last executing test programs: 6.673651543s ago: executing program 1 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x500, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "9d2b4a69824c25baa67bc647000259844fa6ff537aef06c510a0c47fe5f51fe5cac7a65c2a587348777ef909048d38f6e6a9b0fe99a26c88f527cda212a8677bc8727155e67d227c6da065ba9d8dfc8e6f120f3e6349044abd09f4d64bd880567f5464b4a1c6def72cebe6cab50787df12956edc0529e74681d25423863e5119cdd32c27f048c65183cbb9edc36beff17c2c8d0fb0a21b738d5d28f10f4ae8651be9b771fd78bf79bbffa0c11c01d73b039eb9d4a907"}]}, @NFT_MSG_NEWSET={0x364, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DESC={0x324, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1a4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x281}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd328}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd44e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6295}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x581}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}]}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELSET={0x48, 0xb, 0xa, 0xf84, 0x0, 0x0, {0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x26, 0xd, 0x1, 0x0, "7f04e940896c4a4f4a4c49b755d67289cca7c1c9a161eaf2bf0e806e92f199aa7a42"}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x381}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x590}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty, 0x3}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x1c) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000080)="10", 0x1}], 0x1}, 0x40) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) unshare(0x26020480) unshare(0x2040000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f0000000540)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6494484e", @ANYRES16=r6, @ANYBLOB="01000000000000000000390000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300ffffffff"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x164, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x48}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r10, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) 4.021976055s ago: executing program 1 (id=369): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000270100000000000000000000181400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a00000095000000000000003e980000000000002608"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4000, 0x0, @loopback, 0x8fb}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.003008236s ago: executing program 3 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 3.984933457s ago: executing program 2 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x3, &(0x7f00000000c0)={0x5, 0x8000000000000001}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='\bpiGs '], 0x6) 3.666885944s ago: executing program 3 (id=373): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) 2.99409184s ago: executing program 1 (id=374): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 2.957908003s ago: executing program 2 (id=376): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000540)={'veth1_macvtap\x00', 0xc26d}) 2.866671641s ago: executing program 3 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x3, &(0x7f00000000c0)={0x5, 0x8000000000000001}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r4, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x3}, {0x6, 0x4}]}) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='\bpiGs '], 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000800"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x3c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x64045010) 2.739650911s ago: executing program 1 (id=379): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) splice(r3, &(0x7f0000000300)=0x3, r3, 0x0, 0x6, 0x2) timer_gettime(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = syz_open_procfs(0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[], 0x3, 0x18a, &(0x7f0000002480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_mount_image$udf(&(0x7f0000003640), &(0x7f00000030c0)='./file0\x00', 0x326b089, &(0x7f0000003600)=ANY=[], 0xfe, 0x4ce, &(0x7f0000003680)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.666290988s ago: executing program 2 (id=381): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.534164918s ago: executing program 4 (id=382): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000f3a9aaaaaaaaaa88a804008100000086dd60f81fcb00303b001c80000000000000000000000000002eff0200000000000000000097302c0ea9355dc37800000000604aa1d300000000fc01000000000000000000000000000020010000000002000000000000000001"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x47, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000000000000100000008000100030000002c0004800500da0bf36c2afe0aea0300000000000500030005000000050003000000000005000300010000000800020002"], 0x50}}, 0x0) 2.406766179s ago: executing program 3 (id=383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 2.406291259s ago: executing program 4 (id=384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x80805, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg$inet(r1, &(0x7f0000006f80)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x160, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x130, 0x2, {{}, [@TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc}]}, @TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x100000001}, {0xc}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}, {0xc}]}]}}}]}, 0x160}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r0, @ANYRESHEX=r3], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto(&(0x7f0000000040)='wlan1\x00', r7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x3a) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000340)="23000000010011", 0x7) 2.106177134s ago: executing program 3 (id=386): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x3, &(0x7f00000000c0)={0x5, 0x8000000000000001}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='\bpiGs '], 0x6) 1.840160686s ago: executing program 2 (id=388): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) 1.815907829s ago: executing program 1 (id=389): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 1.662521292s ago: executing program 2 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d3b6d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) 1.636225333s ago: executing program 1 (id=393): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) fstatfs(r0, &(0x7f00000001c0)=""/198) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22, 0x8}, 0x2b) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7ff, 0x8000, 0xfff, 0x400, 0x10}}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d2406000003080000000000000c24020501010608000010000c24020000000300000000000924060006010000000924030200000005000924060500010000000904010000010200000904010101018200000905010900044000000725010000830009040200000102000009040201010102000009058209400000000007250100020000"], 0x0) 1.417975142s ago: executing program 4 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x3, &(0x7f00000000c0)={0x5, 0x8000000000000001}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r4, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x3}, {0x6, 0x4}]}) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='\bpiGs '], 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000800"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x3c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x64045010) 958.977ms ago: executing program 0 (id=395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x44, r2, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x81, 0x7}, {}, {}, {}], "040ded930dde6d5a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x5}, {}, {}], "7ecbad144922f925"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 908.832824ms ago: executing program 4 (id=396): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) write(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 777.996605ms ago: executing program 0 (id=397): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 700.029291ms ago: executing program 2 (id=398): syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) 684.475033ms ago: executing program 0 (id=399): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 542.014445ms ago: executing program 4 (id=400): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0xc54c295c) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x1, 0x1, 0x7, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x6, 0x4, 0x1, 0xfffffffffffffe81, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0xa4, &(0x7f0000000300)=""/164, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x6, 0x33}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x1, 0x0, 0xa}, {0x1, 0x4, 0xe, 0x3}, {0x1, 0x5, 0xf, 0xa}, {0x5, 0x4, 0xe, 0x7}], 0x10, 0xb8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='afs_call_done\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000008000000000000001080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) 330.701752ms ago: executing program 4 (id=401): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 232.779211ms ago: executing program 0 (id=402): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) 222.960621ms ago: executing program 3 (id=403): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 120.62404ms ago: executing program 0 (id=404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x80}, {0x2000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r3, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="0d652c1aa3b2a80e6e0136deb7e056acc530d75d3ff6047bfaff9d56065225e6f1124189009742b84c33acf28d600bc129e5f5f093b6b767df119493db9cbef9526086969356aefcc1543676b03d9911dae25107c76338db86b81524226a760775934d1a61294123716f100037d8971f1ebe3707cac31a9e1cfa0a12471443eb0376392c7191f9ae7b73638b6a8b15a7677beb474ed7f57071425af733f70950e1e7638e84dd59f5565d9554be80a192e2f5cf5a6c0fda5646", 0xb9}], 0x1}}], 0x1, 0x48041) 0s ago: executing program 0 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ftruncate(0xffffffffffffffff, 0x410001) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0x7ff) fcntl$addseals(r4, 0x409, 0x3) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): ace will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.845430][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.863744][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.870697][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.897007][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.919609][ T3635] team0: Port device team_slave_1 added [ 54.926847][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.934293][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.960868][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.987940][ T3637] device hsr_slave_0 entered promiscuous mode [ 54.994705][ T3637] device hsr_slave_1 entered promiscuous mode [ 55.012922][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.019941][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.045909][ T3649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.059840][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.067177][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.093239][ T3649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.121722][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.128729][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.154733][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.190631][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.197662][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.224321][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.246404][ T3643] device hsr_slave_0 entered promiscuous mode [ 55.253184][ T3643] device hsr_slave_1 entered promiscuous mode [ 55.259736][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.267614][ T3643] Cannot create hsr debugfs directory [ 55.325938][ T3636] device hsr_slave_0 entered promiscuous mode [ 55.332674][ T3636] device hsr_slave_1 entered promiscuous mode [ 55.339417][ T3636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.347914][ T3636] Cannot create hsr debugfs directory [ 55.354075][ T3645] Bluetooth: hci0: command tx timeout [ 55.359711][ T3645] Bluetooth: hci2: command tx timeout [ 55.362805][ T3648] Bluetooth: hci1: command tx timeout [ 55.397276][ T3649] device hsr_slave_0 entered promiscuous mode [ 55.405160][ T3649] device hsr_slave_1 entered promiscuous mode [ 55.411651][ T3649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.419265][ T3649] Cannot create hsr debugfs directory [ 55.433517][ T3645] Bluetooth: hci4: command tx timeout [ 55.435905][ T3644] Bluetooth: hci3: command tx timeout [ 55.473592][ T3635] device hsr_slave_0 entered promiscuous mode [ 55.480129][ T3635] device hsr_slave_1 entered promiscuous mode [ 55.486855][ T3635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.494545][ T3635] Cannot create hsr debugfs directory [ 55.741326][ T3637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.751282][ T3637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.766508][ T3637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.788863][ T3637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.836325][ T3636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.851416][ T3636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.872766][ T3636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.882143][ T3636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.927112][ T3643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.937622][ T3643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.948420][ T3643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.960266][ T3643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.059664][ T3649] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.072520][ T3649] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.092619][ T3637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.107252][ T3649] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.118969][ T3649] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.154329][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.164321][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.177149][ T3635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.195333][ T3637] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.204044][ T3635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.234543][ T3635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.245232][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.260081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.269723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.278993][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.286444][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.302396][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.309599][ T3635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.342359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.351124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.362041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.372786][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.379926][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.387851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.397196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.408818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.416810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.442920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.451302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.460634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.471019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.479840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.489319][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.505448][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.527247][ T3637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.538648][ T3637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.550313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.559445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.568270][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.575396][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.584605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.593314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.601607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.610076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.619373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.628274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.637992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.646439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.675022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.689790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.701824][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.708987][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.720637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.731396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.740638][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.747882][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.757950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.767279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.776212][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.783424][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.791441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.826076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.838103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.849529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.861557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.872386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.889623][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.900328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.920404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.929889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.938764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.948317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.957943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.967465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.005403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.016383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.025883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.035504][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.044322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.054607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.062087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.071748][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.082276][ T3649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.113506][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.122163][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.132278][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.140940][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.170195][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.180792][ T3649] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.189822][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.200689][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.213327][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.245164][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.260659][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.269883][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.279902][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.287015][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.294819][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.304844][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.313384][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.320549][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.329177][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.338125][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.350323][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.362774][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.378941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.389706][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.406199][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.415087][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.443189][ T3644] Bluetooth: hci1: command tx timeout [ 57.443203][ T3648] Bluetooth: hci2: command tx timeout [ 57.448594][ T3644] Bluetooth: hci0: command tx timeout [ 57.469481][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.479396][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.490266][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.499785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.512256][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.513290][ T3648] Bluetooth: hci4: command tx timeout [ 57.521450][ T3644] Bluetooth: hci3: command tx timeout [ 57.532294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.549216][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.595718][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.602853][ T3649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.616696][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.631165][ T3637] device veth0_vlan entered promiscuous mode [ 57.638742][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.656579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.667320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.678487][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.688116][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.700120][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.712688][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.719801][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.728468][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.738097][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.746808][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.753931][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.762131][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.771157][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.778807][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.786452][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.794335][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.801987][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.826686][ T3637] device veth1_vlan entered promiscuous mode [ 57.846400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.865918][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.899489][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.921283][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.940376][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.949803][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.959612][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.004228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.013672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.022356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.031815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.040932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.049678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.072541][ T3649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.085220][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.130785][ T3637] device veth0_macvtap entered promiscuous mode [ 58.145476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.156050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.165949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.180908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.202544][ T3636] device veth0_vlan entered promiscuous mode [ 58.213669][ T3637] device veth1_macvtap entered promiscuous mode [ 58.230765][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.254297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.267234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.277620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.289909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.298142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.307784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.316893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.326407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.340393][ T3636] device veth1_vlan entered promiscuous mode [ 58.370018][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.405307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.424626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.432857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.451145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.467828][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.500653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.517882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.527277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.536461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.550342][ T3637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.560200][ T3637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.569555][ T3637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.578549][ T3637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.597079][ T3636] device veth0_macvtap entered promiscuous mode [ 58.616644][ T3636] device veth1_macvtap entered promiscuous mode [ 58.624796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.634749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.643750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.651666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.685827][ T3649] device veth0_vlan entered promiscuous mode [ 58.701656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.710737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.720440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.728832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.737660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.746301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.755941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.764031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.772232][ T3643] device veth0_vlan entered promiscuous mode [ 58.795029][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.807045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.815250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.823737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.831545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.841259][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.852587][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.865124][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.877950][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.888625][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.902203][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.929603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.938521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.948784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.958322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.967555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.976798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.990042][ T3649] device veth1_vlan entered promiscuous mode [ 59.008894][ T3643] device veth1_vlan entered promiscuous mode [ 59.019768][ T3636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029290][ T3636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.039051][ T3636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.048064][ T3636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.112462][ T3635] device veth0_vlan entered promiscuous mode [ 59.127700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.132698][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.145035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.149567][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.155301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.168684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.177913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.224833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.237054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.253855][ T3649] device veth0_macvtap entered promiscuous mode [ 59.278540][ T3635] device veth1_vlan entered promiscuous mode [ 59.293847][ T3643] device veth0_macvtap entered promiscuous mode [ 59.304571][ T3649] device veth1_macvtap entered promiscuous mode [ 