last executing test programs: 36.635382199s ago: executing program 0 (id=231): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x647, 0x6, 0x1, 0xfbfffff2, 0x800005f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x23, 0x7fff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x3, 0x7, 0x2, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432df, 0xcb, 0xf9, 0x5, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x4008, 0xea4, 0xa, 0x4, 0x4008, 0x8000, 0x9, 0x2, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000001, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10002, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x3762, 0xfff, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x80000000, 0x2, 0xf, 0x8, 0x9, 0x6d01, 0x5, 0x7fffffff, 0x3, 0x1f, 0x80, 0x3, 0x4, 0x2, 0x95, 0x9, 0x7, 0x53cf697d, 0x4, 0x6, 0x8, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0xfffffffc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x48, 0x4000001, 0x35a5, 0x5, 0x8, 0x5, 0xa1f, 0x8, 0x9, 0x11, 0xc, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$evdev(0x0, 0x3, 0x822b01) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x408d0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 34.565873491s ago: executing program 0 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13, @ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x180, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040), 0x2) 31.771186945s ago: executing program 0 (id=241): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30.689568571s ago: executing program 0 (id=245): syz_io_uring_setup(0xef4, 0x0, 0x0, &(0x7f00000001c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44997e9625d2448d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 25.191442147s ago: executing program 0 (id=255): syz_init_net_socket$x25(0x9, 0x5, 0x0) 24.782162433s ago: executing program 0 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) creat(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000340)) chown(&(0x7f0000000240)='./file1\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0x10000000}) socket$nl_route(0x10, 0x3, 0x0) 11.887934194s ago: executing program 2 (id=285): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 10.746093302s ago: executing program 2 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a300000000005000100070000002400"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r5, 0x0, 0x0, 0x6bf68237da62a01, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r4, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) 9.819675466s ago: executing program 3 (id=289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) 8.863749351s ago: executing program 32 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) creat(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000340)) chown(&(0x7f0000000240)='./file1\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0x10000000}) socket$nl_route(0x10, 0x3, 0x0) 8.713133874s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x6da, &(0x7f0000000240)="$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") 7.107108359s ago: executing program 3 (id=294): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) io_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0x1, 0x4, 0x0, 0x71e, 0x4a}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8, 0xfffffffffffffffe}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.956929627s ago: executing program 2 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r4}, 0x18) mmap(&(0x7f0000296000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x17afd000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x23, 0x0, 0x0) 5.867262218s ago: executing program 3 (id=298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 5.75766964s ago: executing program 1 (id=299): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.642381112s ago: executing program 3 (id=300): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000004c80)='./file0\x00', 0x0, &(0x7f0000000540)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x3}}, {@part={'part', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'cp1250'}}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@creator={'creator', 0x3d, "b6b72a1e"}}, {@part={'part', 0x3d, 0x2}}]}, 0x4, 0x337, &(0x7f0000000880)="$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") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 4.934860493s ago: executing program 2 (id=302): socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x1000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x701, 0xa, 0x8, 0x6}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 3.900093099s ago: executing program 1 (id=303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) 3.867519269s ago: executing program 4 (id=304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r7 = syz_open_dev$I2C(&(0x7f00000000c0), 0x9, 0xf00) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000240)={0xff, 0x82, 0x7, 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 2.647754568s ago: executing program 4 (id=305): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0xc}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r0}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r3}) 2.612624839s ago: executing program 1 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x6da, &(0x7f0000000240)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjlECWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lvRvac0Og5KpjoJBLTrqpzOzMaqR9ypYlJfn9xMx8M99z/rMzsw/EBPCttTwb1SeRxPLsm1vp+u7OQntiZ2Eqz25HRC0iKhHVdL0eEWuR5d7Kp2xbkpdPBvXz4erS259/tftFZ62aT1n5yrB6fdR6N23nUzQjYiJf9poc0OInR7s/1N7tge2Nr1Law2tF4OKvz9gqPKP9HtvdvI//m82HVT/OeQucU0nnvtljJmI6v8dnd/386lA53dGdvO2zHgAAAAAcV+P4VV7Yi73YigvPYzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwTZU//z/Jp0qRbkZSPP+/lm+LPH0O9TwI8cnRDZ9NDcgAAAAAAAAAgK+hV/diL7biQrG+n2S/+b9W+o3/O/FebMRKrMf12IpWbMZmrMd8RMyUGqpttTY31+ezmhGXhtS8GZ/2qXlz8BhvnfA+AwAAAAAAAMA5Vx+Rf3+yd9sfYvng938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPkoiJziKbLhXpmahUI6JelNuO+DQiamc72mNJ+m18cvrjAAAAgGdSP7ya1Meo88L7sRdbcaFY30+yz/xXss/L9Xgv1mIzVmMz2rESd/LP0Omn/sruzkJ7d2fhQTr1tvuzL4819KzF6Hz30L/nl7MSjbgbq9mW63E7ktjPVPJWXt7dWUiXD/qP64N0TMlPc0NGM1FK30lnVz/J0n85/C1C9Vi7+JQqA3NmstzJbkTm8rGlNS4WEegfiZFHpzq0p/modL/5uTS8p/4x/2B479NHSvX95uZMHI3Ezah0j9CV4ZGI+N4/P/7Nvfba/Xt3N2bPzy719f7IEkcjsVCKxNVvUCRGm8sicbm7vhy/jF/HbHw59Vasx2r8NlqxGSvNIr+Vv57T+czwSH02XV57a9RI0nOy2b1+9RtTM7Ix1fIxRTN+kaVa8Vp2TC/EaiTxMCJW4o3s72bMd68GB0f48hhnfWWMK23Jte9ni26YojG47N/Ha/KkpHG9WIpr+Zo7k+WVtxxE6cW+USrudePfj0qq380TaQt/HHp/OG1HIzFfisRLg14vnZD+bT+db7TX7q/fa707Zn+v58v0PPrzubpLpEf4xajnO3cxmyfZOTWX5b3UvcMejlct/8Wlo9KTd7lbr3Om/ioexp1DZ+qPYjEWYykrfSUrPdlzx0rzrnZbOnwNT/PSd1rV7g875fdbD6PdeT8EwPk2/YPpWuN/jf80Pmr8qXGv8Wb951M/nnqlFpP/nvxJdW7i9coryT/io/j9wed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6W08eny/1W6vrPdPVPpnJcNrtdr7xYPEhpQ5lEjyR+WMUTjZePR4f2SDwxNT+fCesvpJJoqnNY4u3HyOw0i2jx6v+uhjUTzlaYwukp6Ap5WfesxFzwdbJs/BoTyaaJ5cg8ULtpR1/Fdvo9/xmoiIfoVHXDgmTuLqA5ylG5sP3r2x8ejxD1cftN5ZeWdlbXJxcWluafGNhRt3V9src515qcKpPPwWOA3ltxNdtYh4dXTdIQ9qBQAAAAAAAAAAAJ6j0/hfiLPeRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODrbXk2qk8iifm563Pp+u7OQjudivRByWpEVCIi+V1E8q+IW9GZYqbUXDKonw9Xl97+/KvdLw7aqhblKxHbA+uNZzufohkRE/nypNq7Pbq92kFyqk920o1MGrBrReDgrP0/AAD//0f27Qo=") 1.671069533s ago: executing program 4 (id=307): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) io_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0x1, 0x4, 0x0, 0x71e, 0x4a}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8, 0xfffffffffffffffe}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.523315936s ago: executing program 1 (id=308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d00)="68377863ac05001666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb347430a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb19", 0xc8}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d", 0xc2}, {&(0x7f0000000f00)="d48c214f8225ddfdf23dd0fe077a7c2ce378dd62c1feeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c37aa24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde0", 0x4f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="6a422a90b49aff66e6d57061f85cd63d581d6e27741be92c4a9081cd661ab03e82ca5e1169e5bf91b0dd79cde0d1789dffbea8280cf8", 0x36}, {&(0x7f0000000840)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb1661fed8ddba6250af47fde6e4225f438528b6660d8b67812726721f6b755bb37ca116f51e2f239675f", 0x81}, {&(0x7f0000000c40)="4d255d8f7c7ce334049a7546eaaca8b0d773628b4399626087339698f37b7e4087df7a2806fa3e3164e6f9334d522e6bd83a5a38f774718a9008cda38a0400000028c2c008d006a81fc64d4abeefa5c4b761b69606e3c2c773737f9f777e4afebec3b0b90fe307b81245c646746a36d7d87368e57ef005408eb2d9806bbaff6f54642d1a048ae0", 0x87}, {&(0x7f00000001c0)="d6eef6769426dcdc21ace607def2e48d2e06069c94f42fd11ab99a763118b32bf83c5a6cb129bef51fdd0efb5dda5acda75d071ed6a1bccfbd5cb4f09d8f616b20aac6523a71167b14d40dbc61ca7afb0bdef8b85e3c81ca2677a920a8632acc0866bf01adacf8", 0x67}, {&(0x7f00000002c0)="940daf0d21d8bc2202e33b81de14b160ac1bfd3be800028150f4e1ad45b0bdf96fa25a42d3aad717aed987e73696e872f18fc5a837e070607158fe5f295d0c519900af850061f2", 0x47}, {&(0x7f0000000e00)="b72b26a2b79ae54de9cbff24aa7d7cf6fe1b9a67a7c49af2e56f4167bcb52910590e21491d369222424648030ab25881ba2c055294896bb17399562037b7e00a367cbe116be7baae8c3e429bc70ecb35f146345a5fdfe6edaa3a1c4c19b8177c4b3a4a5791a98ec2e8dc53946ad6d834452885ed001d39edcc861fdd2fba61d38a1e48946f47bafce3a34f8d4fe0de40ca8946b9e2bacce17150ec3e14edc8f2f1e0e611e4f387fa72b7615450a790fe53dcc924", 0xb4}], 0x6}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.470765187s ago: executing program 3 (id=309): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x43) 1.470474207s ago: executing program 4 (id=310): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, 