 [ 125.743644][ T4718] xr_serial 4-1:150.204: device disconnected [ 125.886970][ T14] usb usb38-port1: attempt power cycle [ 126.539621][ T14] usb usb38-port1: unable to enumerate USB device [ 127.123254][ T4705] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.132675][ T4705] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.143410][ T4705] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.152574][ T4705] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.749368][ T4776] loop4: detected capacity change from 0 to 32768 [ 127.763595][ T4776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.100 (4776) [ 127.784012][ T4776] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.794342][ T4776] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 127.803342][ T4776] BTRFS info (device loop4): metadata ratio 0 [ 127.810063][ T4776] BTRFS info (device loop4): turning on sync discard [ 127.817182][ T4776] BTRFS info (device loop4): using free space tree [ 128.345121][ T4776] BTRFS info (device loop4): enabling ssd optimizations [ 129.501333][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.838196][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4360) [ 131.845831][ T4718] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.037637][ T4718] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.074713][ T4718] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.117563][ T4718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.142932][ T4718] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.174849][ T4718] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.242134][ T4718] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.472978][ T4718] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.027915][ T4718] usb 3-1: Product: syz [ 133.032276][ T4718] usb 3-1: Manufacturer: syz [ 133.076375][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084512][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.300313][ T4718] usb 3-1: can't set config #1, error -71 [ 133.580948][ T4857] loop0: detected capacity change from 0 to 32768 [ 133.594804][ T4857] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 134.004118][ T4718] usb 3-1: USB disconnect, device number 2 [ 136.527819][ T4862] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 136.735777][ T4717] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 136.859389][ T4878] loop1: detected capacity change from 0 to 32768 [ 136.909898][ T4878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.121 (4878) [ 136.959246][ T4878] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.969976][ T4878] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.979046][ T4878] BTRFS info (device loop1): setting nodatacow, compression disabled [ 136.987373][ T4878] BTRFS info (device loop1): force clearing of disk cache [ 136.994541][ T4878] BTRFS info (device loop1): turning on sync discard [ 137.001383][ T4878] BTRFS info (device loop1): turning off barriers [ 137.007890][ T4878] BTRFS info (device loop1): use no compression [ 137.014331][ T4878] BTRFS info (device loop1): disabling free space tree [ 137.021308][ T4878] BTRFS info (device loop1): enabling ssd optimizations [ 137.028389][ T4878] BTRFS info (device loop1): using spread ssd allocation scheme [ 137.036738][ T4878] BTRFS info (device loop1): not using ssd optimizations [ 137.043912][ T4878] BTRFS info (device loop1): not using spread ssd allocation scheme [ 137.086779][ T4717] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 137.178970][ T4717] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 137.370620][ T4717] usb 5-1: config 150 has no interface number 0 [ 137.501137][ T4717] usb 5-1: config 150 interface 204 has no altsetting 0 [ 137.812294][ T4363] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 137.823310][ T4717] usb 5-1: string descriptor 0 read error: -71 [ 137.865007][ T4717] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 137.939041][ T4717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.977360][ T4717] usb 5-1: can't set config #150, error -71 [ 137.995145][ T4717] usb 5-1: USB disconnect, device number 3 [ 138.177970][ T4878] BTRFS info (device loop1): rebuilding free space tree [ 138.195908][ T4878] BTRFS info (device loop1): disabling free space tree [ 138.203258][ T4878] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.213147][ T4878] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.288417][ T4878] overlayfs: missing 'lowerdir' [ 138.480181][ T4274] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.675873][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 142.884135][ T4952] loop1: detected capacity change from 0 to 32768 [ 142.939900][ T4952] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 143.680796][ T4962] loop2: detected capacity change from 0 to 32768 [ 143.719683][ T4962] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (4962) [ 143.738788][ T4962] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.749232][ T4962] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 143.758210][ T4962] BTRFS info (device loop2): setting nodatacow, compression disabled [ 143.759239][ T4360] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 143.766529][ T4962] BTRFS info (device loop2): force clearing of disk cache [ 143.766561][ T4962] BTRFS info (device loop2): turning on sync discard [ 143.766581][ T4962] BTRFS info (device loop2): turning off barriers [ 143.766599][ T4962] BTRFS info (device loop2): use no compression [ 143.766618][ T4962] BTRFS info (device loop2): disabling free space tree [ 143.766642][ T4962] BTRFS info (device loop2): enabling ssd optimizations [ 143.766656][ T4962] BTRFS info (device loop2): using spread ssd allocation scheme [ 143.766674][ T4962] BTRFS info (device loop2): not using ssd optimizations [ 143.766689][ T4962] BTRFS info (device loop2): not using spread ssd allocation scheme [ 144.585056][ T4962] BTRFS info (device loop2): rebuilding free space tree [ 144.614249][ T4962] BTRFS info (device loop2): disabling free space tree [ 144.621359][ T4962] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.631239][ T4962] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.113132][ T4962] overlayfs: missing 'lowerdir' [ 145.397434][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.645710][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.825735][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 145.851697][ T26] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.900715][ T26] usb 2-1: config 0 has no interface number 0 [ 145.931203][ T26] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.025787][ T26] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.092713][ T26] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 146.145835][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.218681][ T26] usb 2-1: config 0 descriptor?? [ 146.816137][ T5013] loop3: detected capacity change from 0 to 32768 [ 146.851199][ T26] hid (null): invalid report_count -1334674082 [ 146.857837][ T5013] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 146.870172][ T26] hid (null): report_id 256057435 is invalid [ 146.876353][ T26] hid (null): unknown global tag 0xd [ 147.057804][ T26] hid (null): nested delimiters [ 147.073534][ T26] usb 2-1: USB disconnect, device number 2 [ 147.179290][ T5018] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'. [ 147.315320][ T4363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 149.069918][ T5030] mmap: syz.0.160 (5030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.835917][ T4816] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 150.047654][ T4816] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 150.065730][ T4816] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 150.141919][ T4816] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 150.202720][ T4816] usb 4-1: config 150 has no interface number 0 [ 150.239076][ T4816] usb 4-1: config 150 interface 204 has no altsetting 0 [ 150.937942][ T4816] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 152.315419][ T4816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.428251][ T4816] usb 4-1: Product: syz [ 152.432529][ T4816] usb 4-1: Manufacturer: syz [ 152.437271][ T4816] usb 4-1: SerialNumber: syz [ 152.459096][ T4816] usb 4-1: can't set config #150, error -71 [ 152.469607][ T4816] usb 4-1: USB disconnect, device number 3 [ 152.828734][ T5049] block device autoloading is deprecated and will be removed. [ 153.155335][ T5058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.169'. [ 155.777345][ T5078] netlink: 'syz.4.175': attribute type 4 has an invalid length. [ 156.388826][ T5084] loop0: detected capacity change from 0 to 32768 [ 156.410004][ T5084] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (5084) [ 156.479662][ T5084] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.490486][ T5084] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.499440][ T5084] BTRFS info (device loop0): setting nodatacow, compression disabled [ 156.507789][ T5084] BTRFS info (device loop0): force clearing of disk cache [ 156.515128][ T5084] BTRFS info (device loop0): turning on sync discard [ 156.521977][ T5084] BTRFS info (device loop0): turning off barriers [ 156.528697][ T5084] BTRFS info (device loop0): use no compression [ 156.535079][ T5084] BTRFS info (device loop0): disabling free space tree [ 156.542187][ T5084] BTRFS info (device loop0): enabling ssd