59.320797][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.330297][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.339885][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.348230][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.357312][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.367156][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.383540][ T3643] device veth1_macvtap entered promiscuous mode [ 59.402045][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.406690][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.414104][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.420971][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.439390][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.442473][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.450073][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.467888][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.481176][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.492010][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.502614][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.513374][ T3648] Bluetooth: hci2: command tx timeout [ 59.518795][ T3648] Bluetooth: hci1: command tx timeout [ 59.519011][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.524551][ T3645] Bluetooth: hci0: command tx timeout [ 59.535848][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.552135][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.578685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.587618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.595712][ T3644] Bluetooth: hci4: command tx timeout [ 59.595721][ T3645] Bluetooth: hci3: command tx timeout [ 59.597983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.615415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.624136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.632657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.641654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.651031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.668926][ T3649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.677960][ T3649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.686978][ T3649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.696545][ T3649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.736848][ T3635] device veth0_macvtap entered promiscuous mode [ 59.744542][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.758350][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.767727][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.781184][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.791249][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.800296][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.811344][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.821534][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.832299][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.843847][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.854506][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.865971][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.884473][ T3635] device veth1_macvtap entered promiscuous mode [ 59.905864][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.915302][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.927624][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.948844][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.965239][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.976251][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.987756][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.987775][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.987784][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.987795][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.991420][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.026723][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.027490][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.110584][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.115518][ T3716] loop0: detected capacity change from 0 to 2048 [ 60.127371][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.136107][ T3718] loop3: detected capacity change from 0 to 512 [ 60.139999][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.161476][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.172275][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.187360][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.198118][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.208885][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.217875][ T3718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.221517][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.239426][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.255017][ T3718] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff) [ 60.259849][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.266648][ T3627] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.290005][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.314970][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.336842][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.348013][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.359129][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.369898][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.376093][ T26] audit: type=1326 audit(1729071407.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe10ed7dff9 code=0x0 [ 60.387146][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.419747][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.428913][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.437942][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.448618][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.498286][ T3635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.507532][ T3635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.516847][ T3635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.527386][ T3635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.546384][ T3643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.556026][ T3643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.565838][ T3643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.576171][ T3643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.622474][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.632124][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.665623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.728609][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.737544][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.742065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.752319][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.763791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.779042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.838041][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.861808][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.872884][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.883174][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.900896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.911636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.926157][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.941176][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.973243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.008294][ T3636] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 61.050675][ T3728] Bluetooth: MGMT ver 1.22 [ 61.088030][ T3636] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 3732527096 in block_group 0 [ 61.153514][ T3636] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 61.169048][ T3730] loop2: detected capacity change from 0 to 1024 [ 61.193771][ T3636] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error [ 61.281009][ T3730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=d000c09c, mo2=0002] [ 61.305027][ T3730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.329618][ T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm kworker/u4:0: Invalid inode table block 3732527096 in block_group 0 [ 61.376512][ T3643] EXT4-fs (loop2): unmounting filesystem. [ 61.415646][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 61.510870][ T3636] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 3732527096 in block_group 0 [ 61.571836][ T3636] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 61.583744][ T3636] EXT4-fs error (device loop3): ext4_quota_off:7089: inode #3: comm syz-executor: mark_inode_dirty error [ 61.595157][ T3648] Bluetooth: hci0: command tx timeout [ 61.595193][ T3648] Bluetooth: hci1: command tx timeout [ 61.595217][ T3648] Bluetooth: hci2: command tx timeout [ 61.613248][ T3636] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 3732527096 in block_group 0 [ 61.627477][ T3636] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 61.674585][ T3644] Bluetooth: hci4: command tx timeout [ 61.680027][ T3644] Bluetooth: hci3: command tx timeout [ 61.698434][ T3715] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.783183][ T3684] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.928940][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 62.054555][ T3684] usb 3-1: Using ep0 maxpacket: 32 [ 62.104671][ T3756] loop0: detected capacity change from 0 to 1024 [ 62.129180][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.140437][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.160453][ T3715] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.183409][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 62.198404][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.211618][ T3715] usb 5-1: config 0 descriptor?? [ 62.275717][ T3715] hub 5-1:0.0: USB hub found [ 62.291355][ T3636] syz-executor (3636) used greatest stack depth: 19960 bytes left [ 62.360471][ T3759] loop0: detected capacity change from 0 to 256 [ 62.372615][ T3695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.417225][ T3684] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 62.432192][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.440658][ T3684] usb 3-1: Product: syz [ 62.450401][ T3684] usb 3-1: Manufacturer: syz [ 62.457723][ T3684] usb 3-1: SerialNumber: syz [ 62.493239][ T3715] hub 5-1:0.0: 1 port detected [ 62.500838][ T3684] usb 3-1: config 0 descriptor?? [ 62.699540][ T3741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.727122][ T3695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.756739][ T26] audit: type=1804 audit(1729071409.738:3): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.19" name="/newroot/7/bus/bus" dev="loop0" ino=1048596 res=1 errno=0 [ 62.783578][ T3741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.822050][ T26] audit: type=1800 audit(1729071409.768:4): pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 62.828836][ T22] usb 3-1: USB disconnect, device number 2 [ 62.852715][ T3741] loop4: detected capacity change from 0 to 1024 [ 62.876694][ T3741] EXT4-fs: Ignoring removed nobh option [ 62.901753][ T3741] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.923446][ T3695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.949463][ T3741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.041650][ T3695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.194296][ T3644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.203654][ T3644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.211524][ T3644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.219322][ T3644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.227148][ T3644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.234478][ T3644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.253109][ T3715] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 63.259999][ T3715] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 63.307687][ T3772] loop1: detected capacity change from 0 to 128 [ 63.364034][ T3715] usbhid 5-1:0.0: can't add hid device: -71 [ 63.370278][ T3772] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 63.380846][ T3715] usbhid: probe of 5-1:0.0 failed with error -71 [ 63.413975][ T3715] usb 5-1: USB disconnect, device number 2 [ 63.600926][ T3777] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.867204][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 64.145058][ T3769] chnl_net:caif_netlink_parms(): no params data found [ 64.200631][ T3790] loop4: detected capacity change from 0 to 512 [ 64.207214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.215551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 64.223832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 64.232989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 64.242990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.251234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.267572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.275870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.284149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.292387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.035873][ T3790] ======================================================= [ 65.035873][ T3790] WARNING: The mand mount option has been deprecated and [ 65.035873][ T3790] and is ignored by this kernel. Remove the mand [ 65.035873][ T3790] option from the mount to silence this warning. [ 65.035873][ T3790] ======================================================= [ 65.082784][ T3794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 65.277601][ T3644] Bluetooth: hci0: command tx timeout [ 66.550184][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.579719][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.699205][ T3769] device bridge_slave_0 entered promiscuous mode [ 66.912138][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.950291][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.965389][ T3769] device bridge_slave_1 entered promiscuous mode [ 66.999352][ T3684] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.006910][ T3715] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.079271][ T3839] loop1: detected capacity change from 0 to 512 [ 67.121363][ T3842] loop0: detected capacity change from 0 to 256 [ 67.317508][ T3839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.332193][ T3839] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 67.344485][ T3769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.382921][ T3769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.419775][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.430918][ T3715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.433055][ T3644] Bluetooth: hci0: command tx timeout [ 67.475849][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.494353][ T26] audit: type=1804 audit(1729071414.468:5): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.41" name="/newroot/12/bus/bus" dev="loop0" ino=1048598 res=1 errno=0 [ 67.521541][ T3769] team0: Port device team_slave_0 added [ 67.527889][ T3684] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 67.573712][ T26] audit: type=1800 audit(1729071414.468:6): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="bus" dev="loop0" ino=1048598 res=0 errno=0 [ 67.604594][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.620950][ T3635] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 67.648851][ T3684] usb 3-1: config 0 descriptor?? [ 67.657366][ T3635] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 67.673872][ T3715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.682526][ T3635] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error [ 67.689604][ T3715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.707429][ T3769] team0: Port device team_slave_1 added [ 67.728696][ T3715] usb 5-1: Product: syz [ 67.734590][ T3715] usb 5-1: Manufacturer: syz [ 67.743300][ T3715] usb 5-1: SerialNumber: syz [ 67.814624][ T3715] cdc_ether 5-1:1.0: skipping garbage [ 67.815153][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 67.820544][ T3715] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 67.861986][ T3635] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 67.874156][ T3769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.881118][ T3769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.899594][ T3635] EXT4-fs error (device loop1): ext4_quota_off:7089: inode #3: comm syz-executor: mark_inode_dirty error [ 67.924345][ T3635] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 67.933187][ T3769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.951963][ T3695] device hsr_slave_0 left promiscuous mode [ 67.953140][ T3635] EXT4-fs error (device loop1): ext4_quota_off:7089: inode #4: comm syz-executor: mark_inode_dirty error [ 67.969743][ T3695] device hsr_slave_1 left promiscuous mode [ 67.978512][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.989240][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.043014][ T3715] usb 5-1: USB disconnect, device number 3 [ 68.066352][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.093393][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.101332][ T3695] device bridge_slave_1 left promiscuous mode [ 68.110861][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.128580][ T3695] device bridge_slave_0 left promiscuous mode [ 68.135106][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.149054][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.170486][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.182098][ T3695] device veth1_macvtap left promiscuous mode [ 68.190856][ T3695] device veth0_macvtap left promiscuous mode [ 68.197274][ T3695] device veth1_vlan left promiscuous mode [ 68.201601][ T3684] sony 0003:054C:024B.0001: unexpected long global item [ 68.204560][ T3695] device veth0_vlan left promiscuous mode [ 68.230183][ T3684] sony 0003:054C:024B.0001: parse failed [ 68.241998][ T3684] sony: probe of 0003:054C:024B.0001 failed with error -22 [ 68.406889][ T3715] usb 3-1: USB disconnect, device number 3 [ 68.550546][ T3849] loop0: detected capacity change from 0 to 2048 [ 68.608669][ T3827] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.708555][ T3852] loop4: detected capacity change from 0 to 2048 [ 68.749923][ T3852] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 68.778464][ T3852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.181414][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 69.513137][ T3644] Bluetooth: hci0: command tx timeout [ 69.622026][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 69.702883][ T3865] loop2: detected capacity change from 0 to 16 [ 69.722784][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.731530][ T3865] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.865870][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.813397][ T3877] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 70.907728][ T3882] loop2: detected capacity change from 0 to 256 [ 71.210483][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.217064][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.277528][ T26] audit: type=1804 audit(1729071418.258:7): pid=3886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.52" name="/newroot/12/bus/bus" dev="loop2" ino=1048600 res=1 errno=0 [ 71.312903][ T26] audit: type=1800 audit(1729071418.258:8): pid=3886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="bus" dev="loop2" ino=1048600 res=0 errno=0 [ 71.593072][ T3644] Bluetooth: hci0: command tx timeout [ 71.613031][ T155] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.626455][ T3695] bond0 (unregistering): Released all slaves [ 71.803307][ T3769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.810286][ T3769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.883172][ T155] usb 5-1: Using ep0 maxpacket: 16 [ 71.897638][ T3769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.027509][ T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.066190][ T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.092894][ T155] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.106493][ T155] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.129130][ T155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.155248][ T155] usb 5-1: config 0 descriptor?? [ 72.211544][ T3890] loop0: detected capacity change from 0 to 512 [ 72.219243][ T3769] device hsr_slave_0 entered promiscuous mode [ 72.242282][ T3890] ext4: Unknown parameter 'nouser_xattr' [ 72.263635][ T3769] device hsr_slave_1 entered promiscuous mode [ 72.290130][ T3769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.323099][ T3769] Cannot create hsr debugfs directory [ 72.693327][ T155] usbhid 5-1:0.0: can't add hid device: -71 [ 72.807919][ T155] usbhid: probe of 5-1:0.0 failed with error -71 [ 73.205114][ T155] usb 5-1: USB disconnect, device number 4 [ 73.353621][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.363199][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.387810][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.398212][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.406375][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.500102][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.605581][ T3912] loop2: detected capacity change from 0 to 512 [ 73.687386][ T3695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.709541][ T3912] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 73.733765][ T3912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 73.748335][ T3912] System zones: 0-1, 15-15, 18-18, 34-34 [ 73.760479][ T3912] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.768719][ T3912] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 73.778421][ T3912] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.793892][ T3912] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 73.828888][ T3912] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.61: bg 0: block 40: padding at end of block bitmap is not set [ 73.854531][ T3912] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 73.887713][ T3912] EXT4-fs (loop2): 1 truncate cleaned up [ 73.897642][ T3912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.951692][ T3695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.291129][ T3933] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.61: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 74.501133][ T3934] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.61: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 75.456348][ T3643] EXT4-fs (loop2): unmounting filesystem. [ 75.580725][ T3695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.593166][ T3648] Bluetooth: hci1: command tx timeout [ 75.638799][ T3940] input: syz1 as /devices/virtual/input/input5 [ 75.779810][ T3695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.608992][ T41] cfg80211: failed to load regulatory.db [ 79.614721][ T3648] Bluetooth: hci1: command tx timeout [ 79.725249][ T3908] chnl_net:caif_netlink_parms(): no params data found [ 79.744762][ T3769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.841492][ T3769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.933156][ T3769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.947624][ T3960] loop2: detected capacity change from 0 to 512 [ 80.565821][ T3769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.686965][ T3960] EXT4-fs: inline encryption not supported [ 80.992885][ T3979] loop0: detected capacity change from 0 to 164 [ 81.029916][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.053802][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.061941][ T3908] device bridge_slave_0 entered promiscuous mode [ 81.062366][ T3979] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.094173][ T3983] loop4: detected capacity change from 0 to 1024 [ 81.111403][ T3983] hfsplus: unable to parse mount options [ 81.148525][ T3960] ext4: Unknown parameter 'smackfsdef' [ 81.171408][ T3953] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.191409][ T3908] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.205841][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.241720][ T3908] device bridge_slave_1 entered promiscuous mode [ 81.264760][ T3960] loop2: detected capacity change from 0 to 1764 [ 81.425670][ T3992] loop4: detected capacity change from 0 to 512 [ 81.673947][ T3648] Bluetooth: hci1: command tx timeout [ 81.793908][ T3992] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.801977][ T3992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.824415][ T3908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.855074][ T3992] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.875675][ T3908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.904201][ T3992] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.963221][ T3992] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 82.045704][ T3769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.066373][ T3992] EXT4-fs warning (device loop4): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.105932][ T3992] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 82.136762][ T3769] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.150451][ T3992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.74: bg 0: block 40: padding at end of block bitmap is not set [ 82.203026][ T3992] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 82.215714][ T3992] EXT4-fs (loop4): 1 truncate cleaned up [ 82.221388][ T3992] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.257194][ T3908] team0: Port device team_slave_0 added [ 82.276838][ T4008] loop2: detected capacity change from 0 to 128 [ 82.399776][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.424318][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.383074][ T3992] sched: RT throttling activated [ 83.401581][ T4011] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.74: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 83.466052][ T4011] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.74: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 83.769716][ T4008] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 83.811083][ T3908] team0: Port device team_slave_1 added [ 83.944685][ T3908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.972504][ T3908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.007235][ T3648] Bluetooth: hci1: command tx timeout [ 84.008949][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 84.014624][ T3908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.092237][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.129000][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.171488][ T3832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.178674][ T3832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.234233][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.321600][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.330261][ T3832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.337425][ T3832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.366681][ T3908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.486703][ T3908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.666222][ T3908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.833235][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 86.560696][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.569732][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.597861][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.614190][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.625051][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.640634][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.671870][ T3908] device hsr_slave_0 entered promiscuous mode [ 86.682827][ T4041] loop2: detected capacity change from 0 to 256 [ 86.707023][ T3908] device hsr_slave_1 entered promiscuous mode [ 87.147313][ T3908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.213203][ T3908] Cannot create hsr debugfs directory [ 87.329231][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.338018][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.367562][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.382311][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.431063][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.440229][ T26] audit: type=1804 audit(1729071434.418:9): pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.82" name="/newroot/21/bus/bus" dev="loop2" ino=1048603 res=1 errno=0 [ 87.444402][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.578368][ T26] audit: type=1800 audit(1729071434.418:10): pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="bus" dev="loop2" ino=1048603 res=0 errno=0 [ 87.652379][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.590613][ T4063] loop4: detected capacity change from 0 to 512 [ 88.614976][ T4063] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.86: bg 0: block 393: padding at end of block bitmap is not set [ 88.632011][ T4063] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 88.642548][ T4063] EXT4-fs (loop4): 2 truncates cleaned up [ 88.649110][ T4063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.943181][ T41] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.126927][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 93.139496][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.160468][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.212442][ T3769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.290825][ T3695] device hsr_slave_0 left promiscuous mode [ 93.298374][ T3695] device hsr_slave_1 left promiscuous mode [ 93.306174][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.314699][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.322535][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.330310][ T41] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 93.340516][ T41] usb 1-1: config 0 has no interface number 0 [ 93.347005][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.354553][ T41] usb 1-1: config 0 interface 157 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.368082][ T41] usb 1-1: config 0 interface 157 has no altsetting 0 [ 93.377224][ T3695] device bridge_slave_1 left promiscuous mode [ 93.383807][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.392494][ T3695] device bridge_slave_0 left promiscuous mode [ 93.400113][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.449551][ T3695] device veth1_macvtap left promiscuous mode [ 93.463299][ T3695] device veth0_macvtap left promiscuous mode [ 93.473507][ T3695] device veth1_vlan left promiscuous mode [ 93.479350][ T3695] device veth0_vlan left promiscuous mode [ 93.539794][ T41] usb 1-1: New USB device found, idVendor=04bb, idProduct=0a03, bcdDevice=2a.1b [ 93.580525][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.603816][ T41] usb 1-1: Product: syz [ 93.608015][ T41] usb 1-1: Manufacturer: syz [ 93.620654][ T41] usb 1-1: SerialNumber: syz [ 93.633274][ T41] usb 1-1: config 0 descriptor?? [ 93.791105][ T41] pl2303 1-1:0.157: required endpoints missing [ 94.270240][ T3683] usb 1-1: USB disconnect, device number 2 [ 94.681488][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 94.712505][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 94.751260][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.785944][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.060884][ T4095] loop0: detected capacity change from 0 to 512 [ 95.069870][ T4095] EXT4-fs: inline encryption not supported [ 95.077356][ T4095] ext4: Unknown parameter 'smackfsdef' [ 95.133104][ T3988] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.164758][ T4095] loop0: detected capacity change from 0 to 1764 [ 95.176885][ T3695] bond0 (unregistering): Released all slaves [ 95.386309][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 96.064640][ T3908] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.074877][ T3908] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.101231][ T3908] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.132284][ T3769] device veth0_vlan entered promiscuous mode [ 96.892113][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.901179][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.934095][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.995213][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.024752][ T3908] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.047828][ T3769] device veth1_vlan entered promiscuous mode [ 97.068803][ T4116] kvm: emulating exchange as write [ 97.091731][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.100999][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.196422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.221664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.252092][ T3769] device veth0_macvtap entered promiscuous mode [ 97.280014][ T3769] device veth1_macvtap entered promiscuous mode [ 97.321764][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.346932][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.367265][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.381451][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.398845][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.423148][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.454806][ T3769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.470552][ T3908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.538192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.597621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.623845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.643506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.654681][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.699284][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.724158][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.752279][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.777350][ T3769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.791596][ T3769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.808426][ T3769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.829205][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.855104][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.874786][ T3644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.899304][ T3644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.903379][ T3908] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.914356][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.924559][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.932158][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.940486][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.982668][ T3769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.991724][ T3769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.001344][ T3769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.018882][ T3769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.082020][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.103778][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.124810][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.144783][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.159003][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.166160][ T4060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.210872][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.232855][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.245497][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.254505][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.261619][ T4060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.288063][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.412776][ T4136] loop2: detected capacity change from 0 to 2048 [ 98.483154][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.508902][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.859942][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.207305][ T4139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 99.217596][ T3908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.228275][ T3908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.286047][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.313366][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.334887][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.347337][ T4143] loop0: detected capacity change from 0 to 512 [ 99.350256][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.354998][ T4143] EXT4-fs: inline encryption not supported [ 99.368294][ T4143] ext4: Unknown parameter 'smackfsdef' [ 99.396717][ T4143] loop0: detected capacity change from 0 to 1764 [ 99.458650][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.467666][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.481982][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.500634][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.606626][ T4128] chnl_net:caif_netlink_parms(): no params data found [ 100.044444][ T3648] Bluetooth: hci4: command tx timeout [ 100.231537][ T3695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.324693][ T3810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.350242][ T3810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.386671][ T3695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.397890][ T4156] loop0: detected capacity change from 0 to 256 [ 100.433764][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.468017][ T4156] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 100.519296][ T3681] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.548784][ T3695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.565445][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.579139][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.601687][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.608981][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.617783][ T4128] device bridge_slave_0 entered promiscuous mode [ 100.627641][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.635363][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.644279][ T4128] device bridge_slave_1 entered promiscuous mode [ 100.651472][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.669035][ T3695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.702822][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.715835][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.728575][ T3908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.758881][ T4128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.778253][ T4128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.793464][ T155] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.867101][ T4128] team0: Port device team_slave_0 added [ 100.893327][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.968473][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.986464][ T4060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.005067][ T4128] team0: Port device team_slave_1 added [ 101.059033][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.068583][ T3908] device veth0_vlan entered promiscuous mode [ 101.069387][ T3681] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 101.085277][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.094977][ T3681] usb 3-1: config 0 descriptor?? [ 101.236051][ T4168] loop3: detected capacity change from 0 to 16 [ 101.325431][ T4168] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 101.597926][ T4151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.679678][ T4151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.763903][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.783433][ T155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.789785][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.800350][ T155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.834971][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.846263][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.880945][ T4128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.925780][ T155] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.938323][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.955475][ T155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.970016][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.988965][ T155] usb 1-1: SerialNumber: syz [ 101.997020][ T4174] fuse: Bad value for 'fd' [ 102.018368][ T4174] process 'syz.3.105' launched './file0' with NULL argv: empty string added [ 102.033324][ T3681] usbhid 3-1:0.0: can't add hid device: -71 [ 102.036092][ T3908] device veth1_vlan entered promiscuous mode [ 102.039449][ T3681] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.052572][ T26] audit: type=1326 audit(1729071449.028:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f82b7dff9 code=0x0 [ 102.073088][ T3648] Bluetooth: hci4: command tx timeout [ 102.081765][ T3681] usb 3-1: USB disconnect, device number 4 [ 102.091553][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.135245][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.170326][ T4180] loop3: detected capacity change from 0 to 128 [ 102.210213][ T4128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.295459][ T4128] device hsr_slave_0 entered promiscuous mode [ 102.302375][ T4128] device hsr_slave_1 entered promiscuous mode [ 102.311179][ T4128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.325956][ T4128] Cannot create hsr debugfs directory [ 102.326907][ T155] usb 1-1: 0:2 : does not exist [ 102.400516][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.418563][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.456796][ T3908] device veth0_macvtap entered promiscuous mode [ 102.484109][ T3908] device veth1_macvtap entered promiscuous mode [ 102.543418][ T3715] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.555581][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.566634][ T155] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 102.584171][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.600842][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.611714][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.622618][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.633403][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.644146][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.655215][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.667033][ T3908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.748665][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.760894][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.771061][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.782135][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.815321][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.830193][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.892148][ T3908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.037298][ T3908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.177044][ T3908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.256858][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.295014][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.378119][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.393342][ T3715] usb 4-1: Using ep0 maxpacket: 16 [ 