last executing test programs: 1m46.422011084s ago: executing program 3 (id=82): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x10}}]}, 0x2c}}, 0x0) 1m46.342755696s ago: executing program 3 (id=84): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000001100)="$eJzs3U1sHNUdAPA368/EJl7zaaCEFFoRKNghidT0FgTqEXHpHRQSGmEoauiBiI/QA6ISokiIU8WBigulUorUSqBKFeqp7alVbz2hXqhUpVKiXhopcWXnvfX62ZNdT9az3t3fT/r77Zs3O///eCNnZnb2bQBGVmPt59GjC0UIH3zx/hOvPVv8bnXZva01Dqz9LGKvGUKYaOsX2fa+iguuXHz1xFZtEQ6v/Uz98OSF1nNnQgjnwoHwZWiGT5eWL33y4eMHP3tr+vZ3zz7/+g7tfku+HwAAMIzO/2X5Hw/+688Pz18+v/94mGotT8fnzdificf9h+KBcjpeboSN/aIt2k1m643FaGTrjWXrjWd5xkvyTWTbmShZb7JDvrG2ZVvtJwAAAAyidF7bDEVjcUO/0VhcvHbev+qrucli8cXTy6fO9KlQAAAAoLL/vrF2060QQgghhBBCiB5G6x7lXVCLEKuxMtff6w8AAADA6MnnC9vkXG9n6mptrdld/guPNbZ+PvRA3f/+5R+s/B+/6S8OAADVDevRZNqvdByd5jHI5xEcy5633eP/Rrad8W3WWTav4KDMN1hWZ/573a3K6t/u69gvZfXn82HuVmX15/N07lZl9U/VXEdVZfVP11xHVWX176m5jqrK6t9bcx1VldU/U3MdVZXVP1tzHVWV1X9TzXVUVVb/vprrqKqs/kG5rbas/mbNdVRVVv98zXVUVVb/zTXXUVVZ/bfUXEdVZfXfWnMd/XJPbNPvYX823n7+nJ/TDco5HgAAAIy6/5n/TwghhBBiCOK2XVCDEEKI3Rxv9PsCBAAAANB36XMB6VPvK1EaH+swPt5hfKLD+GSH8akO4wAAAEAIv3/71J3vFeuf87/R+fDSvFFp/qXtzmOUz0e43fw3Ou9Z2tq1+i9tO/+gzFsGAADAaCm+/+XVh5746OX5y+f3H287+74az3fTPKDj8drA57Gf7guYzfpFOoc+vjFPo2S9/PrATWXbe+oGdxQAAABGWDp/b4Zi7ZS70eo3GouL6+fjC2GiOHV6+eSh2E/fz/KnuYmp1eWP1ls2AAAAsA3r5/tFY3GL8//0Pb4LYbJYfPH08qkz1/qzreUTjfbrAnPry4v26wLNbPnhkuVHYj99f+cP5/asLV888aPlZ3u98wAAADAizrxy9vlnlpdP/njLB+nT7NdbZzsP0ucLtvOsEIrQm+weeOBBtw/6+EcJAADYEV9//f7ET47M/uHa5//X579Ln/8/EPvNOLffX+MK6T6B9DmATZ/Xf3pjnrmy9V7auF4zW28sxlRW93TbdkLbfIPpefNl+ZobtzNZkm8myzeb5cvnKRjP1k/59mXL8/kJ03pz2fJ8HsbxLEeR5b8vAAAAQLmll194aenMK2cfOf3CM8+dfO7ki0cOH/vesWOHHv3uo0tr9/Uvtd/dDwAAAAyi9Zt++10JAAAAAAAAAAAAAAAAAAAAjK46vk6s3/sIAAAAo+4/b4QQzgkhSuLaV2D2frvr30TZ/30Uwxt7dkENQggheh2XrzM2tgvqE0Ls2lhZyb9pHgAAAGBnXbn46on2dpNzRU/ztbYW3429GvOmdvaRv8+vRlrtwmMbr5fs7Wk1jLq6//3LP1j5P36zt/mn04Ou//41Nm7geLW8Dyz9aqE9/13jXebP9/+pavkPZvkfCN3lX/koy/90tfwPZvn3dpl/0/6/VC3/QzH/QuwfvL/b/Btf/6nYpv3Y02X+72T7/2zoNn+2/80uE2YejvkBYBQ1+l3ADklHCek4eib20/7Gw82Q3/2w3eP/Rrad8RuufON203HQHbGfjpdms7zJduufybZ3U8U6c4NyV0lZ/b16HXdaWf0TNddRVVn9kzXXUVVZ/VM111FVWf3TNddRVVn93Z6H9ltZ/YNyXbms/pma66iqrP7Zmuuoqqz+7f4/3i9l9e+ruY6qyuqfq7mOqsrqr3hZrXZl9c/XXEdVZfXfXHMdVZXVf0vNdVRVVv+tNdfRL3fHtux8OJ1/zsWx1G9m/aktfpfDem0BAAAABs2/zf8nBiWOzva/BiGE6Fns2QU1iNGO+O5P3+sQYjhiZeXqyqp+1yHE9WJlpd9XIOinnf00MwC7lb//o83rP9q8/qPN68/1pHv4i6yfjHUYH+8wPtFhfDIbz/+9TnUYvyXb7kqUxm/tMH5bh/F9Hcbv6DC+0GH8zg7jd3UYv7vDOAAAAKPh9tg6PwQAAIDh9dqvP3/ntw88fXH+8vn9x8PkpnnnD8X+VHxv/e3Yz+e9Tybie/4/jf1fxvaPsf1ntr77TwAAAGDnpe+J8f4/AAAADK/0PaXO/wEAAGB4zcfW+T8AAAAMr5tj6/wfAAAAhlgxvfXi2KbrAvfFttt5/QCA3e8bsb0ntvtje29svxnbdBxwf2y/VVN9AEDv/OIHPzv2XrE+3/+RbPxKXJ7aTc5du1JQNDbO5L8ntntj++0u68m/D6Db/Mm+LvPsVP65G8wPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyPxtrPo0cXihA++OL9J34++c7fVpfd21rjwNrPIvaaIYSJ1vPS6Hr/N3HFKxdfPdHeXo1tEQ6HIhSt5eHJC61MMyGEc+FA+DI0w6dLy5c++fDxg5+9NX37u2eff30HfwUb9g8AAACG0f8DAAD//+bVG3I=") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 1m46.309566186s ago: executing program 3 (id=85): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1m46.194591329s ago: executing program 3 (id=89): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', 0x0) 1m46.058703871s ago: executing program 3 (id=94): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) accept(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m45.643521909s ago: executing program 3 (id=104): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xe, 0xd6, {0xd6, 0x6, "673d755bfa3caac8cecacd49a7e15315f971a1fde230c77e2b93a03a1ff30e93ab6aa612de6129ae59a48fb06a11f97ee57b46cb40e19ca2460ab8e92864196643510d7dde415eb9c4d36798db93a5cb9e3bebaa67ea088cf157e4b48dd7ffb2c552e1ada736a010c2995bed75f6ffd5bf5731532348bf768e8ef2c07cee6829eaafa060ce015e350684e0a628059dd9edf82c881723a19a081d359cd9471e503aef901da6db15025ca703e8fd16a432e1db13ecd7c9e0d95411c5f242e5450a8a1912e050dfb4f5f17ae6c3cdcd3dd875231b45"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m45.583520421s ago: executing program 32 (id=104): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xe, 0xd6, {0xd6, 