0x0, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4060080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.151945392s ago: executing program 1 (id=311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 442.536912ms ago: executing program 4 (id=312): open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 382.476724ms ago: executing program 1 (id=313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 255.434036ms ago: executing program 2 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r7 = syz_open_dev$I2C(&(0x7f00000000c0), 0x9, 0xf00) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000240)={0xff, 0x82, 0x7, 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 72.848869ms ago: executing program 3 (id=315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=316): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 63.574163][ T4256] cgroup: Unknown subsys name 'net' [ 63.705575][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.925820][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.246779][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.265197][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.275682][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.284981][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.293042][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.294059][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.301046][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.308561][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.316840][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.323687][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.330241][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.337348][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.344276][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.351886][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.358464][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.372430][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.373398][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.387248][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.389503][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.403125][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.411226][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.418620][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.422009][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.440568][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.446011][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.453370][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.462434][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.478130][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.493216][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.501977][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.834910][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 66.959403][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 67.022608][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 67.082957][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 67.094682][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 67.106890][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.114333][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.123806][ T4271] device bridge_slave_0 entered promiscuous mode [ 67.162440][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.170116][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.178007][ T4271] device bridge_slave_1 entered promiscuous mode [ 67.203741][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.211028][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.218747][ T4267] device bridge_slave_0 entered promiscuous mode [ 67.256242][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.263587][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.271449][ T4267] device bridge_slave_1 entered promiscuous mode [ 67.308144][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.318057][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.325975][ T4273] device bridge_slave_0 entered promiscuous mode [ 67.335018][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.362393][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.369491][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.377836][ T4273] device bridge_slave_1 entered promiscuous mode [ 67.388137][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.410510][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.420478][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.427721][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.436233][ T4274] device bridge_slave_0 entered promiscuous mode [ 67.466357][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.475769][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.483854][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.493248][ T4274] device bridge_slave_1 entered promiscuous mode [ 67.541067][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.553439][ T4271] team0: Port device team_slave_0 added [ 67.561432][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.571102][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.579190][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.587394][ T4272] device bridge_slave_0 entered promiscuous mode [ 67.611336][ T4271] team0: Port device team_slave_1 added [ 67.619126][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.647328][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.654651][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.662709][ T4272] device bridge_slave_1 entered promiscuous mode [ 67.671668][ T4267] team0: Port device team_slave_0 added [ 67.684582][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.697060][ T4273] team0: Port device team_slave_0 added [ 67.711135][ T4267] team0: Port device team_slave_1 added [ 67.731080][ T4273] team0: Port device team_slave_1 added [ 67.762268][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.769528][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.797003][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.817623][ T4274] team0: Port device team_slave_0 added [ 67.825378][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.850384][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.857636][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.887010][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.908658][ T4274] team0: Port device team_slave_1 added [ 67.916177][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.936926][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.944003][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.972134][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.991654][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.998905][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.028697][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.058709][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.065824][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.093775][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.109721][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.116840][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.143541][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.164971][ T4272] team0: Port device team_slave_0 added [ 68.184468][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.191813][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.218437][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.232463][ T4272] team0: Port device team_slave_1 added [ 68.238706][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.246736][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.277061][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.327196][ T4271] device hsr_slave_0 entered promiscuous mode [ 68.336216][ T4271] device hsr_slave_1 entered promiscuous mode [ 68.345986][ T4267] device hsr_slave_0 entered promiscuous mode [ 68.355403][ T4267] device hsr_slave_1 entered promiscuous mode [ 68.364874][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.374143][ T4267] Cannot create hsr debugfs directory [ 68.388932][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.398361][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.429854][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.478123][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.489353][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.528574][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 68.528743][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.536528][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 68.552156][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 68.559623][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 68.570133][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 68.621608][ T4273] device hsr_slave_0 entered promiscuous mode [ 68.629549][ T4273] device hsr_slave_1 entered promiscuous mode [ 68.636793][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.645506][ T4273] Cannot create hsr debugfs directory [ 68.668368][ T4274] device hsr_slave_0 entered promiscuous mode [ 68.677692][ T4274] device hsr_slave_1 entered promiscuous mode [ 68.687161][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.697331][ T4274] Cannot create hsr debugfs directory [ 68.766409][ T4272] device hsr_slave_0 entered promiscuous mode [ 68.774089][ T4272] device hsr_slave_1 entered promiscuous mode [ 68.781948][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.792890][ T4272] Cannot create hsr debugfs directory [ 