103.416775][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.435114][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.449036][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.469700][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 103.523435][ T3715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 103.523478][ T3715] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.683187][ T155] usb 1-1: USB disconnect, device number 3 [ 103.694016][ T3715] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.733078][ T3715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.774448][ T3715] usb 4-1: Product: syz [ 103.782567][ T3715] usb 4-1: Manufacturer: syz [ 103.797182][ T3988] udevd[3988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.890125][ T4193] loop0: detected capacity change from 0 to 764 [ 103.991616][ T4193] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 104.105885][ T3715] usb 4-1: SerialNumber: syz [ 104.132795][ T3908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.132848][ T3908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.132873][ T3908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.142132][ T4192] Symlink component flag not implemented [ 104.162043][ T3908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.165817][ T4192] Symlink component flag not implemented [ 104.166148][ T4192] Symlink component flag not implemented (128) [ 104.213220][ T3648] Bluetooth: hci4: command tx timeout [ 104.253641][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 104.465404][ T3715] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.586112][ T3715] usb 4-1: unit 6 not found! [ 104.742291][ T3715] usb 4-1: USB disconnect, device number 2 [ 104.799772][ T4192] Symlink component flag not implemented (122) [ 105.383003][ T26] audit: type=1326 audit(1729071452.358:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4207 comm="syz.2.115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208957dff9 code=0x0 [ 105.404574][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.577306][ T4220] loop0: detected capacity change from 0 to 16 [ 105.690475][ T4220] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 106.243242][ T3644] Bluetooth: hci4: command tx timeout [ 106.274228][ T4226] device syzkaller0 entered promiscuous mode [ 106.293319][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.301712][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.404091][ T4060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.412099][ T4060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.473475][ T3679] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.605742][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.625399][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.784829][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 107.043641][ T3679] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.090318][ T3679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.198273][ T3679] usb 3-1: config 0 descriptor?? [ 107.866137][ T3679] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 107.878599][ T3679] [drm] Initialized udl on minor 2 [ 108.049516][ T3679] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 108.059450][ T3679] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 108.096478][ T3679] usb 3-1: USB disconnect, device number 5 [ 108.676107][ T4248] loop2: detected capacity change from 0 to 16 [ 108.711920][ T4248] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.724917][ T4252] Zero length message leads to an empty skb [ 110.180797][ T3695] device hsr_slave_0 left promiscuous mode [ 110.201223][ T3695] device hsr_slave_1 left promiscuous mode [ 110.251061][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.311261][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.320134][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.348115][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.365378][ T3695] device bridge_slave_1 left promiscuous mode [ 110.378118][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.405279][ T3695] device bridge_slave_0 left promiscuous mode [ 110.413712][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.451054][ T3695] device veth1_macvtap left promiscuous mode [ 110.464872][ T3695] device veth0_macvtap left promiscuous mode [ 110.471175][ T3695] device veth1_vlan left promiscuous mode [ 110.485901][ T3695] device veth0_vlan left promiscuous mode [ 110.632997][ T3679] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.284046][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.345936][ T3679] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.588916][ T3679] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.598337][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.608546][ T3679] usb 4-1: config 0 descriptor?? [ 111.906975][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 111.959884][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 112.000021][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.051526][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.102850][ T4274] binder: 4272:4274 ioctl c0306201 20000680 returned -14 [ 112.179819][ T3679] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 112.190371][ T3679] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 112.233424][ T3679] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.453311][ T3695] bond0 (unregistering): Released all slaves [ 112.487155][ T14] usb 4-1: USB disconnect, device number 3 [ 112.667626][ T4128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.839360][ T4128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.891903][ T4128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.425605][ T4128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.591128][ T26] audit: type=1326 audit(1729071460.568:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.0.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190977dff9 code=0x0 [ 113.714190][ T4292] device syzkaller0 entered promiscuous mode [ 114.048780][ T4314] loop2: detected capacity change from 0 to 1024 [ 114.370120][ T4324] loop2: detected capacity change from 0 to 256 [ 114.699030][ T4331] loop2: detected capacity change from 0 to 16 [ 114.789144][ T4331] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.931944][ T4341] loop2: Can't mount, would change RO state [ 117.497144][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.755421][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 117.857363][ T4348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.873122][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.890459][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 117.916766][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.961149][ T4128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.970200][ T14] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.008870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.029509][ T14] usb 1-1: config 1 interface 2 has no altsetting 0 [ 118.049410][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.065090][ T4128] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.139781][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.158609][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.171487][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.178696][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.206958][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.223719][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.242865][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.258609][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.278221][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.283983][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.293418][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.308256][ T14] usb 1-1: Product: syz [ 118.320506][ T14] usb 1-1: Manufacturer: syz [ 118.321060][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.340591][ T14] usb 1-1: SerialNumber: syz [ 118.344266][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.354976][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.374669][ T41] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.696039][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.705140][ T14] usb 1-1: selecting invalid altsetting 0 [ 118.899042][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.088542][ T14] usb 1-1: USB disconnect, device number 4 [ 119.122904][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.197963][ T4128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.211930][ T4128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.227359][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.272123][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.287234][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.320518][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.333152][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 119.339606][ T4384] loop1: detected capacity change from 0 to 512 [ 119.374214][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.394097][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.424937][ T4384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.450322][ T4384] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 119.453359][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.531015][ T4384] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz.1.156: path /10/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=106, inode=0, rec_len=0, size=2048 fake=0 [ 119.630522][ T26] audit: type=1326 audit(1729071466.608:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.0.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190977dff9 code=0x0 [ 119.638191][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.662681][ T41] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.675775][ T41] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.684967][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.706777][ T41] usb 4-1: config 0 descriptor?? [ 120.183210][ T153] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.466795][ T41] usbhid 4-1:0.0: can't add hid device: -71 [ 120.472814][ T41] usbhid: probe of 4-1:0.0 failed with error -71 [ 120.487862][ T41] usb 4-1: USB disconnect, device number 4 [ 120.627675][ T4406] loop2: detected capacity change from 0 to 2048 [ 120.652307][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.661418][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.707454][ T4128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.803363][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.848548][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.879227][ T153] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 120.906369][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.930021][ T153] usb 1-1: config 0 descriptor?? [ 121.110381][ T4418] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 121.267540][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 121.850769][ T4402] loop0: detected capacity change from 0 to 512 [ 121.883141][ T153] sony 0003:1345:3008.0003: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 121.933147][ T4418] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 121.942601][ T4418] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.156: Failed to acquire dquot type 0 [ 121.974025][ T153] sony 0003:1345:3008.0003: failed to claim input [ 121.984668][ T3988] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.235636][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.265727][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.306030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.326382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.369212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.386397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.436876][ T4128] device veth0_vlan entered promiscuous mode [ 122.489153][ T4128] device veth1_vlan entered promiscuous mode [ 122.566142][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.584796][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.604444][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.614263][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.580065][ T4128] device veth0_macvtap entered promiscuous mode [ 123.602158][ T4128] device veth1_macvtap entered promiscuous mode [ 123.631778][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.658874][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.686290][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.711028][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.728790][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.748174][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.772409][ T41] usb 1-1: USB disconnect, device number 5 [ 123.796743][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.818586][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.857669][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.866630][ T3908] EXT4-fs (loop1): unmounting filesystem. [ 123.868358][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.882829][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.893486][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.904386][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.914683][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.939077][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.979953][ T4128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.991720][ T4128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.031588][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.049049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.071000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.092442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.102408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.122764][ T4128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.132678][ T4128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.141629][ T4128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.151707][ T4128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.315648][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.343287][ T3681] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.972582][ T4466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 125.019003][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.064636][ T26] audit: type=1326 