optimizations [ 156.549398][ T5084] BTRFS info (device loop0): using spread ssd allocation scheme [ 156.557238][ T5084] BTRFS info (device loop0): not using ssd optimizations [ 156.564510][ T5084] BTRFS info (device loop0): not using spread ssd allocation scheme [ 156.726612][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.857667][ T5084] BTRFS info (device loop0): rebuilding free space tree [ 156.880633][ T5084] BTRFS info (device loop0): disabling free space tree [ 156.888236][ T5084] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.898644][ T5084] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.935830][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 156.943934][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.957641][ T5084] overlayfs: missing 'workdir' [ 156.990612][ T4322] usb 2-1: config 0 has no interfaces? [ 157.767713][ T4322] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 157.785587][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.793654][ T4322] usb 2-1: Product: syz [ 157.846309][ T4322] usb 2-1: Manufacturer: syz [ 157.851079][ T4322] usb 2-1: SerialNumber: syz [ 157.866638][ T4322] usb 2-1: config 0 descriptor?? [ 157.917901][ T4273] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.116983][ T4717] usb 2-1: USB disconnect, device number 3 [ 158.194982][ T5113] loop3: detected capacity change from 0 to 32768 [ 158.232363][ T4816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.252729][ T5113] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 158.427293][ T4816] usb 5-1: Using ep0 maxpacket: 32 [ 158.440561][ T4816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.487890][ T4816] usb 5-1: config 13 has an invalid interface number: 53 but max is 0 [ 158.506590][ T4816] usb 5-1: config 13 has no interface number 0 [ 158.516219][ T4816] usb 5-1: config 13 interface 53 has no altsetting 0 [ 158.539733][ T4816] usb 5-1: New USB device found, idVendor=054c, idProduct=0058, bcdDevice=4b.48 [ 158.559727][ T4816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.575785][ T4816] usb 5-1: Product: syz [ 158.580379][ T4816] usb 5-1: Manufacturer: syz [ 158.585185][ T4816] usb 5-1: SerialNumber: syz [ 158.683866][ T4360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (4360) [ 158.708126][ T4363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 158.856881][ T4816] usb-storage 5-1:13.53: USB Mass Storage device detected [ 158.897542][ T4816] usb-storage 5-1:13.53: Quirks match for vid 054c pid 0058: 8 [ 158.991485][ T4816] usb 5-1: USB disconnect, device number 4 [ 160.274610][ T5136] tipc: Started in network mode [ 160.315727][ T5136] tipc: Node identity 22b9c6627809, cluster identity 4711 [ 160.323825][ T5136] tipc: Enabled bearer , priority 10 [ 160.353244][ T27] audit: type=1326 audit(1780209477.906:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 160.445620][ T27] audit: type=1326 audit(1780209477.906:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.552238][ T27] audit: type=1326 audit(1780209477.906:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.584709][ T27] audit: type=1326 audit(1780209477.906:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.618913][ T27] audit: type=1326 audit(1780209477.906:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.653512][ T27] audit: type=1326 audit(1780209477.906:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.692612][ T27] audit: type=1326 audit(1780209477.906:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 160.976199][ T27] audit: type=1326 audit(1780209477.906:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 161.581202][ T27] audit: type=1326 audit(1780209477.906:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 161.628523][ T4322] tipc: Node number set to 1521534562 [ 161.705646][ T27] audit: type=1326 audit(1780209477.906:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.186" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d34b3e1d9 code=0x7ffc0000 [ 161.846830][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 161.951168][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 162.145327][ T5160] loop1: detected capacity change from 0 to 32768 [ 162.160359][ T5160] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 162.641690][ T4360] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 166.044447][ T5212] loop3: detected capacity change from 0 to 32768 [ 166.055307][ T5212] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 166.168403][ T4360] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.560393][ T27] kauditd_printk_skb: 223 callbacks suppressed [ 166.560411][ T27] audit: type=1326 audit(1780209484.106:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 167.284217][ T27] audit: type=1326 audit(1780209484.106:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 167.412146][ T27] audit: type=1326 audit(1780209484.106:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 167.844267][ T27] audit: type=1326 audit(1780209484.116:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 168.120665][ T27] audit: type=1326 audit(1780209484.116:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 168.195945][ T27] audit: type=1326 audit(1780209484.116:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 168.225852][ T4816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.617477][ T27] audit: type=1326 audit(1780209484.116:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 169.652365][ T27] audit: type=1326 audit(1780209484.116:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 169.690908][ T27] audit: type=1326 audit(1780209484.116:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 169.697566][ T4816] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.797007][ T4816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.805096][ T4816] usb 3-1: Product: syz [ 169.812939][ T27] audit: type=1326 audit(1780209484.116:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34b9ce59 code=0x7ffc0000 [ 169.845716][ T4816] usb 3-1: Manufacturer: syz [ 169.855814][ T4816] usb 3-1: SerialNumber: syz [ 170.474394][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 172.420739][ T5282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.520703][ T5282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.679963][ T5287] loop3: detected capacity change from 0 to 32768 [ 172.689559][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 172.702170][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 172.747196][ T5287] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 172.955709][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 172.968539][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 172.995840][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 173.016102][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 173.060830][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 173.093736][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 173.166043][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 173.205012][ T4363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 173.225819][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 173.267354][ T4816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 173.354780][ T4816] lan78xx: probe of 3-1:1.0 failed with error -71 [ 173.399992][ T4816] usb 3-1: USB disconnect, device number 3 [ 175.255831][ T4816] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 175.492082][ T4816] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 175.554638][ T4816] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 175.714989][ T4816] usb 1-1: config 150 has no interface number 0 [ 175.808414][ T4816] usb 1-1: config 150 interface 204 has no altsetting 0 [ 175.887917][ T4816] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 175.953947][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.995772][ T4816] usb 1-1: Product: syz [ 176.013143][ T4816] usb 1-1: Manufacturer: syz [ 176.027704][ T4816] usb 1-1: SerialNumber: syz [ 177.175942][ T4598] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.395719][ T4598] usb 2-1: Using ep0 maxpacket: 16 [ 177.404723][ T4598] usb 2-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 177.442458][ T4598] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 177.601216][ T4816] xr_serial 1-1:150.204: skipping garbage [ 177.607399][ T4816] xr_serial 1-1:150.204: xr_serial converter detected [ 177.616479][ T4816] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 177.623865][ T4816] xr_serial: probe of ttyUSB0 failed with error -71 [ 177.638787][ T4598] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 177.655053][ T4598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.664750][ T4598] usb 2-1: Product: syz [ 177.669379][ T4598] usb 2-1: Manufacturer: syz [ 177.674212][ T4598] usb 2-1: SerialNumber: syz [ 177.702328][ T4598] usb 2-1: config 0 descriptor?? [ 177.712581][ T4816] usb 1-1: USB disconnect, device number 3 [ 177.719265][ T4598] appledisplay 2-1:0.0: Could not find int-in endpoint [ 177.732147][ T4816] xr_serial 1-1:150.204: device disconnected [ 177.759988][ T4598] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 177.941436][ T4598] usb 2-1: USB disconnect, device number 4 [ 179.719024][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 180.815684][ T4535] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.112290][ T4535] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 181.139881][ T4535] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 181.170052][ T4535] usb 4-1: Product: syz [ 181.193627][ T4535] usb 4-1: SerialNumber: syz [ 181.217084][ T4535] usb 4-1: config 0 descriptor?? [ 181.420600][ T4535] hso 4-1:0.0: Can't find BULK IN endpoint [ 181.629749][ T4535] usb 4-1: USB disconnect, device number 4 [ 183.581852][ T4598] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.197487][ T4598] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.225601][ T4598] usb 3-1: config 0 has no interface number 0 [ 185.248378][ T4598] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 185.290693][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.315616][ T4598] usb 3-1: Product: syz [ 185.321709][ T4598] usb 3-1: Manufacturer: syz [ 185.345672][ T4598] usb 3-1: SerialNumber: syz [ 185.372608][ T4598] usb 3-1: config 0 descriptor?? [ 185.612670][ T4598] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 185.695853][ T4598] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.736200][ T4598] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 185.744583][ T4598] usb 3-1: media controller created [ 185.818513][ T4598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.093502][ T4598] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 186.196086][ T4598] usb 3-1: USB disconnect, device number 4 [ 186.216522][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.227587][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.237871][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.250362][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.268246][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.276787][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.748523][ T5408] chnl_net:caif_netlink_parms(): no params data found [ 187.006927][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.039889][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.076046][ T5408] device bridge_slave_0 entered promiscuous mode [ 187.113805][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.157230][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.184001][ T5408] device bridge_slave_1 entered promiscuous mode [ 187.438277][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.462109][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.168143][ T5408] team0: Port device team_slave_0 added [ 188.289928][ T5408] team0: Port device team_slave_1 added [ 188.327472][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 188.455424][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.535667][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.672524][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.703180][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.710868][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.825573][ T5288] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.308080][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.405604][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 190.896774][ T4292] Bluetooth: hci5: command 0x1003 tx timeout [ 190.903375][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.041183][ T5408] device hsr_slave_0 entered promiscuous mode [ 191.097290][ T5408] device hsr_slave_1 entered promiscuous mode [ 191.199308][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.239786][ T5408] Cannot create hsr debugfs directory [ 191.775649][ T4816] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 191.884872][ T5408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.903959][ T5408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.924268][ T5408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.946523][ T5408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.984559][ T4816] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 192.009042][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 192.036231][ T4816] usb 1-1: Product: syz [ 192.045994][ T4816] usb 1-1: Manufacturer: syz [ 192.064531][ T4816] usb 1-1: SerialNumber: syz [ 192.112200][ T4816] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 192.226818][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.257026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.276323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.382736][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.504269][ T5408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.554778][ T5408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.248511][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 193.262843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.290484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.357434][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.364670][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.423588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.451401][ T4816] vp7045: USB control message 'in' went wrong. [ 193.454936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.471173][ T4816] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 193.492882][ T4816] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 193.524416][ T4816] usb 1-1: USB disconnect, device number 4 [ 193.528612][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.537674][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.589010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.598863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.619993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.630394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.646840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.676473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.685283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.726363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.766397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.783305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.792849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.802080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.810966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.850330][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.869222][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.891456][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.375595][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.490523][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.594014][ T4321] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.648947][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.771253][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.872085][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.969302][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.073966][ T4321] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.120916][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.140945][ T4321] usb 1-1: Product: syz [ 195.145180][ T4321] usb 1-1: Manufacturer: syz [ 195.175978][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.219645][ T4321] cdc_wdm 1-1:1.0: skipping garbage [ 195.280149][ T4321] cdc_wdm 1-1:1.0: skipping garbage [ 195.286239][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 195.323137][ T4321] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 195.335652][ T4321] cdc_wdm 1-1:1.0: Unknown control protocol [ 195.427599][ T4262] usb 1-1: USB disconnect, device number 5 [ 196.015664][ T4262] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.207473][ T4262] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.228529][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.259653][ T4262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.290145][ T4262] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.345958][ T4262] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.437119][ T4262] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.448941][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.465741][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.466394][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.614194][ T4262] usb 1-1: Product: syz [ 196.648904][ T5408] device veth0_vlan entered promiscuous mode [ 196.656147][ T4262] usb 1-1: Manufacturer: syz [ 196.780008][ T5408] device veth1_vlan entered promiscuous mode [ 196.842172][ T4262] cdc_wdm 1-1:1.0: skipping garbage [ 196.888920][ T4262] cdc_wdm 1-1:1.0: skipping garbage [ 196.939238][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.084223][ T4262] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 197.094902][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.133929][ T4262] cdc_wdm 1-1:1.0: Unknown control protocol [ 197.145044][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.247773][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.285023][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.310806][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.359856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.373358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.404368][ T5408] device veth0_macvtap entered promiscuous mode [ 197.466485][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.486468][ T5408] device veth1_macvtap entered promiscuous mode [ 197.551062][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.569777][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.580503][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.591440][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.606439][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.624216][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.643686][ T5533] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 197.653265][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.673847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.707006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.727397][ T5536] netlink: 'syz.3.298': attribute type 16 has an invalid length. [ 197.735202][ T5536] netlink: 'syz.3.298': attribute type 17 has an invalid length. [ 197.758452][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.766493][ T5536] bridge0: port 2(bridge_slave_1) entered listening state [ 197.774091][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.781332][ T5536] bridge0: port 1(bridge_slave_0) entered listening state [ 197.837452][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.845138][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.876350][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.898306][ T5536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.929762][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.961072][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.991897][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.062690][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.086981][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.117120][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.172195][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.317687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.353761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.431649][ T5408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.451143][ T5408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.465600][ T5408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.500575][ T5408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.713417][ T26] usb 1-1: USB disconnect, device number 6 [ 200.680449][ T5284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.110846][ T5284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.132282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.240650][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.327023][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 202.327683][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 202.340693][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 202.349642][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 202.376145][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.537414][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.905714][ T4535] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 203.106710][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.116828][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.128237][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.134816][ T4535] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 203.137454][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.174808][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.182980][ T4535] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 203.182995][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.293225][ T4535] usb 1-1: config 150 has no interface number 0 [ 203.317557][ T4535] usb 1-1: config 150 interface 204 has no altsetting 0 [ 203.358407][ T4535] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 203.378546][ T4535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.395668][ T4535] usb 1-1: Product: syz [ 203.411568][ T4535] usb 1-1: Manufacturer: syz [ 203.416531][ T4535] usb 1-1: SerialNumber: syz [ 203.434683][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.578650][ T4535] xr_serial 1-1:150.204: skipping garbage [ 203.584767][ T4535] xr_serial 1-1:150.204: xr_serial converter detected [ 203.598154][ T4535] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 203.604989][ T4535] xr_serial: probe of ttyUSB0 failed with error -71 [ 203.631635][ T4535] usb 1-1: USB disconnect, device number 7 [ 203.656762][ T4535] xr_serial 1-1:150.204: device disconnected [ 205.085010][ T5573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.130953][ T5586] autofs4:pid:5586:autofs_fill_super: called with bogus options [ 205.205907][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 206.629271][ T4262] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 206.857686][ T4262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 206.945802][ T4262] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 207.034372][ T4262] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 207.095001][ T4262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.144263][ T5601] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 207.153536][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.195670][ T4262] usb 3-1: Product: syz [ 207.200019][ T4262] usb 3-1: Manufacturer: syz [ 207.204647][ T4262] usb 3-1: SerialNumber: syz [ 207.278984][ T5585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.295667][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 207.315437][ T5571] chnl_net:caif_netlink_parms(): no params data found [ 207.743746][ T4262] cdc_ncm 3-1:1.0: bind() failure [ 207.754366][ T4262] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 207.762244][ T4262] cdc_ncm 3-1:1.1: bind() failure [ 207.771571][ T4262] usb 3-1: USB disconnect, device number 5 [ 209.524424][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 210.005870][ T4708] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 210.199618][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.207829][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.216416][ T4708] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 210.224983][ T4708] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 210.256242][ T5571] device bridge_slave_0 entered promiscuous mode [ 210.265642][ T4708] usb 1-1: config 150 has no interface number 0 [ 210.272132][ T4708] usb 1-1: config 150 interface 204 has no altsetting 0 [ 210.328248][ T4708] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 210.355977][ T4708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.364238][ T4708] usb 1-1: Product: syz [ 210.405630][ T4708] usb 1-1: Manufacturer: syz [ 210.410393][ T4708] usb 1-1: SerialNumber: syz [ 210.524943][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.540161][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.574764][ T5571] device bridge_slave_1 entered promiscuous mode [ 210.655077][ T4708] xr_serial 1-1:150.204: skipping garbage [ 210.661163][ T4708] xr_serial 1-1:150.204: xr_serial converter detected [ 210.670711][ T4708] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 210.677170][ T4708] xr_serial: probe of ttyUSB0 failed with error -71 [ 210.687782][ T4708] usb 1-1: USB disconnect, device number 8 [ 210.695466][ T4708] xr_serial 1-1:150.204: device disconnected [ 212.177589][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 212.203711][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.215879][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.501009][ T5571] team0: Port device team_slave_0 added [ 213.542877][ T5571] team0: Port device team_slave_1 added [ 214.031802][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.046526][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.148247][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.293373][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.374885][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.475778][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.739776][ T5571] device hsr_slave_0 entered promiscuous mode [ 214.747184][ T5571] device hsr_slave_1 entered promiscuous mode [ 214.766365][ T5571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.774468][ T5571] Cannot create hsr debugfs directory [ 216.574082][ T4369] device hsr_slave_0 left promiscuous mode [ 216.634119][ T4369] device hsr_slave_1 left promiscuous mode [ 217.932070][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.093611][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.296482][ T4369] device bridge_slave_1 left promiscuous mode [ 218.305885][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.371604][ T4369] device bridge_slave_0 left promiscuous mode [ 218.375184][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.095592][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 219.875886][ T7] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 219.875929][ T7] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 219.875952][ T7] usb 3-1: config 150 has no interface number 0 [ 219.875985][ T7] usb 3-1: config 150 interface 204 has no altsetting 0 [ 219.878491][ T7] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 219.878523][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.878545][ T7] usb 3-1: Product: syz [ 219.878561][ T7] usb 3-1: Manufacturer: syz [ 219.878578][ T7] usb 3-1: SerialNumber: syz [ 220.745563][ T5662] tty tty27: ldisc open failed (-12), clearing slot 26 [ 221.598548][ T7] xr_serial 3-1:150.204: skipping garbage [ 221.657531][ T7] xr_serial 3-1:150.204: xr_serial converter detected [ 221.814044][ T7] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 221.917046][ T7] xr_serial: probe of ttyUSB0 failed with error -71 [ 221.975939][ T7] usb 3-1: USB disconnect, device number 6 [ 221.994535][ T5676] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 222.043289][ T7] xr_serial 3-1:150.204: device disconnected [ 222.560083][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 222.608015][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 222.660399][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.708294][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.643283][ T4369] bond0 (unregistering): Released all slaves [ 227.352404][ T5571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.660435][ T5571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.728936][ T5571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.768414][ T5571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.406369][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 228.414517][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 230.905990][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.972723][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.982854][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.159312][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.310167][ T4369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.391895][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.406329][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.453282][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.460681][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.518428][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.576372][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.781140][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.788520][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.177838][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.246428][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.351757][ T4369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.446316][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.482120][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.515627][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.535358][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.555292][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.575345][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.632173][ T4369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.673286][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.687407][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.716753][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.745034][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.824836][ T4369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.853595][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.249952][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.390285][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.406021][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.467486][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.486916][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.519121][ T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.548367][ T26] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 235.551646][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.592404][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.621587][ T26] usb 6-1: Product: syz [ 235.641846][ T26] usb 6-1: Manufacturer: syz [ 235.826492][ T26] usb 6-1: SerialNumber: syz [ 235.848344][ T26] usb 6-1: selecting invalid altsetting 1 [ 235.857103][ T26] usb 6-1: unit 6 not found! [ 236.735417][ T26] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 236.774628][ T26] usb 6-1: USB disconnect, device number 2 [ 237.547600][ T4369] device hsr_slave_0 left promiscuous mode [ 237.825905][ T4369] device hsr_slave_1 left promiscuous mode [ 238.267402][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.275072][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.625989][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.633749][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.642223][ T4369] device bridge_slave_1 left promiscuous mode [ 238.656861][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.674174][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.051407][ T4369] device bridge_slave_0 left promiscuous mode [ 239.333125][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.499230][ T4369] device veth1_macvtap left promiscuous mode [ 239.515935][ T4369] device veth0_macvtap left promiscuous mode [ 239.537029][ T4369] device veth1_vlan left promiscuous mode [ 239.563387][ T4369] device veth0_vlan left promiscuous mode [ 240.205936][ T4598] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.411249][ T4598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.433737][ T4598] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 240.489522][ T4598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 240.542796][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 240.613259][ T4598] usb 4-1: Product: syz [ 240.623404][ T4598] usb 4-1: Manufacturer: syz [ 240.640448][ T4598] usb 4-1: SerialNumber: syz [ 241.234214][ T4292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 241.244299][ T4292] CPU: 1 PID: 4292 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 241.251992][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.262098][ T4292] Workqueue: hci3 hci_rx_work [ 241.266854][ T4292] Call Trace: [ 241.270176][ T4292] [ 241.273145][ T4292] dump_stack_lvl+0x188/0x24e [ 241.277883][ T4292] ? show_regs_print_info+0x12/0x12 [ 241.283138][ T4292] ? load_image+0x400/0x400 [ 241.287808][ T4292] sysfs_create_dir_ns+0x26a/0x290 [ 241.292998][ T4292] ? sysfs_warn_dup+0xa0/0xa0 [ 241.297807][ T4292] ? do_raw_spin_unlock+0x11d/0x230 [ 241.303066][ T4292] kobject_add_internal+0x61c/0xcc0 [ 241.308420][ T4292] kobject_add+0x160/0x230 [ 241.313162][ T4292] ? kobject_init+0x1d0/0x1d0 [ 241.317985][ T4292] ? klist_children_get+0x50/0x50 [ 241.323058][ T4292] ? get_device_parent+0x121/0x3f0 [ 241.328224][ T4292] device_add+0x483/0xfb0 [ 241.332595][ T4292] ? kmem_cache_free+0xf7/0x290 [ 241.337594][ T4292] hci_conn_add_sysfs+0xd1/0x1e0 [ 241.342586][ T4292] le_conn_complete_evt+0x1062/0x1670 [ 241.348477][ T4292] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 241.354879][ T4292] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 241.360577][ T4292] ? skb_pull_data+0xf7/0x200 [ 241.365335][ T4292] hci_le_conn_complete_evt+0x183/0x440 [ 241.371053][ T4292] ? hci_remote_host_features_evt+0x270/0x270 [ 241.377393][ T4292] hci_event_packet+0x7b9/0x1280 [ 241.382513][ T4292] ? bis_list+0x280/0x280 [ 241.386909][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 241.392938][ T4292] ? kcov_remote_start+0x4c7/0x7e0 [ 241.398123][ T4292] ? bt_info+0x160/0x180 [ 241.402510][ T4292] ? hci_send_to_monitor+0x9c/0x4a0 [ 241.407766][ T4292] hci_rx_work+0x3eb/0xd40 [ 241.412243][ T4292] ? _raw_spin_unlock+0x40/0x40 [ 241.417175][ T4292] ? process_one_work+0x7b0/0x1160 [ 241.422513][ T4292] process_one_work+0x8a2/0x1160 [ 241.427528][ T4292] ? worker_detach_from_pool+0x240/0x240 [ 241.433308][ T4292] ? _raw_spin_lock_irq+0xb7/0xf0 [ 241.438560][ T4292] ? _raw_spin_lock_irqsave+0x100/0x100 [ 241.444158][ T4292] ? kthread_data+0x4b/0xc0 [ 241.448763][ T4292] worker_thread+0xaa2/0x1270 [ 241.453523][ T4292] kthread+0x29d/0x330 [ 241.457899][ T4292] ? worker_clr_flags+0x1a0/0x1a0 [ 241.463050][ T4292] ? kthread_blkcg+0xd0/0xd0 [ 241.467878][ T4292] ret_from_fork+0x1f/0x30 [ 241.472368][ T4292] [ 241.485335][ T4292] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 241.500027][ T4292] Bluetooth: hci3: failed to register connection device [ 243.755954][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 243.847850][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 243.890180][ T4708] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 243.938976][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.999869][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.129828][ T4708] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 244.152681][ T4708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.189206][ T4708] usb 6-1: config 0 descriptor?? [ 245.345371][ T4369] bond0 (unregistering): Released all slaves [ 245.470117][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 245.658269][ T4708] usb 6-1: Cannot read MAC address [ 245.663609][ T4708] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 245.694967][ T7] usb 4-1: USB disconnect, device number 5 [ 245.699308][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.736346][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.773389][ T4708] usb 6-1: USB disconnect, device number 3 [ 245.864048][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.893854][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.981599][ T5571] device veth0_vlan entered promiscuous mode [ 246.043643][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.348599][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.621012][ T5571] device veth1_vlan entered promiscuous mode [ 246.701241][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.322336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.366799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.423127][ T5571] device veth0_macvtap entered promiscuous mode [ 247.459311][ T5571] device veth1_macvtap entered promiscuous mode [ 247.556561][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.617222][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.657942][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.680203][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.712179][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.925628][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 