69.088615][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.101235][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.111759][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.127097][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.194565][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.207256][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.217326][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.232745][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.289859][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.305303][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.330352][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.339890][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.389072][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.405647][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.417080][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.442879][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.505280][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.562495][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.576384][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.586939][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.607153][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.623313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.634666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.644065][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.652229][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.662767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.684368][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.702322][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.715223][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.725558][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.739942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.753217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.763963][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.771390][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.785661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.835137][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.843862][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.854313][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.864916][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.876916][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.886335][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.898838][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.908870][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.920854][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.944903][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.955840][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.973161][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.985688][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.995335][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.005616][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.017825][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.026993][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.039161][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.068724][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.078024][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.087489][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.095432][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.111523][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.120621][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.129474][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.138261][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.146871][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.157134][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.165931][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.173165][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.183312][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.201335][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.218436][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.247906][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.258425][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.274250][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.289253][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.299500][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.313280][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.326087][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.342845][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.353123][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.365453][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.376106][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.408896][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.425889][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.439733][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.447331][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.458226][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.467908][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.479626][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.491089][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.505728][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.515369][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.527101][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.538223][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.552093][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.563902][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.570413][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 70.571235][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.578814][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 70.595887][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.606945][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.616891][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.630928][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.644802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.656247][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 70.660298][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 70.663607][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 70.678217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.698808][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.711162][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.738153][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.751099][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.769450][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.782618][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.795064][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.809448][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.818158][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.861561][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.874252][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.887537][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.902693][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.914630][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.926908][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.937244][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.955197][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.968747][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.977908][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.002646][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.022041][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.055394][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.082179][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.129269][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.181534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.202247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.239742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.251058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.260860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.272920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.284655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.294636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.318844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.328649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.344790][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.352361][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.362036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.372860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.383211][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.390358][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.404444][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.418077][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.441585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.451232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.460298][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467056][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.487823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.497490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.507434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.517040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.528321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.537240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.594581][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.612290][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.624323][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.633734][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.644456][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.653734][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.663083][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.672399][ T4267] device veth0_vlan