audit(1729071472.038:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.3.175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f82b7dff9 code=0x0 [ 125.105294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.133291][ T3681] usb 2-1: Using ep0 maxpacket: 16 [ 125.156060][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.179892][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.205094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.275526][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.304407][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.332102][ T3681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.442216][ T3681] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.464770][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.519159][ T3681] usb 2-1: config 0 descriptor?? [ 125.791256][ T4488] loop2: detected capacity change from 0 to 512 [ 125.827879][ T4488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.837569][ T4488] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 125.865460][ T4488] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz.2.180: path /56/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=106, inode=0, rec_len=0, size=2048 fake=0 [ 126.083890][ T3681] usbhid 2-1:0.0: can't add hid device: -71 [ 126.104119][ T3681] usbhid: probe of 2-1:0.0 failed with error -71 [ 126.125418][ T3681] usb 2-1: USB disconnect, device number 2 [ 126.294325][ T4504] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 126.339125][ T4504] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 126.379398][ T4504] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.180: Failed to acquire dquot type 0 [ 126.656608][ T4512] loop0: detected capacity change from 0 to 764 [ 126.791971][ T4512] Symlink component flag not implemented [ 126.798269][ T4512] Symlink component flag not implemented [ 126.804410][ T4512] Symlink component flag not implemented (129) [ 126.810615][ T4512] Symlink component flag not implemented (6) [ 127.223004][ T41] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.418230][ T41] usb 1-1: device descriptor read/64, error -71 [ 127.524915][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.723059][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.821961][ T3643] EXT4-fs (loop2): unmounting filesystem. [ 127.841698][ T3715] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.909252][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.921156][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.923029][ T41] usb 1-1: device descriptor read/64, error -71 [ 127.937083][ T14] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 127.951562][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.011865][ T14] usb 4-1: config 0 descriptor?? [ 128.032013][ T4527] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 128.041358][ T4527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.192'. [ 128.054375][ T41] usb usb1-port1: attempt power cycle [ 128.123238][ T3715] usb 5-1: Using ep0 maxpacket: 16 [ 128.243525][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.269671][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.650064][ T4542] loop2: detected capacity change from 0 to 16 [ 129.668275][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.681329][ T4542] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 129.695523][ T3715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.755538][ T3715] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.781491][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.806566][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.829115][ T3715] usb 5-1: config 0 descriptor?? [ 129.984548][ T4551] loop0: detected capacity change from 0 to 8 [ 130.059864][ T4551] SQUASHFS error: lzo decompression failed, data probably corrupt [ 130.068314][ T4551] SQUASHFS error: Failed to read block 0x71: -5 [ 130.079247][ T4551] SQUASHFS error: lzo decompression failed, data probably corrupt [ 130.087387][ T4551] SQUASHFS error: Failed to read block 0x71: -5 [ 130.096957][ T26] audit: type=1800 audit(1729071477.078:16): pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.199" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 130.183204][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 130.189969][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.333669][ T14] usb 4-1: USB disconnect, device number 5 [ 130.495501][ T4560] loop0: detected capacity change from 0 to 1024 [ 130.519155][ T4559] syz.2.203 uses obsolete (PF_INET,SOCK_PACKET) [ 130.968560][ T3715] usbhid 5-1:0.0: can't add hid device: -71 [ 130.978241][ T3715] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.994928][ T3715] usb 5-1: USB disconnect, device number 5 [ 132.113207][ T26] audit: type=1326 audit(1729071479.068:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4579 comm="syz.0.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190977dff9 code=0x0 [ 132.247624][ T4585] loop2: detected capacity change from 0 to 8 [ 132.262814][ T4590] loop4: detected capacity change from 0 to 128 [ 132.275037][ T4585] SQUASHFS error: lzo decompression failed, data probably corrupt [ 132.282892][ T4585] SQUASHFS error: Failed to read block 0x71: -5 [ 132.370413][ T4592] loop1: detected capacity change from 0 to 16 [ 132.551342][ T4585] SQUASHFS error: lzo decompression failed, data probably corrupt [ 132.559313][ T4585] SQUASHFS error: Failed to read block 0x71: -5 [ 132.571929][ T26] audit: type=1800 audit(1729071479.548:18): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.213" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 132.645364][ T4592] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 132.659815][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.669763][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.013117][ T4590] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 133.653071][ T3715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.063337][ T3715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.113999][ T3715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.190552][ T3715] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.236936][ T3715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.312191][ T3715] usb 1-1: config 0 descriptor?? [ 134.825072][ T3715] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 134.864812][ T3715] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 134.930122][ T3715] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 135.105820][ T3684] usb 1-1: USB disconnect, device number 9 [ 135.217254][ T4627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 135.401397][ T4629] loop2: detected capacity change from 0 to 512 [ 135.443713][ T4629] EXT4-fs: inline encryption not supported [ 135.449761][ T4629] ext4: Unknown parameter 'smackfsdef' [ 135.728243][ T4632] loop0: detected capacity change from 0 to 128 [ 136.353650][ T4640] loop1: detected capacity change from 0 to 8 [ 136.398773][ T4640] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.407532][ T4640] SQUASHFS error: Failed to read block 0x71: -5 [ 136.426315][ T4640] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.434534][ T4640] SQUASHFS error: Failed to read block 0x71: -5 [ 136.447353][ T26] audit: type=1800 audit(1729071483.418:19): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 136.450563][ T4640] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.475817][ T4640] SQUASHFS error: Failed to read block 0x71: -5 [ 136.544447][ T4642] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 136.604402][ T4639] dccp_close: ABORT with 20 bytes unread [ 137.096691][ T4659] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 138.120284][ T4673] ALSA: seq fatal error: cannot create timer (-22) [ 139.378520][ T4682] loop4: detected capacity change from 0 to 2048 [ 139.893104][ T4674] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.145351][ T4674] usb 3-1: Using ep0 maxpacket: 32 [ 140.305248][ T4674] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.396264][ T4674] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 140.407770][ T4674] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 140.428162][ T4674] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.615431][ T4674] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 140.624864][ T4674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.634107][ T4674] usb 3-1: Product: syz [ 140.638296][ T4674] usb 3-1: Manufacturer: syz [ 140.643295][ T4674] usb 3-1: SerialNumber: syz [ 140.925887][ T4674] cdc_ncm 3-1:128.0: skipping garbage [ 140.931305][ T4674] cdc_ncm 3-1:128.0: CDC Union missing and no IAD found [ 140.938401][ T4674] cdc_ncm 3-1:128.0: bind() failure [ 140.949375][ T4674] usb 3-1: USB disconnect, device number 6 [ 141.549309][ T4717] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 141.622881][ T4720] netlink: 156 bytes leftover after parsing attributes in process `syz.2.258'. [ 141.650518][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.677029][ T4717] bond0: (slave team0): Enslaving as an active interface with an up link [ 141.694860][ T4713] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 141.714971][ T4713] bond0: (slave team0): Releasing backup interface [ 141.803891][ T4713] bridge0: port 3(team0) entered blocking state [ 141.827934][ T4713] bridge0: port 3(team0) entered disabled state [ 141.856206][ T4713] device team0 entered promiscuous mode [ 141.878461][ T4713] device team_slave_0 entered promiscuous mode [ 141.900583][ T4713] device team_slave_1 entered promiscuous mode [ 142.950070][ T4746] Bluetooth: MGMT ver 1.22 [ 143.193013][ T4674] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.433049][ T4674] usb 5-1: Using ep0 maxpacket: 32 [ 143.443812][ T4760] netlink: 'syz.3.271': attribute type 4 has an invalid length. [ 143.486968][ T4759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.272'. [ 143.593298][ T4674] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.801988][ T4763] can: request_module (can-proto-3) failed. [ 143.889476][ T4768] loop3: detected capacity change from 0 to 16 [ 143.913273][ T4674] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 143.955147][ T4674] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 143.983254][ T4768] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 144.211906][ T4674] usb 5-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.713498][ T4674] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 144.727302][ T4674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.737053][ T4674] usb 5-1: Product: syz [ 144.741309][ T4674] usb 5-1: Manufacturer: syz [ 144.743102][ T3715] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 144.751468][ T4674] usb 5-1: SerialNumber: syz [ 145.034088][ T4674] cdc_ncm 5-1:128.0: skipping garbage [ 145.039753][ T4674] cdc_ncm 5-1:128.0: CDC Union missing and no IAD found [ 145.047285][ T4674] cdc_ncm 5-1:128.0: bind() failure [ 145.056785][ T4674] usb 5-1: USB disconnect, device number 6 [ 145.134411][ T3715] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 145.142766][ T3715] usb 1-1: config 0 has no interface number 0 [ 145.148931][ T3715] usb 1-1: config 0 interface 183 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 145.343587][ T3715] usb 1-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 145.352784][ T3715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.360872][ T3715] usb 1-1: Product: syz [ 145.365238][ T3715] usb 1-1: Manufacturer: syz [ 145.369833][ T3715] usb 1-1: SerialNumber: syz [ 145.378396][ T3715] usb 1-1: config 0 descriptor?? [ 145.434896][ T3715] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 145.953253][ T3684] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.213114][ T3684] usb 2-1: Using ep0 maxpacket: 16 [ 146.296247][ T3715] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 146.363316][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.440528][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.481572][ T3684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.518597][ T3684] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.542888][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.583874][ T3684] usb 2-1: config 0 descriptor?? [ 146.711935][ T3679] usb 1-1: USB disconnect, device number 10 [ 146.727929][ T4798] loop2: detected capacity change from 0 to 1024 [ 146.925923][ T4802] ax25_connect(): syz.3.287 uses autobind, please contact jreuter@yaina.de [ 147.075010][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 147.082802][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 147.214153][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 147.249093][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 147.295193][ T4806] loop3: detected capacity change from 0 to 16 [ 147.905037][ T4806] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 148.417122][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.449365][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.522873][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.571101][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.591379][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.716252][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.752363][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.780336][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.800533][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.819905][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.838343][ T3684] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 148.894509][ T3684] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 148.922615][ T3684] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 148.962462][ T3684] microsoft 0003:045E:07DA.0005: no inputs found [ 148.978275][ T3684] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 149.011036][ T3684] usb 2-1: USB disconnect, device number 3 [ 149.037462][ T26] audit: type=1326 audit(1729072008.011:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4827 comm="syz.4.