247.944352][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.012639][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.025902][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.055166][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.064564][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.100719][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.123763][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.162504][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.191343][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.224160][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.257322][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.288977][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.348743][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.391203][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.407951][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.449167][ T5571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.476022][ T5571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.506732][ T5571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.552164][ T5571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.880427][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.895575][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.933988][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.005428][ T5295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.014708][ T5295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.092259][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.726200][ T4535] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 251.968369][ T4535] usb 3-1: Using ep0 maxpacket: 8 [ 251.983034][ T4535] usb 3-1: config 1 interface 0 altsetting 121 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.024894][ T4535] usb 3-1: config 1 interface 0 has no altsetting 0 [ 252.050745][ T4535] usb 3-1: string descriptor 0 read error: -22 [ 252.075209][ T4535] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.40 [ 252.118595][ T4535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.573867][ T4535] ntrig 0003:1B96:000A.0002: unexpected long global item [ 252.602227][ T4535] ntrig 0003:1B96:000A.0002: parse failed [ 252.621758][ T4535] ntrig: probe of 0003:1B96:000A.0002 failed with error -22 [ 252.773896][ T4535] usb 3-1: USB disconnect, device number 7 [ 255.283949][ T6036] input: syz1 as /devices/virtual/input/input5 [ 255.927927][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935291][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.325630][ T4653] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 257.525902][ T4653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 257.528006][ T6074] o2cb: This node has not been configured. [ 257.543427][ T6074] o2cb: Cluster check failed. Fix errors before retrying. [ 257.719851][ T6074] (syz.2.432,6074,1):user_dlm_register:674 ERROR: status = -22 [ 258.400416][ T6074] (syz.2.432,6074,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 258.515516][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.522827][ C0] bridge0: topology change detected, propagating [ 258.529805][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.537157][ C0] bridge0: topology change detected, propagating [ 258.550109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.568167][ T4653] usb 4-1: string descriptor 0 read error: -22 [ 258.574476][ T4653] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 258.652695][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.752157][ T6065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.141665][ T4535] usb 4-1: USB disconnect, device number 6 [ 260.311697][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.6.433'. [ 263.848398][ T6137] tipc: Started in network mode [ 264.226168][ T6137] tipc: Node identity 625f1f911fb1, cluster identity 4711 [ 264.234402][ T6137] tipc: Enabled bearer , priority 0 [ 264.470700][ T6137] device syzkaller0 entered promiscuous mode [ 264.561378][ T6139] tipc: Resetting bearer [ 264.630882][ T6136] tipc: Resetting bearer [ 264.853769][ T6136] tipc: Disabling bearer [ 271.336043][ T6221] vivid-004: kernel_thread() failed [ 275.723241][ T6271] device macvlan0 entered promiscuous mode [ 275.734548][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 275.734565][ T27] audit: type=1326 audit(1780209593.286:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 275.826115][ T6271] device bond1 entered promiscuous mode [ 275.841854][ T6271] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 275.861495][ T27] audit: type=1326 audit(1780209593.286:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 275.888045][ T6271] device bond1 left promiscuous mode [ 275.941321][ T27] audit: type=1326 audit(1780209593.326:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 275.988895][ T6279] kvm [6278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x860 [ 276.029178][ T27] audit: type=1326 audit(1780209593.326:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 276.091365][ T6279] kvm [6278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8e0 [ 276.138057][ T27] audit: type=1326 audit(1780209593.326:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 276.180745][ T6279] kvm [6278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8e0 [ 276.219081][ T27] audit: type=1326 audit(1780209593.326:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 276.286262][ T27] audit: type=1326 audit(1780209593.326:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 276.399295][ T27] audit: type=1326 audit(1780209593.326:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 276.471990][ T27] audit: type=1326 audit(1780209593.326:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcdecf9ce59 code=0x7ffc0000 [ 285.010143][ T6368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 285.261881][ T6377] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 285.276888][ T6377] Error parsing options; rc = [-22] [ 286.835616][ T4653] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 287.145643][ T4653] usb 4-1: Using ep0 maxpacket: 32 [ 287.153428][ T4653] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 287.179972][ T4653] usb 4-1: config 0 has no interface number 0 [ 287.202927][ T4653] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 287.223182][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.098459][ T4292] Bluetooth: hci2: command 0x0411 tx timeout [ 288.125552][ T4653] usb 4-1: Product: syz [ 288.129823][ T4653] usb 4-1: Manufacturer: syz [ 288.134643][ T4653] usb 4-1: SerialNumber: syz [ 288.142192][ T4653] usb 4-1: config 0 descriptor?? [ 288.147781][ T4653] usb 4-1: can't set config #0, error -71 [ 288.155758][ T4653] usb 4-1: USB disconnect, device number 7 [ 295.239118][ T6441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.255834][ T4653] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 295.306354][ T6441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.335225][ T6441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.419983][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.448879][ T4653] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.465630][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.494302][ T4653] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.504395][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.558090][ T4653] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.577011][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.611078][ T4653] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.625784][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.646918][ T4653] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.665318][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.675651][ T4653] usb 7-1: Manufacturer: syz [ 295.687471][ T4653] usb 7-1: config 0 descriptor?? [ 295.701393][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.723011][ T4653] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 295.748345][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.780646][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.812632][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.839999][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.861842][ T6445] kvm [6444]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x860 [ 295.880064][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.113347][ T6445] kvm [6444]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8e0 [ 296.555973][ T6468] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 296.602234][ T6468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.635743][ T4816] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 296.759679][ T6468] bond1: (slave ip6gretap1): making interface the new active one [ 296.793305][ T6468] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 296.805389][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 296.888104][ T4816] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 296.927452][ T4816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.951931][ T4816] usb 6-1: Product: syz [ 296.975591][ T4816] usb 6-1: Manufacturer: syz [ 296.980719][ T4816] usb 6-1: SerialNumber: syz [ 296.985898][ T6468] syz.2.536 (6468) used greatest