entered promiscuous mode [ 71.729007][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.738433][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.748326][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.757824][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.769324][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.778424][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.786909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.797191][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.822702][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.833779][ T4267] device veth1_vlan entered promiscuous mode [ 71.853421][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.862869][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.875108][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.944416][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.956501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.972117][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.987125][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.996955][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.016610][ T4273] device veth0_vlan entered promiscuous mode [ 72.042766][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.055138][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.067263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.084766][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.106340][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.141876][ T4273] device veth1_vlan entered promiscuous mode [ 72.150474][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.159297][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.191147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.211595][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.231289][ T4271] device veth0_vlan entered promiscuous mode [ 72.246346][ T4267] device veth0_macvtap entered promiscuous mode [ 72.270987][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.283555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.292076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.303258][ T4271] device veth1_vlan entered promiscuous mode [ 72.315695][ T4267] device veth1_macvtap entered promiscuous mode [ 72.355865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.365965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.383156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.397348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.416358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.438570][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.459632][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.473073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.482624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.499101][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.521105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.535999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.546933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.561423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.572113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.581447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.594651][ T4273] device veth0_macvtap entered promiscuous mode [ 72.629697][ T4271] device veth0_macvtap entered promiscuous mode [ 72.650513][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 72.650792][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 72.659822][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673263][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683278][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.692911][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.707089][ T4273] device veth1_macvtap entered promiscuous mode [ 72.717255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.728396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.738371][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 72.739483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.745306][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 72.760202][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 72.764121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.776939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.789575][ T4271] device veth1_macvtap entered promiscuous mode [ 72.821826][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.834189][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.845743][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.866089][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.874896][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.885248][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.894753][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.903619][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.918421][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.930095][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.941327][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.952038][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.964761][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.975612][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.987440][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.999024][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.012847][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.022500][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.033233][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.043825][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.065037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.077421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.087170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.096858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.108718][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.119801][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.131267][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.142065][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.154486][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.184078][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.193263][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.208495][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226709][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237073][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246650][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.263489][ T4272] device veth0_vlan entered promiscuous mode [ 73.291165][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.299811][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.309936][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.320675][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.333002][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.341697][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.349626][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.358023][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.401322][ T4274] device veth0_vlan entered promiscuous mode [ 73.426302][ T4272] device veth1_vlan entered promiscuous mode [ 73.481211][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.488809][ T4274] device veth1_vlan entered promiscuous mode [ 73.497209][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.517816][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.534224][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.534756][ T4272] device veth0_macvtap entered promiscuous mode [ 73.550755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.561201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.569204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.577817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.586304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.595375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.604571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.642182][ T4272] device veth1_macvtap entered promiscuous mode [ 73.663742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.679353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.688738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.697455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.706408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.725634][ T4274] device veth0_macvtap entered promiscuous mode [ 73.763846][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.764730][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.776428][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.794497][ T4274] device veth1_macvtap entered promiscuous mode [ 