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40dd7dff9 code=0x0 [ 150.408696][ T32] hfsplus: b-tree write err: -5, ino 4 [ 150.549791][ T4863] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 150.563359][ T41] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.838387][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 150.973236][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.003055][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.012829][ T41] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.051267][ T41] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.079917][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.101780][ T4872] device caif0 entered promiscuous mode [ 151.102879][ T41] usb 4-1: config 0 descriptor?? [ 151.257590][ T4874] loop0: detected capacity change from 0 to 512 [ 151.297688][ T4874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.306783][ T4874] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 151.324801][ T4877] loop2: detected capacity change from 0 to 2048 [ 151.442591][ T3681] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.473005][ T4230] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.796414][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 151.863989][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.890978][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.030476][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.110958][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.183027][ T3681] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 152.192299][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.253620][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.266320][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.275108][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.290619][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.311593][ T3681] usb 5-1: config 0 descriptor?? [ 152.323674][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.330927][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.344367][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.351613][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.359395][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.359799][ T4892] loop1: detected capacity change from 0 to 1024 [ 152.366658][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.366682][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.366703][ T41] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 152.368214][ T41] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 152.409983][ T41] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 152.430019][ T3637] EXT4-fs (loop0): unmounting filesystem. [ 152.447659][ T41] microsoft 0003:045E:07DA.0006: no inputs found [ 152.454454][ T41] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 152.494013][ T41] usb 4-1: USB disconnect, device number 6 [ 152.624872][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'. [ 152.777821][ T4898] device syzkaller0 entered promiscuous mode [ 152.814126][ T4871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.826434][ T4871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.129608][ T3681] usbhid 5-1:0.0: can't add hid device: -71 [ 153.135971][ T3681] usbhid: probe of 5-1:0.0 failed with error -71 [ 153.156623][ T3681] usb 5-1: USB disconnect, device number 7 [ 153.988016][ T4916] loop4: detected capacity change from 0 to 512 [ 154.045269][ T4916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.054363][ T4916] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 154.073586][ T3863] hfsplus: b-tree write err: -5, ino 4 [ 154.985973][ T4128] EXT4-fs (loop4): unmounting filesystem. [ 155.729422][ T4950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.342'. [ 156.739502][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 156.774687][ T4964] loop1: detected capacity change from 0 to 16 [ 156.782760][ T4964] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 156.822379][ T4958] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 156.862176][ T3988] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.021941][ T4971] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 157.720979][ T4982] device syzkaller0 entered promiscuous mode [ 157.997908][ T5002] loop4: detected capacity change from 0 to 8 [ 158.033990][ T5002] SQUASHFS error: lzo decompression failed, data probably corrupt [ 158.041860][ T5002] SQUASHFS error: Failed to read block 0x71: -5 [ 158.048478][ T5002] SQUASHFS error: lzo decompression failed, data probably corrupt [ 158.056491][ T5002] SQUASHFS error: Failed to read block 0x71: -5 [ 158.063120][ T26] audit: type=1800 audit(1729072017.041:21): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.360" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 158.083099][ T5002] SQUASHFS error: lzo decompression failed, data probably corrupt [ 158.091036][ T5002] SQUASHFS error: Failed to read block 0x71: -5 [ 159.149781][ T5024] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 159.278950][ T5026] fuse: Unknown parameter 'grou00000000000000000000' [ 159.316406][ T26] audit: type=1326 audit(1729072018.291:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5025 comm="syz.3.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f82b7dff9 code=0x0 [ 160.287173][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 160.315211][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.3.365'. [ 161.601442][ T5057] fuse: Unknown parameter 'grou00000000000000000000' [ 161.629261][ T26] audit: type=1326 audit(1729072020.601:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.0.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190977dff9 code=0x0 [ 161.676412][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 162.009828][ T5071] loop1: detected capacity change from 0 to 8 [ 162.062984][ T5064] SQUASHFS error: lzo decompression failed, data probably corrupt [ 162.070868][ T5064] SQUASHFS error: Failed to read block 0x71: -5 [ 162.115529][ T5064] SQUASHFS error: lzo decompression failed, data probably corrupt [ 162.151451][ T5064] SQUASHFS error: Failed to read block 0x71: -5 [ 162.197746][ T26] audit: type=1800 audit(1729072021.171:24): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.379" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 162.218228][ T5081] Bluetooth: MGMT ver 1.22 [ 162.546568][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 162.898158][ T5100] loop1: detected capacity change from 0 to 128 [ 162.975453][ T5098] fuse: Unknown parameter 'grou00000000000000000000' [ 163.389825][ T5108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 163.403323][ T26] audit: type=1326 audit(1729072022.381:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190977dff9 code=0x0 [ 163.692987][ T4674] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.919068][ T5121] device geneve2 entered promiscuous mode [ 163.963031][ T4674] usb 2-1: Using ep0 maxpacket: 16 [ 164.093198][ T4674] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 164.113101][ T3626] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.126348][ T4674] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.259133][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 164.329979][ T4674] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.358127][ T4674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.377974][ T4674] usb 2-1: Product: syz [ 164.387412][ T4674] usb 2-1: Manufacturer: syz [ 164.392039][ T4674] usb 2-1: SerialNumber: syz [ 164.398013][ T3626] usb 3-1: Using ep0 maxpacket: 32 [ 164.401266][ T5124] ------------[ cut here ]------------ [ 164.408972][ T5124] name '39261' [ 164.422819][ T5124] WARNING: CPU: 0 PID: 5124 at fs/proc/generic.c:712 remove_proc_entry+0x2e1/0x5c0 [ 164.432402][ T5124] Modules linked in: [ 164.436530][ T5124] CPU: 0 PID: 5124 Comm: syz.4.401 Not tainted 6.1.112-syzkaller #0 [ 164.444773][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.454900][ T5124] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 164.460652][ T5124] Code: f4 73 ff eb 05 e8 cf f4 73 ff 48 8b 5c 24 10 48 c7 c7 20 a8 47 8d e8 7e 5e 9a 08 48 c7 c7 60 f0 1b 8b 48 89 de e8 6f e7 3b ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 164.480741][ T5124] RSP: 0018:ffffc9000b5efb80 EFLAGS: 00010246 [ 164.486972][ T5124] RAX: 749e3ebf8284f700 RBX: ffff888078eab558 RCX: ffff888073a1bb80 [ 164.494983][ T5124] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 164.503011][ T5124] RBP: ffffc9000b5efc78 R08: ffffffff8152a48e R09: ffffed10171c4f1c [ 164.510988][ T5124] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880655b9500 [ 164.518994][ T5124] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 164.527031][ T5124] FS: 0000555563542500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 164.536015][ T5124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.542637][ T5124] CR2: 000000110c462969 CR3: 0000000027c83000 CR4: 00000000003506f0 [ 164.550705][ T5124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.558728][ T5124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.566769][ T5124] Call Trace: [ 164.570063][ T5124] [ 164.573039][ T5124] ? __warn+0x15a/0x520 [ 164.577212][ T5124] ? remove_proc_entry+0x2e1/0x5c0 [ 164.582349][ T5124] ? report_bug+0x2af/0x500 [ 164.586912][ T5124] ? remove_proc_entry+0x2e1/0x5c0 [ 164.592051][ T5124] ? handle_bug+0x3d/0x70 [ 164.596442][ T5124] ? exc_invalid_op+0x16/0x40 [ 164.601135][ T5124] ? asm_exc_invalid_op+0x16/0x20 [ 164.603156][ T3626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.606207][ T5124] ? __warn_printk+0x28e/0x350 [ 164.618646][ T5124] ? remove_proc_entry+0x2e1/0x5c0 [ 164.623823][ T5124] ? __local_bh_enable_ip+0x164/0x1f0 [ 164.629225][ T5124] ? proc_set_user+0x90/0x90 [ 164.633874][ T5124] ? bcm_release+0x1e0/0x870 [ 164.638485][ T5124] ? _local_bh_enable+0xa0/0xa0 [ 164.643394][ T5124] ? do_raw_spin_unlock+0x137/0x8a0 [ 164.648616][ T5124] bcm_release+0x244/0x870 [ 164.653105][ T5124] sock_close+0xcd/0x230 [ 164.657361][ T5124] ? sock_mmap+0x90/0x90 [ 164.661620][ T5124] __fput+0x3f6/0x8d0 [ 164.665686][ T5124] task_work_run+0x246/0x300 [ 164.670306][ T5124] ? task_work_cancel+0x2e0/0x2e0 [ 164.675408][ T5124] ? exit_to_user_mode_loop+0x39/0x100 [ 164.680889][ T5124] exit_to_user_mode_loop+0xde/0x100 [ 164.686243][ T5124] exit_to_user_mode_prepare+0xb1/0x140 [ 164.691809][ T5124] syscall_exit_to_user_mode+0x60/0x270 [ 164.697439][ T5124] do_syscall_64+0x47/0xb0 [ 164.701865][ T5124] ? clear_bhb_loop+0x45/0xa0 [ 164.706615][ T5124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.712534][ T5124] RIP: 0033:0x7ff40dd7dff9 [ 164.713189][ T3626] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 164.717013][ T5124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.745048][ T5124] RSP: 002b:00007ffe28f94488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 164.753223][ T4674] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 164.753525][ T5124] RAX: 0000000000000000 RBX: 00007ff40df37a80 RCX: 00007ff40dd7dff9 [ 164.762317][ T3626] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 164.768137][ T5124] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 164.768155][ T5124] RBP: 00007ff40df37a80 R08: 00007ff40df22000 R09: 00007ffe28f9477f [ 164.768167][ T5124] R10: 00000000003ffd20 R11: 0000000000000246 R12: 000000000002847e [ 164.768178][ T5124] R13: 00007ffe28f94590 R14: 0000000000000032 R15: ffffffffffffffff [ 164.768208][ T5124] [ 164.768218][ T5124] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.768240][ T5124] CPU: 0 PID: 5124 Comm: syz.4.401 Not tainted 6.1.112-syzkaller #0 [ 164.768256][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.768264][ T5124] Call Trace: [ 164.768270][ T5124] [ 164.768276][ T5124] dump_stack_lvl+0x1e3/0x2cb [ 164.768306][ T5124] ? nf_tcp_handle_invalid+0x642/0x642 [ 164.768329][ T5124] ? panic+0x764/0x764 [ 164.768346][ T5124] ? 0xffffffffa0000954 [ 164.768364][ T5124] ? vscnprintf+0x59/0x80 [ 164.768385][ T5124] panic+0x318/0x764 [ 164.768405][ T5124] ? __warn+0x169/0x520 [ 164.768424][ T5124] ? memcpy_page_flushcache+0xfc/0xfc [ 164.768457][ T5124] __warn+0x348/0x520 [ 164.768473][ T5124] ? remove_proc_entry+0x2e1/0x5c0 [ 164.768500][ T5124] report_bug+0x2af/0x500 [ 164.768516][ T5124] ? remove_proc_entry+0x2e1/0x5c0 [ 164.768542][ T5124] handle_bug+0x3d/0x70 [ 164.768556][ T5124] exc_invalid_op+0x16/0x40 [ 164.768572][ T5124] asm_exc_invalid_op+0x16/0x20 [ 164.768592][ T5124] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 164.768615][ T5124] Code: f4 73 ff eb 05 e8 cf f4 73 ff 48 8b 5c 24 10 48 c7 c7 20 a8 47 8d e8 7e 5e 9a 08 48 c7 c7 60 f0 1b 8b 48 89 de e8 6f e7 3b ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 164.768629][ T5124] RSP: 0018:ffffc9000b5efb80 EFLAGS: 00010246 [ 164.768644][ T5124] RAX: 749e3ebf8284f700 RBX: ffff888078eab558 RCX: ffff888073a1bb80 [ 164.768657][ T5124] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 164.768667][ T5124] RBP: ffffc9000b5efc78 R08: ffffffff8152a48e R09: ffffed10171c4f1c [ 164.768678][ T5124] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880655b9500 [ 164.768690][ T5124] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 164.768707][ T5124] ? __warn_printk+0x28e/0x350 [ 164.768730][ T5124] ? __local_bh_enable_ip+0x164/0x1f0 [ 164.768758][ T5124] ? proc_set_user+0x90/0x90 [ 164.768776][ T5124] ? bcm_release+0x1e0/0x870 [ 164.768798][ T5124] ? _local_bh_enable+0xa0/0xa0 [ 164.768819][ T5124] ? do_raw_spin_unlock+0x137/0x8a0 [ 164.768844][ T5124] bcm_release+0x244/0x870 [ 164.768874][ T5124] sock_close+0xcd/0x230 [ 164.768892][ T5124] ? sock_mmap+0x90/0x90 [ 164.768910][ T5124] __fput+0x3f6/0x8d0 [ 164.768940][ T5124] task_work_run+0x246/0x300 [ 164.768966][ T5124] ? task_work_cancel+0x2e0/0x2e0 [ 164.768989][ T5124] ? exit_to_user_mode_loop+0x39/0x100 [ 164.769009][ T5124] exit_to_user_mode_loop+0xde/0x100 [ 164.769026][ T5124] exit_to_user_mode_prepare+0xb1/0x140 [ 164.769043][ T5124] syscall_exit_to_user_mode+0x60/0x270 [ 164.769072][ T5124] do_syscall_64+0x47/0xb0 [ 164.769086][ T5124] ? clear_bhb_loop+0x45/0xa0 [ 164.769108][ T5124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.769128][ T5124] RIP: 0033:0x7ff40dd7dff9 [ 164.769141][ T5124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.769154][ T5124] RSP: 002b:00007ffe28f94488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 164.769170][ T5124] RAX: 0000000000000000 RBX: 00007ff40df37a80 RCX: 00007ff40dd7dff9 [ 164.769182][ T5124] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 164.769191][ T5124] RBP: 00007ff40df37a80 R08: 00007ff40df22000 R09: 00007ffe28f9477f [ 164.769203][ T5124] R10: 00000000003ffd20 R11: 0000000000000246 R12: 000000000002847e [ 164.769213][ T5124] R13: 00007ffe28f94590 R14: 0000000000000032 R15: ffffffffffffffff [ 164.769239][ T5124] [ 164.778792][ T5124] Kernel Offset: disabled [ 165.155710][ T5124] Rebooting in 86400 seconds..