0x6, "673d755bfa3caac8cecacd49a7e15315f971a1fde230c77e2b93a03a1ff30e93ab6aa612de6129ae59a48fb06a11f97ee57b46cb40e19ca2460ab8e92864196643510d7dde415eb9c4d36798db93a5cb9e3bebaa67ea088cf157e4b48dd7ffb2c552e1ada736a010c2995bed75f6ffd5bf5731532348bf768e8ef2c07cee6829eaafa060ce015e350684e0a628059dd9edf82c881723a19a081d359cd9471e503aef901da6db15025ca703e8fd16a432e1db13ecd7c9e0d95411c5f242e5450a8a1912e050dfb4f5f17ae6c3cdcd3dd875231b45"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m42.932779832s ago: executing program 1 (id=160): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x17d, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1m42.152023447s ago: executing program 1 (id=169): pipe2$9p(&(0x7f0000000240), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x1c1434f4, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m42.092609678s ago: executing program 1 (id=170): syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="b800000000000000", @ANYRES64=r6, @ANYBLOB="07000000000035d15b03edfbd6311fa20fdd2e8fb4f598034f7c0000020000000000e5ff0100000000000000070000000900000002ffffffff00000000f4ffff00000000000001000000000000006c060000000000000400000000000100050000d8e1400000080000000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="fbffffff0400000000000000060000000000000001000000000000000c000000090000002f6465762f766964656f230000000000"], 0xb8) 1m41.158678776s ago: executing program 1 (id=182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000100000000220000000a0001"], 0x20}}, 0x2000c094) 1m40.308676512s ago: executing program 1 (id=185): write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m39.972590288s ago: executing program 1 (id=188): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x10008844) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m24.607674546s ago: executing program 33 (id=188): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x10008844) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.21007303s ago: executing program 0 (id=623): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800), 0x0, &(0x7f0000000900), &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r0, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f, @loopback}, 0x1c) 20.099508762s ago: executing program 2 (id=624): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 20.098315522s ago: executing program 2 (id=625): r0 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 19.65455419s ago: executing program 6 (id=626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xa1, 0x0, 0x1, 0x70bd29, 0x255fdbf9}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00fcaa5743445a4d0800000008000300", @ANYRES32=r6, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 19.547308953s ago: executing program 4 (id=628): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) userfaultfd(0x80801) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r3, 0x5) 18.986731603s ago: executing program 0 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x8}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r3, &(0x7f0000000a00)='c', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) process_mrelease(r5, 0x700000000000000) socket$inet_tcp(0x2, 0x1, 0x0) 18.668496739s ago: executing program 6 (id=631): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.66813643s ago: executing program 4 (id=632): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 18.369393455s ago: executing program 5 (id=633): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41310, 0x49400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 18.361223865s ago: executing program 6 (id=634): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4, 0x41c, 0x4, {}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "e8b72dc202f2b682"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x490) 18.257363238s ago: executing program 2 (id=635): syz_init_net_socket$ax25(0x3, 0x3, 0xc3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 17.60878539s ago: executing program 6 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000009e80)=ANY=[@ANYBLOB="041c"], 0x8) close(0x3) 17.470679392s ago: executing program 6 (id=637): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) r4 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 16.915940463s ago: executing program 2 