73.801666][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.822935][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.834581][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.845494][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.857141][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.867753][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.878756][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.891717][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.901384][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.909883][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.919381][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.927934][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.937379][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.946739][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.968923][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.979236][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.991695][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.002667][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.014834][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.029673][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.039724][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.051287][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.064625][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.092868][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.112536][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.125929][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.137698][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.149707][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.161412][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.174657][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.185022][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.197112][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.207747][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.218374][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.231284][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.254518][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.273727][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.278731][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.294790][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.320517][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.338664][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351948][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.364548][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.374592][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.385443][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.397245][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.407744][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.419584][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.429872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.449960][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.467489][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.481514][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.530388][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.539135][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.550195][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.565855][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.613997][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.623621][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634662][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.670377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.690326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.730346][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 74.737629][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 74.770872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.790257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.811044][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 74.817453][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 74.824591][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 74.834019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.936419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.946657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.955321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 75.038789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.141029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.528040][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.591799][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.664673][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.686820][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.697135][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.703973][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.709742][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.731006][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.790328][ T4378] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.813370][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.941899][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.950862][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.965241][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.016597][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 76.063952][ T4378] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.207624][ T4378] usb 4-1: config 0 has no interface number 0 [ 76.349432][ T4378] usb 4-1: config 0 interface 89 has no altsetting 0 [ 76.641059][ T4378] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 76.660064][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.668104][ T4378] usb 4-1: Product: syz [ 76.675395][ T4378] usb 4-1: Manufacturer: syz [ 76.682688][ T4378] usb 4-1: SerialNumber: syz [ 76.996149][ T4378] usb 4-1: config 0 descriptor?? [ 77.392268][ T4378] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 77.786406][ T4426] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 77.795343][ T4426] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 77.886496][ T4378] em28xx 4-1:0.89: Video interface 89 found: bulk [ 78.930480][ T4378] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 79.231755][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 79.248595][ T4395] loop3: detected capacity change from 0 to 64 [ 79.813063][ T4453] hub 6-0:1.0: USB hub found [ 79.821420][ T4453] hub 6-0:1.0: 1 port detected [ 79.937468][ T4452] overlayfs: failed to resolve './file0': -2 [ 81.394969][ T4378] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 81.840727][ T41] cfg80211: failed to load regulatory.db [ 81.920113][ T4378] em28xx 4-1:0.89: board has no eeprom [ 82.003081][ T4378] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 82.029446][ T4378] em28xx 4-1:0.89: analog set to bulk mode. [ 82.125983][ T4378] usb 4-1: USB disconnect, device number 2 [ 82.151080][ T4378] em28xx 4-1:0.89: Disconnecting em28xx [ 82.917278][ T4310] em28xx 4-1:0.89: Registering V4L2 extension [ 83.160212][ T4310] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 83.168539][ T4310] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 83.217766][ T4310] em28xx 4-1:0.89: No AC97 audio processor [ 83.426939][ T4489] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 83.436953][ T4489] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 83.464825][ T4310] usb 4-1: Decoder not found [ 83.725275][ T4310] em28xx 4-1:0.89: failed to create media graph [ 83.736587][ T4310] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 83.769526][ T4310] em28xx 4-1:0.89: Registering snapshot button... [ 84.769508][ T4310] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 84.863115][ T4310] em28xx 4-1:0.89: Remote control support is not available for this card. [ 84.898945][ T4378] em28xx 4-1:0.89: Closing input extension [ 84.961178][ T4378] em28xx 4-1:0.89: Deregistering snapshot button [ 85.150877][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 85.360729][ T4378] em28xx 4-1:0.89: Freeing device [ 86.861317][ T4520] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 86.875298][ T4520] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 88.285903][ T4533] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 88.294938][ T4533] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 89.590549][ T4550] hub 6-0:1.0: USB hub found [ 89.597419][ T4550] hub 6-0:1.0: 1 port detected [ 90.533331][ T4566] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 90.542613][ T4566] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 94.063535][ T4581] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 94.072922][ T4581] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 95.170020][ T4589] loop3: detected capacity change from 0 to 40427 [ 95.194662][ T4590] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 95.203942][ T4590] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 95.233705][ T4589] F2FS-fs (loop3): invalid crc value [ 95.254419][ T4589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.310321][ T4589] F2FS-fs (loop3): Start checkpoint disabled! [ 95.358804][ T4589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 97.286414][ T4610] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 97.295778][ T4610] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 97.658951][ T40] kworker/u4:2: attempt to access beyond end of device [ 97.658951][ T40] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 97.683000][ T40] kworker/u4:2: attempt to access beyond end of device [ 97.683000][ T40] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 98.996299][ T4623] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 99.006677][ T4623] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 99.946466][ T4632] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 99.956105][ T4632] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 100.797978][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 102.868371][ T26] audit: type=1326 audit(1753268174.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.83" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399bf8e9a9 code=0x0 [ 104.262158][ T4675] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 104.271869][ T4675] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 105.250856][ T4682] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 105.262374][ T4682] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 106.128597][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 109.348391][ T4702] loop2: detected capacity change from 0 to 1024 [ 109.435834][ T4702] hfsplus: extend alloc file! (8192,8,110) [ 111.138247][ T26] audit: type=1326 audit(1753268182.