stack depth: 20368 bytes left [ 297.145988][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.175249][ T27] audit: type=1326 audit(1780209614.726:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 298.012743][ T4262] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 298.098799][ T27] audit: type=1326 audit(1780209614.756:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 298.201616][ T27] audit: type=1326 audit(1780209614.756:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 298.237671][ T4262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 298.248527][ T4816] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 298.273805][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 299.733704][ T27] audit: type=1326 audit(1780209614.756:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 299.784587][ T4816] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 299.812481][ T4262] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 299.836902][ T4816] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.875085][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.896973][ T4816] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.937193][ T4262] usb 1-1: Product: syz [ 299.941523][ T4262] usb 1-1: Manufacturer: syz [ 299.966001][ T27] audit: type=1326 audit(1780209614.756:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 299.986932][ T4262] usb 1-1: SerialNumber: syz [ 300.043859][ T4262] usb 1-1: config 0 descriptor?? [ 300.055673][ T27] audit: type=1326 audit(1780209614.756:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 300.081913][ T4653] usb 7-1: USB disconnect, device number 2 [ 300.103311][ T4816] lan78xx: probe of 6-1:1.0 failed with error -71 [ 300.141495][ T4816] usb 6-1: USB disconnect, device number 4 [ 300.180506][ T4262] usb 1-1: can't set config #0, error -71 [ 300.263164][ T4262] usb 1-1: USB disconnect, device number 9 [ 300.355600][ T27] audit: type=1326 audit(1780209615.566:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 300.465531][ T27] audit: type=1326 audit(1780209615.566:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02bad9ce59 code=0x7ffc0000 [ 301.089463][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 302.173498][ T6528] kvm [6527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x860 [ 302.300278][ T6528] kvm [6527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8e0 [ 302.394145][ T6528] kvm [6527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8e0 [ 303.996423][ T4816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.146021][ T4262] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 304.257232][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.507742][ T4816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.545803][ T4262] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 304.566866][ T4262] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 304.571853][ T4816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.540125][ T4816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.555578][ T4262] usb 1-1: Product: syz [ 305.563571][ T4262] usb 1-1: Manufacturer: syz [ 305.569796][ T4262] usb 1-1: SerialNumber: syz [ 305.612434][ T4262] usb 1-1: config 0 descriptor?? [ 305.621728][ T4816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.747510][ T4816] usb 4-1: config 0 descriptor?? [ 305.968776][ T4262] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 306.113287][ T6569] hugetlbfs: syz.2.562 (6569): Using mlock ulimits for SHM_HUGETLB is obsolete [ 306.174229][ T4262] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 306.185924][ T4262] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 306.209433][ T4262] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 306.217407][ T4816] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 306.310752][ T4816] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 306.366936][ T4262] peak_usb: probe of 1-1:0.0 failed with error -8 [ 306.394213][ T4262] usb 1-1: USB disconnect, device number 10 [ 307.531266][ T4262] usb 4-1: USB disconnect, device number 8 [ 308.119086][ T6610] autofs4:pid:6610:autofs_fill_super: called with bogus options [ 308.584832][ T6625] ubi31: attaching mtd0 [ 308.634680][ T6625] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 309.215700][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 312.375701][ T4816] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 312.584046][ T4816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 312.603728][ T4816] usb 6-1: not running at top speed; connect to a high speed hub [ 312.634949][ T4816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.671863][ T4816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.697361][ T4816] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 312.727909][ T4816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.751424][ T4816] usb 6-1: Product: syz [ 312.774594][ T4816] usb 6-1: Manufacturer: syz [ 312.783435][ T4816] usb 6-1: SerialNumber: syz [ 312.835752][ T4708] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.391173][ T4708] usb 3-1: Using ep0 maxpacket: 8 [ 314.467822][ T4816] usb 6-1: 3:0: cannot get min/max values for control 12 (id 3) [ 314.477366][ T4708] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 314.536979][ T4708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.626587][ T4816] usb 6-1: USB disconnect, device number 5 [ 314.641679][ T4708] usb 3-1: config 0 has no interface number 0 [ 314.699488][ T4708] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 314.738866][ T4708] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 314.756552][ T4708] usb 3-1: config 0 interface 255 has no altsetting 0 [ 314.782290][ T4708] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 314.855561][ T4708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.894636][ T4708] usb 3-1: Product: syz [ 315.025573][ T4708] usb 3-1: Manufacturer: syz [ 315.030486][ T4708] usb 3-1: SerialNumber: syz [ 315.125111][ T4708] usb 3-1: config 0 descriptor?? [ 315.226214][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.810163][ T4708] streamzap 3-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 315.987043][ T4708] usb 3-1: USB disconnect, device number 8 [ 316.534502][ T6708] Bluetooth: MGMT ver 1.22 [ 316.561145][ T6712] input: syz1 as /devices/virtual/input/input6 [ 318.030367][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.036878][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.431788][ T6745] binder: 6743:6745 ioctl c0306201 200000000300 returned -11 [ 322.134887][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 322.696524][ T6799] batman_adv: batadv0: Adding interface: dummy0 [ 322.721697][ T6799] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.807047][ T6799] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 330.757919][ T6893] (syz.2.651,6893,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 330.766668][ T6893] (syz.2.651,6893,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 331.513639][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 334.166580][ T6932] netlink: 'syz.6.664': attribute type 4 has an invalid length. [ 334.264599][ T6936] netlink: 'syz.6.664': attribute type 4 has an invalid length. [ 334.825868][ T4653] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 335.025700][ T4653] usb 3-1: Using ep0 maxpacket: 16 [ 335.053575][ T4653] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 335.062690][ T4653] usb 3-1: config 127 has no interface number 0 [ 335.072345][ T4653] usb 3-1: config 127 interface 124 has no altsetting 0 [ 335.105639][ T4653] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 335.115802][ T4653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.123962][ T4653] usb 3-1: Product: syz [ 335.132271][ T4653] usb 3-1: Manufacturer: syz [ 335.139675][ T4653] usb 3-1: SerialNumber: syz [ 335.831599][ T6955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.117035][ T4653] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 337.268790][ T4653] usb 3-1: failed to restore interface 124 altsetting 11 (error=-71) [ 337.282984][ T4653] usb 3-1: USB disconnect, device number 9 [ 337.622256][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.630069][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.643542][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.657678][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.676302][ T6978] batman_adv: batadv0: Interface activated: dummy0 [ 337.694742][ T6978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.500325][ T6991] syz.0.678 uses obsolete (PF_INET,SOCK_PACKET) [ 341.144270][ T7024] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 341.201565][ T7024] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 341.232158][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.691'. [ 344.662535][ T7055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 348.421248][ T7105] (syz.3.710,7105,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 348.430135][ T7105] (syz.3.710,7105,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 349.762565][ T7120] trusted_key: encrypted_key: insufficient parameters specified [ 349.775804][ T7120] trusted_key: encrypted_key: insufficient parameters specified [ 350.766944][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 354.933865][ T7162] binder: 7157:7162 unknown command 0 [ 354.950776][ T7162] binder: 7157:7162 ioctl c0306201 200000000480 