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4718 comm="syz.4.101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91d938e9a9 code=0x0 [ 112.421016][ T4737] hub 6-0:1.0: USB hub found [ 112.428341][ T4737] hub 6-0:1.0: 1 port detected [ 113.310312][ T4739] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 113.320232][ T4739] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 113.598480][ T4745] loop0: detected capacity change from 0 to 1024 [ 113.632029][ T4745] hfsplus: extend alloc file! (8192,8,110) [ 113.832089][ T4748] loop2: detected capacity change from 0 to 40427 [ 113.871595][ T4748] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 113.878893][ T4748] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.890436][ T4748] F2FS-fs (loop2): invalid crc value [ 114.735443][ T4748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.767869][ T4748] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.776121][ T4748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.872690][ T26] audit: type=1326 audit(1753268186.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.066864][ T26] audit: type=1326 audit(1753268186.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.090933][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.100160][ T26] audit: type=1326 audit(1753268186.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.125002][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.132937][ T26] audit: type=1326 audit(1753268186.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.158093][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.166117][ T26] audit: type=1326 audit(1753268186.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.191138][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.199704][ T26] audit: type=1326 audit(1753268186.490:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 116.225808][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.278131][ T4272] syz-executor: attempt to access beyond end of device [ 116.278131][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.051505][ T4777] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 117.062438][ T4777] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 117.767418][ T26] audit: type=1326 audit(1753268189.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91d938e9a9 code=0x0 [ 117.852511][ T4787] hub 6-0:1.0: USB hub found [ 117.859228][ T4787] hub 6-0:1.0: 1 port detected [ 118.544810][ T4785] loop1: detected capacity change from 0 to 1024 [ 119.251348][ T4785] hfsplus: extend alloc file! (8192,8,110) [ 119.346787][ T4796] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 119.356846][ T4796] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 120.696852][ T26] audit: type=1326 audit(1753268192.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9438e9a9 code=0x0 [ 121.469417][ T4816] input: syz1 as /devices/virtual/input/input6 [ 121.551506][ T4810] loop1: detected capacity change from 0 to 4096 [ 121.780102][ T4820] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 123.803795][ T4842] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 123.815242][ T4842] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 124.557708][ T4851] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 124.569028][ T4851] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 125.387354][ T26] audit: type=1326 audit(1753268196.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9438e9a9 code=0x0 [ 128.216748][ T4893] syz.1.154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.249815][ T4883] loop0: detected capacity change from 0 to 32768 [ 128.268665][ T4875] loop4: detected capacity change from 0 to 32768 [ 128.300039][ T4310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.316898][ T4883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.151 (4883) [ 128.446614][ T4891] syz.3.155 (4891) used greatest stack depth: 20464 bytes left [ 128.463258][ T4883] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.465782][ T4875] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 128.511267][ T4310] usb 3-1: Using ep0 maxpacket: 32 [ 128.512532][ T4883] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.521598][ T4310] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 128.545819][ T4883] BTRFS info (device loop0): using free space tree [ 128.594357][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.651338][ T4310] usb 3-1: config 0 descriptor?? [ 128.689692][ T4310] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 128.740832][ T4898] Zero length message leads to an empty skb [ 128.785584][ T4274] (syz-executor,4274,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 128.890408][ T4883] BTRFS info (device loop0): enabling ssd optimizations [ 128.968504][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 129.550724][ T4339] usb 3-1: USB disconnect, device number 2 [ 129.612637][ T4898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.843740][ T4898] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.997118][ T4898] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 130.101009][ T4898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.109311][ T4898] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.118330][ T4898] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 130.125821][ T4898] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.132837][ T4898] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.138964][ T4898] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 130.147553][ T4898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.153719][ T4898] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.159780][ T4898] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 130.890061][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.785322][ T26] audit: type=1326 audit(1753268203.320:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.1.165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52f238e9a9 code=0x0 [ 131.979547][ T26] audit: type=1326 audit(1753268203.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.4.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91d938e9a9 code=0x0 [ 132.016873][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.188606][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.203221][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.204033][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.892449][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899522][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952405][ T4955] loop2: detected capacity change from 0 to 1024 [ 132.970248][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 132.978404][ T4955] hfsplus: extend alloc file! (8192,8,110) [ 134.250177][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 134.256644][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 134.262853][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 135.795468][ T4980] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 135.804760][ T4980] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 139.455833][ T5000] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 139.465030][ T5000] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 140.881183][ T5017] loop4: detected capacity change from 0 to 1024 [ 142.247928][ T5017] hfsplus: extend alloc file! (8192,8,110) [ 142.291087][ T26] audit: type=1326 audit(1753268213.820:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b2538e9a9 code=0x0 [ 143.405890][ T5029] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 144.498157][ T26] audit: type=1326 audit(1753268216.030:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91d938e9a9 code=0x0 [ 144.559688][ T5041] loop3: detected capacity change from 0 to 4096 [ 148.850183][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.632122][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 149.758430][ T5089] input: syz1 as /devices/virtual/input/input7 [ 149.815449][ T5089] loop4: detected capacity change from 0 to 4096 [ 149.963675][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.226815][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.236711][ T7] usb 3-1: config 1 has no interface number 0 [ 150.243056][ T7] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 150.254166][ T7] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 150.283569][ T5090] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 150.368388][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.378807][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.392665][ T26] audit: type=1326 audit(1753268221.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.0.208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b2538e9a9 code=0x0 [ 150.600097][ T7] usb 3-1: Product: syz [ 151.263819][ T7] usb 3-1: Manufacturer: syz [ 151.268500][ T7] usb 3-1: SerialNumber: syz [ 151.537700][ T7] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 151.555260][ T7] usb 3-1: USB disconnect, device number 3 [ 152.581964][ T5113] hub 6-0:1.0: USB hub found [ 152.588926][ T5113] hub 6-0:1.0: 1 port detected [ 155.949016][ T5129] loop4: detected capacity change from 0 to 40427 [ 155.984541][ T5129] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 155.991601][ T5129] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.002544][ T5129] F2FS-fs (loop4): invalid crc value [ 156.034359][ T5129] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.067499][ T5129] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.074746][ T5129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.152597][ T26] audit: type=1326 audit(1753268227.690:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 156.626367][ T26] audit: type=1326 audit(1753268227.710:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 156.650174][ T26] audit: type=1326 audit(1753268227.710:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 156.674589][ T26] audit: type=1326 audit(1753268227.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 156.859528][ T5137] loop1: detected capacity change from 0 to 40427 [ 156.883628][ T26] audit: type=1326 audit(1753268227.720:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 156.938361][ T4274] syz-executor: attempt to access beyond end of device [ 156.938361][ T4274] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.948832][ T5137] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 156.948883][ T5137] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.952323][ T5137] F2FS-fs (loop1): invalid crc value [ 157.103052][ T5137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.120461][ T26] audit: type=1326 audit(1753268227.720:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 157.120494][ T26] audit: type=1326 audit(1753268227.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 157.120518][ T26] audit: type=1326 audit(1753268227.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 157.120544][ T26] audit: type=1326 audit(1753268227.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 157.120613][ T26] audit: type=1326 audit(1753268227.720:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d938e9a9 code=0x7ffc0000 [ 157.158128][ T5137] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 157.218585][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.284967][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.304587][ T5137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 157.441095][ T4267] syz-executor: attempt to access beyond end of device [ 157.441095][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.000656][ T5169] hub 6-0:1.0: USB hub found [ 159.006518][ T5169] hub 6-0:1.0: 1 port detected [ 161.750600][ T5184] loop2: detected capacity change from 0 to 40427 [ 162.020233][ T5184] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 162.028454][ T5184] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.081102][ T5184] F2FS-fs (loop2): invalid crc value [ 162.117130][ T5188] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 162.127348][ T5188] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 162.189814][ T5184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.239184][ T5184] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.248046][ T5184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.688673][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 162.688687][ T26] audit: type=1326 audit(1753268234.220:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 163.701361][ T4272] syz-executor: attempt to access beyond end of device [ 163.701361][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.780849][ T26] audit: type=1326 audit(1753268234.310:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 164.741837][ T5221] hub 6-0:1.0: USB hub found [ 164.750467][ T5221] hub 6-0:1.0: 1 port detected [ 165.388578][ T26] audit: type=1326 audit(1753268234.310:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.331162][ T26] audit: type=1326 audit(1753268234.310:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.353694][ T26] audit: type=1326 audit(1753268234.420:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.376232][ T26] audit: type=1326 audit(1753268234.420:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.400607][ T26] audit: type=1326 audit(1753268234.420:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.423260][ T26] audit: type=1326 audit(1753268234.420:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 166.445903][ T26] audit: type=1326 audit(1753268234.420:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 167.377271][ T26] audit: type=1326 audit(1753268234.420:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a9438e9a9 code=0x7ffc0000 [ 170.654289][ T5268] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 170.663370][ T5268] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 176.805706][ T5310] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 176.814989][ T5310] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 183.490089][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.750211][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 184.768153][ T14] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 185.520515][ T14] usb 2-1: config 0 has no interface number 0 [ 185.527091][ T14] usb 2-1: config 0 interface 89 has no altsetting 0 [ 185.538377][ T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 185.557465][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.566801][ T14] usb 2-1: Product: syz [ 185.575296][ T14] usb 2-1: Manufacturer: syz [ 186.420161][ T14] usb 2-1: SerialNumber: syz [ 186.434425][ T14] usb 2-1: config 0 descriptor?? [ 186.571326][ T14] usb 2-1: can't set config #0, error -71 [ 186.690556][ T14] usb 2-1: USB disconnect, device number 2 [ 187.476156][ T5377] loop2: detected capacity change from 0 to 1024 [ 187.505353][ T5377] hfsplus: extend alloc file! (8192,8,110) [ 189.546215][ T5390] MPTCP: kernel_bind error, err=-98 [ 190.681393][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.777721][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.789797][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.880182][ T4378] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 191.152714][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.245760][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.278467][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.290292][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.290294][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 191.290356][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 191.308752][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 191.661299][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 191.691323][ T4378] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 192.344656][ T5415] overlayfs: failed to resolve './file1': -2 [ 192.543158][ T4378] usb 4-1: config 0 has no interface number 0 [ 192.568718][ T4378] usb 4-1: config 0 interface 89 has no altsetting 0 [ 192.586836][ T4378] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 192.606535][ T5414] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 192.615891][ T5414] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 192.671938][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.690074][ T4378] usb 4-1: Product: syz [ 192.694289][ T4378] usb 4-1: Manufacturer: syz [ 192.699410][ T4378] usb 4-1: SerialNumber: syz [ 192.757282][ T4378] usb 4-1: config 0 descriptor?? [ 192.790450][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 192.790464][ T26] audit: type=1326 audit(1753268264.310:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.4.305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91d938e9a9 code=0x0 [ 192.838927][ T4378] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 192.854703][ T4378] em28xx 4-1:0.89: Video interface 89 found: bulk [ 192.965962][ T5423] loop1: detected capacity change from 0 to 1024 [ 192.976824][ T5423] hfsplus: extend alloc file! (8192,8,110) [ 193.683432][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 193.708347][ T4376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.842130][ T4410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.900292][ T4378] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 193.994781][ T4378] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 194.030949][ T4378] em28xx 4-1:0.89: board has no eeprom [ 194.065500][ T4410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.120155][ T4378] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 194.148017][ T4378] em28xx 4-1:0.89: analog set to bulk mode. [ 194.244353][ T4378] usb 4-1: USB disconnect, device number 3 [ 194.298905][ T4378] em28xx 4-1:0.89: Disconnecting em28xx [ 194.328844][ T4332] em28xx 4-1:0.89: Registering V4L2 extension [ 194.341964][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348510][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794175][ T4410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.100210][ T4332] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 195.107211][ T4332] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 195.204355][ T4332] em28xx 4-1:0.89: No AC97 audio processor [ 195.222659][ T4332] usb 4-1: Decoder not found [ 195.227365][ T4332] em28xx 4-1:0.89: failed to create media graph [ 195.345638][ T4332] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 195.356240][ T4332] em28xx 4-1:0.89: Registering snapshot button... [ 195.364331][ T4332] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8 [ 195.376951][ T4332] em28xx 4-1:0.89: Remote control support is not available for this card. [ 195.385814][ T4378] em28xx 4-1:0.89: Closing input extension [ 195.391748][ T4378] em28xx 4-1:0.89: Deregistering snapshot button [ 195.522614][ T5450] ================================================================== [ 195.530714][ T5450] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 195.537681][ T5450] Read of size 8 at addr ffff88807f6cc738 by task v4l_id/5450 [ 195.545149][ T5450] [ 195.547494][ T5450] CPU: 1 PID: 5450 Comm: v4l_id Not tainted 6.1.146-syzkaller #0 [ 195.555244][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.565316][ T5450] Call Trace: [ 195.568687][ T5450] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.571617][ T5450] dump_stack_lvl+0x168/0x22e [ 195.576285][ T5450] ? __lock_acquire+0x7c50/0x7c50 [ 195.581295][ T5450] ? show_regs_print_info+0x12/0x12 [ 195.586474][ T5450] ? load_image+0x3b0/0x3b0 [ 195.590959][ T5450] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 195.596310][ T5450] ? __virt_addr_valid+0x188/0x540 [ 195.601414][ T5450] ? __virt_addr_valid+0x465/0x540 [ 195.606532][ T5450] ? v4l2_fh_open+0xc6/0x430 [ 195.611125][ T5450] print_report+0xa8/0x200 [ 195.615638][ T5450] kasan_report+0x10b/0x140 [ 195.620308][ T5450] ? v4l2_fh_open+0xc6/0x430 [ 195.624979][ T5450] v4l2_fh_open+0xc6/0x430 [ 195.629390][ T5450] em28xx_v4l2_open+0x152/0x990 [ 195.634240][ T5450] ? __lock_acquire+0x7c50/0x7c50 [ 195.639269][ T5450] v4l2_open+0x20b/0x360 [ 195.643549][ T5450] chrdev_open+0x597/0x670 [ 195.647957][ T5450] ? cd_forget+0x160/0x160 [ 195.652363][ T5450] ? tomoyo_file_open+0xe9/0x170 [ 195.657285][ T5450] ? fsnotify_perm+0x39b/0x550 [ 195.662045][ T5450] ? cd_forget+0x160/0x160 [ 195.666455][ T5450] do_dentry_open+0x7e9/0x10d0 [ 195.671259][ T5450] path_openat+0x25c6/0x2e70 [ 195.675845][ T5450] ? do_sys_openat2+0xcf/0x490 [ 195.680609][ T5450] ? __x64_sys_openat+0x135/0x160 [ 195.685631][ T5450] ? do_syscall_64+0x4c/0xa0 [ 195.690221][ T5450] ? do_filp_open+0x3c0/0x3c0 [ 195.694961][ T5450] do_filp_open+0x1c1/0x3c0 [ 195.699471][ T5450] ? vfs_tmpfile+0x480/0x480 [ 195.704064][ T5450] ? _raw_spin_unlock+0x24/0x40 [ 195.708954][ T5450] ? alloc_fd+0x58f/0x630 [ 195.713278][ T5450] do_sys_openat2+0x142/0x490 [ 195.717950][ T5450] ? up_read+0x20/0x20 [ 195.722095][ T5450] ? do_sys_open+0xe0/0xe0 [ 195.726759][ T5450] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.732733][ T5450] ? lock_chain_count+0x20/0x20 [ 195.737574][ T5450] __x64_sys_openat+0x135/0x160 [ 195.742422][ T5450] do_syscall_64+0x4c/0xa0 [ 195.747016][ T5450] ? clear_bhb_loop+0x60/0xb0 [ 195.751684][ T5450] ? clear_bhb_loop+0x60/0xb0 [ 195.756360][ T5450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.762523][ T5450] RIP: 0033:0x7f4b2b5dc407 [ 195.767378][ T5450] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 195.770166][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 195.786981][ T5450] RSP: 002b:00007ffcafb0eb20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 195.787015][ T5450] RAX: ffffffffffffffda RBX: 00007f4b2b550880 RCX: 00007f4b2b5dc407 [ 195.787025][ T5450] RDX: 0000000000000000 RSI: 00007ffcafb0ff1c RDI: ffffffffffffff9c [ 195.787035][ T5450] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 195.787044][ T5450] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 195.787053][ T5450] R13: 00007ffcafb0ed70 R14: 00007f4b2b82d000 R15: 000055c0bf90c4d8 [ 195.787070][ T5450] [ 195.844598][ T5450] [ 195.846932][ T5450] Allocated by task 4332: [ 195.851246][ T5450] kasan_set_track+0x4b/0x70 [ 195.855842][ T5450] __kasan_kmalloc+0x8e/0xa0 [ 195.860430][ T5450] em28xx_v4l2_init+0x107/0x2e70 [ 195.865362][ T5450] em28xx_init_extension+0x118/0x1b0 [ 195.870729][ T5450] process_one_work+0x898/0x1160 [ 195.875676][ T5450] worker_thread+0xd1c/0x1250 [ 195.880352][ T5450] kthread+0x29d/0x330 [ 195.884416][ T5450] ret_from_fork+0x1f/0x30 [ 195.888820][ T5450] [ 195.891220][ T5450] Freed by task 4332: [ 195.895264][ T5450] kasan_set_track+0x4b/0x70 [ 195.899837][ T5450] kasan_save_free_info+0x2d/0x50 [ 195.904846][ T5450] ____kasan_slab_free+0x126/0x1e0 [ 195.909951][ T5450] slab_free_freelist_hook+0x131/0x1a0 [ 195.915935][ T5450] __kmem_cache_free+0xb6/0x1f0 [ 195.920771][ T5450] em28xx_v4l2_init+0x166c/0x2e70 [ 195.925774][ T5450] em28xx_init_extension+0x118/0x1b0 [ 195.931043][ T5450] process_one_work+0x898/0x1160 [ 195.935967][ T5450] worker_thread+0xd1c/0x1250 [ 195.940628][ T5450] kthread+0x29d/0x330 [ 195.944686][ T5450] ret_from_fork+0x1f/0x30 [ 195.949085][ T5450] [ 195.951389][ T5450] The buggy address belongs to the object at ffff88807f6cc000 [ 195.951389][ T5450] which belongs to the cache kmalloc-8k of size 8192 [ 195.965518][ T5450] The buggy address is located 1848 bytes inside of [ 195.965518][ T5450] 8192-byte region [ffff88807f6cc000, ffff88807f6ce000) [ 195.978953][ T5450] [ 195.981259][ T5450] The buggy address belongs to the physical page: [ 195.987660][ T5450] page:ffffea0001fdb200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f6c8 [ 195.997812][ T5450] head:ffffea0001fdb200 order:3 compound_mapcount:0 compound_pincount:0 [ 196.006150][ T5450] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 196.014139][ T5450] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442280 [ 196.022707][ T5450] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 196.031271][ T5450] page dumped because: kasan: bad access detected [ 196.037685][ T5450] page_owner tracks the page as allocated [ 196.043387][ T5450] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5403, tgid 5403 (syz-executor), ts 194165151238, free_ts 186407169000 [ 196.066474][ T5450] post_alloc_hook+0x173/0x1a0 [ 196.071326][ T5450] get_page_from_freelist+0x1a26/0x1ac0 [ 196.077684][ T5450] __alloc_pages+0x1df/0x4e0 [ 196.082265][ T5450] alloc_slab_page+0x5d/0x160 [ 196.087139][ T5450] new_slab+0x87/0x2c0 [ 196.091456][ T5450] ___slab_alloc+0xbc6/0x1220 [ 196.096110][ T5450] __kmem_cache_alloc_node+0x1a0/0x260 [ 196.101557][ T5450] __kmalloc_node+0xa0/0x240 [ 196.106126][ T5450] kvmalloc_node+0x6c/0x180 [ 196.110642][ T5450] pfifo_fast_init+0x35f/0x6a0 [ 196.115510][ T5450] qdisc_create_dflt+0x11a/0x4b0 [ 196.120804][ T5450] dev_activate+0x393/0x11a0 [ 196.125381][ T5450] __dev_open+0x334/0x420 [ 196.129694][ T5450] __dev_change_flags+0x20a/0x6a0 [ 196.135688][ T5450] dev_change_flags+0x82/0x1a0 [ 196.140869][ T5450] do_setlink+0xc31/0x3c40 [ 196.145267][ T5450] page last free stack trace: [ 196.149918][ T5450] free_unref_page_prepare+0x8b4/0x9a0 [ 196.155388][ T5450] free_unref_page+0x2e/0x3f0 [ 196.160146][ T5450] __unfreeze_partials+0x1a5/0x200 [ 196.165448][ T5450] put_cpu_partial+0x17c/0x250 [ 196.170379][ T5450] qlist_free_all+0x76/0xe0 [ 196.174868][ T5450] kasan_quarantine_reduce+0x144/0x160 [ 196.180755][ T5450] __kasan_slab_alloc+0x1e/0x80 [ 196.185608][ T5450] slab_post_alloc_hook+0x4b/0x480 [ 196.190801][ T5450] kmem_cache_alloc+0x123/0x2f0 [ 196.195892][ T5450] taskstats_exit+0x151/0x9d0 [ 196.200551][ T5450] do_exit+0x8b4/0x2400 [ 196.204686][ T5450] do_group_exit+0x217/0x2d0 [ 196.209348][ T5450] get_signal+0x1272/0x1350 [ 196.213934][ T5450] arch_do_signal_or_restart+0xb0/0x1230 [ 196.219629][ T5450] exit_to_user_mode_loop+0x70/0x110 [ 196.225037][ T5450] exit_to_user_mode_prepare+0xb1/0x140 [ 196.230578][ T5450] [ 196.232882][ T5450] Memory state around the buggy address: [ 196.238489][ T5450] ffff88807f6cc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.246614][ T5450] ffff88807f6cc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.254661][ T5450] >ffff88807f6cc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.262700][ T5450] ^ [ 196.268643][ T5450] ffff88807f6cc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.276961][ T5450] ffff88807f6cc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.285266][ T5450] ================================================================== [ 196.414515][ T4410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.619491][ T5453] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 196.628588][ T5453] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 197.244079][ T5450] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.251320][ T5450] CPU: 0 PID: 5450 Comm: v4l_id Not tainted 6.1.146-syzkaller #0 [ 197.259043][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.269110][ T5450] Call Trace: [ 197.272393][ T5450] [ 197.275324][ T5450] dump_stack_lvl+0x168/0x22e [ 197.280007][ T5450] ? memcpy+0x3c/0x60 [ 197.283995][ T5450] ? show_regs_print_info+0x12/0x12 [ 197.289378][ T5450] ? load_image+0x3b0/0x3b0 [ 197.293904][ T5450] panic+0x2c9/0x710 [ 197.297817][ T5450] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 197.303991][ T5450] ? bpf_jit_dump+0xd0/0xd0 [ 197.308510][ T5450] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 197.314426][ T5450] ? _raw_spin_unlock+0x40/0x40 [ 197.319305][ T5450] check_panic_on_warn+0x80/0xa0 [ 197.324262][ T5450] ? v4l2_fh_open+0xc6/0x430 [ 197.328855][ T5450] end_report+0x66/0x110 [ 197.333184][ T5450] kasan_report+0x118/0x140 [ 197.337820][ T5450] ? v4l2_fh_open+0xc6/0x430 [ 197.342485][ T5450] v4l2_fh_open+0xc6/0x430 [ 197.346886][ T5450] em28xx_v4l2_open+0x152/0x990 [ 197.351813][ T5450] ? __lock_acquire+0x7c50/0x7c50 [ 197.356832][ T5450] v4l2_open+0x20b/0x360 [ 197.361066][ T5450] chrdev_open+0x597/0x670 [ 197.365473][ T5450] ? cd_forget+0x160/0x160 [ 197.369874][ T5450] ? tomoyo_file_open+0xe9/0x170 [ 197.374810][ T5450] ? fsnotify_perm+0x39b/0x550 [ 197.379557][ T5450] ? cd_forget+0x160/0x160 [ 197.383956][ T5450] do_dentry_open+0x7e9/0x10d0 [ 197.388723][ T5450] path_openat+0x25c6/0x2e70 [ 197.393300][ T5450] ? do_sys_openat2+0xcf/0x490 [ 197.398151][ T5450] ? __x64_sys_openat+0x135/0x160 [ 197.403189][ T5450] ? do_syscall_64+0x4c/0xa0 [ 197.407854][ T5450] ? do_filp_open+0x3c0/0x3c0 [ 197.412533][ T5450] do_filp_open+0x1c1/0x3c0 [ 197.417108][ T5450] ? vfs_tmpfile+0x480/0x480 [ 197.421994][ T5450] ? _raw_spin_unlock+0x24/0x40 [ 197.427143][ T5450] ? alloc_fd+0x58f/0x630 [ 197.431466][ T5450] do_sys_openat2+0x142/0x490 [ 197.436249][ T5450] ? up_read+0x20/0x20 [ 197.440393][ T5450] ? do_sys_open+0xe0/0xe0 [ 197.444799][ T5450] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 197.450875][ T5450] ? lock_chain_count+0x20/0x20 [ 197.455721][ T5450] __x64_sys_openat+0x135/0x160 [ 197.460564][ T5450] do_syscall_64+0x4c/0xa0 [ 197.464965][ T5450] ? clear_bhb_loop+0x60/0xb0 [ 197.469717][ T5450] ? clear_bhb_loop+0x60/0xb0 [ 197.474475][ T5450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.480364][ T5450] RIP: 0033:0x7f4b2b5dc407 [ 197.484771][ T5450] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 197.504463][ T5450] RSP: 002b:00007ffcafb0eb20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 197.512956][ T5450] RAX: ffffffffffffffda RBX: 00007f4b2b550880 RCX: 00007f4b2b5dc407 [ 197.521020][ T5450] RDX: 0000000000000000 RSI: 00007ffcafb0ff1c RDI: ffffffffffffff9c [ 197.528982][ T5450] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 197.537027][ T5450] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 197.545085][ T5450] R13: 00007ffcafb0ed70 R14: 00007f4b2b82d000 R15: 000055c0bf90c4d8 [ 197.553078][ T5450] [ 197.556531][ T5450] Kernel Offset: disabled [ 197.560849][ T5450] Rebooting in 86400 seconds..