returned -22 [ 354.965509][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 355.056439][ T7165] (syz.0.724,7165,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 355.065809][ T7165] (syz.0.724,7165,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 355.243594][ C1] ------------[ cut here ]------------ [ 355.249543][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 355.259672][ C1] Modules linked in: [ 355.263618][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 355.270999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.281182][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 355.287659][ C1] Code: 24 4c 89 e7 e8 fe 72 09 f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 d2 d0 f7 0f 0b e9 f6 f7 ff ff e8 ed d2 d0 f7 <0f> 0b e9 48 fb ff ff e8 e1 d2 d0 f7 48 c7 c7 50 09 fb 8d 4c 89 e6 [ 355.307397][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 355.313528][ C1] RAX: ffffffff89b1b3c3 RBX: ffffffff89b1a1c6 RCX: ffff88813fed9dc0 [ 355.321613][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.329601][ C1] RBP: 0000000000000000 R08: ffff88813fed9dc0 R09: 0000000000000003 [ 355.337605][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059c52228 [ 355.345617][ C1] R13: dffffc0000000000 R14: ffff888059c52760 R15: ffff888055c0dc24 [ 355.353612][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 355.362909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.369527][ C1] CR2: 0000200000023000 CR3: 00000000728b3000 CR4: 00000000003506e0 [ 355.377612][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.385805][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.393977][ C1] Call Trace: [ 355.397299][ C1] [ 355.400161][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 355.405860][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 355.411435][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 355.417061][ C1] ? read_lock_is_recursive+0x10/0x10 [ 355.422622][ C1] __iterate_interfaces+0x243/0x500 [ 355.427849][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 355.434178][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 355.441767][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 355.448145][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 355.455186][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 355.460404][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 355.465625][ C1] ? hw_scan_work+0xf50/0xf50 [ 355.470409][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 355.475652][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 355.481742][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 355.487160][ C1] handle_softirqs+0x2a1/0x930 [ 355.491947][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 355.496835][ C1] ? do_softirq+0x210/0x210 [ 355.501348][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 355.506568][ C1] __irq_exit_rcu+0x13b/0x230 [ 355.511255][ C1] ? irq_exit_rcu+0x20/0x20 [ 355.515783][ C1] irq_exit_rcu+0x5/0x20 [ 355.520028][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 355.525687][ C1] [ 355.528736][ C1] [ 355.531684][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 355.537816][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 355.543703][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 a0 eb de 08 e8 5b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 355.563419][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 355.569507][ C1] RAX: 3afe38598004a700 RBX: 0000000000000000 RCX: 3afe38598004a700 [ 355.577603][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60 [ 355.585877][ C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 355.593860][ C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff88813fed9dc0 [ 355.601871][ C1] R13: dffffc0000000000 R14: ffff88802a6e0000 R15: ffff8880b8f3b5d0 [ 355.609876][ C1] ? finish_task_switch+0x265/0x8f0 [ 355.615179][ C1] __schedule+0x11d9/0x40e0 [ 355.619766][ C1] ? __sched_text_start+0x8/0x8 [ 355.624641][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 355.630864][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 355.638177][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 355.644258][ C1] schedule_idle+0x4a/0x90 [ 355.648698][ C1] do_idle+0x635/0x680 [ 355.652775][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 355.658127][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 355.663914][ C1] ? schedule_idle+0x57/0x90 [ 355.668535][ C1] cpu_startup_entry+0x3f/0x60 [ 355.673306][ C1] start_secondary+0xe4/0xf0 [ 355.677933][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 355.683940][ C1] [ 355.687091][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.694473][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 355.701760][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.711921][ C1] Call Trace: [ 355.715205][ C1] [ 355.718240][ C1] dump_stack_lvl+0x188/0x24e [ 355.722934][ C1] ? memcpy+0x3c/0x60 [ 355.726962][ C1] ? show_regs_print_info+0x12/0x12 [ 355.732169][ C1] ? load_image+0x400/0x400 [ 355.736687][ C1] panic+0x2e5/0x730 [ 355.740695][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 355.745203][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 355.751369][ C1] __warn+0x2f8/0x4f0 [ 355.755446][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 355.761192][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 355.767388][ C1] report_bug+0x2ba/0x4f0 [ 355.771740][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 355.777504][ C1] handle_bug+0x3a/0x70 [ 355.781679][ C1] exc_invalid_op+0x16/0x40 [ 355.786211][ C1] asm_exc_invalid_op+0x16/0x20 [ 355.791125][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 355.797515][ C1] Code: 24 4c 89 e7 e8 fe 72 09 f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 d2 d0 f7 0f 0b e9 f6 f7 ff ff e8 ed d2 d0 f7 <0f> 0b e9 48 fb ff ff e8 e1 d2 d0 f7 48 c7 c7 50 09 fb 8d 4c 89 e6 [ 355.817593][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 355.823661][ C1] RAX: ffffffff89b1b3c3 RBX: ffffffff89b1a1c6 RCX: ffff88813fed9dc0 [ 355.831715][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.839780][ C1] RBP: 0000000000000000 R08: ffff88813fed9dc0 R09: 0000000000000003 [ 355.847751][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059c52228 [ 355.855717][ C1] R13: dffffc0000000000 R14: ffff888059c52760 R15: ffff888055c0dc24 [ 355.863774][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 355.869344][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 355.875300][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 355.880966][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 355.886535][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 355.892145][ C1] ? read_lock_is_recursive+0x10/0x10 [ 355.897533][ C1] __iterate_interfaces+0x243/0x500 [ 355.902738][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 355.908977][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 355.916453][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 355.923050][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 355.930179][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 355.935388][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 355.940609][ C1] ? hw_scan_work+0xf50/0xf50 [ 355.945302][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 355.950512][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 355.956752][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 355.961877][ C1] handle_softirqs+0x2a1/0x930 [ 355.966648][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 355.972165][ C1] ? do_softirq+0x210/0x210 [ 355.976788][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 355.982098][ C1] __irq_exit_rcu+0x13b/0x230 [ 355.986893][ C1] ? irq_exit_rcu+0x20/0x20 [ 355.991408][ C1] irq_exit_rcu+0x5/0x20 [ 355.995739][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 356.001371][ C1] [ 356.004299][ C1] [ 356.007231][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 356.013230][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 356.019137][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 a0 eb de 08 e8 5b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 356.038916][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 356.045069][ C1] RAX: 3afe38598004a700 RBX: 0000000000000000 RCX: 3afe38598004a700 [ 356.053034][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60 [ 356.061262][ C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 356.069235][ C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff88813fed9dc0 [ 356.077403][ C1] R13: dffffc0000000000 R14: ffff88802a6e0000 R15: ffff8880b8f3b5d0 [ 356.085594][ C1] ? finish_task_switch+0x265/0x8f0 [ 356.090804][ C1] __schedule+0x11d9/0x40e0 [ 356.095540][ C1] ? __sched_text_start+0x8/0x8 [ 356.100726][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 356.106913][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 356.114569][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 356.120820][ C1] schedule_idle+0x4a/0x90 [ 356.125330][ C1] do_idle+0x635/0x680 [ 356.129487][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 356.134684][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 356.140579][ C1] ? schedule_idle+0x57/0x90 [ 356.145189][ C1] cpu_startup_entry+0x3f/0x60 [ 356.149952][ C1] start_secondary+0xe4/0xf0 [ 356.154548][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 356.160469][ C1] [ 356.163996][ C1] Kernel Offset: disabled [ 356.168540][ C1] Rebooting in 86400 seconds..