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 16.915441213s ago: executing program 5 (id=639): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x17d, &(0x7f0000000d80)="$eJzskL9OKkEUxr/ZXbhwi5tLYkUDiUaxUHYXNcZGS+x9AAmsSFz8w5IohGKNMRQWxtIn4DVMfAEtDLG2M6Eg1mbNzJ4dhmdwfsV+e77zzZk/x8FF8AfA93RQxx4EJv7hlTFYAAos9iZGrA+kb6T3seCFcvvk35Dmg17/pOb7Xqe4U0RuZkRiwZfwZCbYvTYwEZ3xdFDnP4cAoiiKuNcAPnMA1Iz5bomNkkzeAhbEJSKZ4QlerAAod9vn5aDXX2u1a02v6Z26bmXL3rDtTbd81PI9O/4yZQu6CriuAuDvlVX6KQC3lPlL/QSmHI36TF2bVt6wtIg5DGTlfzKD4UmuTfYxARxgGRkAlyGbueN4igVxpSoYTCocSzlfnMqIxnr9zG8MwcCSZSNYcobzgZQsXLWobIfJUYekS6RV0pHyjJxCet6wxIQ7qkphcsSOw4NXtW634wDp+M+Vnvs/hDKI7/pozF/u2YBGo9FoNBqNRqPR/HZ+AgAA//9ILXXp") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0008"], 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 16.914680123s ago: executing program 4 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="81be7edd5b1702aef10805e4e435253acca870d819bcf0b49aa23ecb8cd8c1d9396048eca55f61232951786e880d74b8de1c257cd055f46ca8b87dc4093b053da7c81efa69518c4bce9853dd027040872e4c951a5e468ffeadeed057f67c68c06a5909b75a469a37680ff33ead10ba57f50a29b1bc80f1c2ce642492722bce33d5d7806c6a753920c08372c8839d1de31dfc4dc7845297ea8effe009973751f761a6d03b6ca9900de7fa83c22b3a6eff5ad4ad", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000280)={0x3, 0x10001, 0x77, &(0x7f0000000180)=""/119}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x40}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, 0x16, 0xa01, 0x70bd28, 0x25dfdbfc, {0x2}, [@generic="2ab30fb753"]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 16.900444873s ago: executing program 0 (id=641): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) 16.871746284s ago: executing program 5 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x84, 0x0, 0x80, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) 16.853173845s ago: executing program 2 (id=643): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) 16.805669105s ago: executing program 0 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) 16.804166035s ago: executing program 4 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x1001d, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa00}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffecc}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.750684097s ago: executing program 5 (id=646): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)=""/192, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 16.750223907s ago: executing program 0 (id=647): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4, 0x41c, 0x4, {}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "e8b72dc202f2b682"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x490) 16.749920336s ago: executing program 2 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004800) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0xfffffffffffffed9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r6, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 16.738911447s ago: executing program 4 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 16.694893868s ago: executing program 6 (id=650): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 16.648598078s ago: executing program 0 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x8}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r3, &(0x7f0000000a00)='c', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) process_mrelease(r5, 0x700000000000000) socket$inet_tcp(0x2, 0x1, 0x0) 16.05691636s ago: executing program 5 (id=652): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x17d, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0008"], 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 15.815604315s ago: executing program 4 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 15.814770635s ago: executing program 5 (id=654): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 1.013233261s ago: executing program 34 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x8}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r3, &(0x7f0000000a00)='c', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) process_mrelease(r5, 0x700000000000000) socket$inet_tcp(0x2, 0x1, 0x0) 996.706861ms ago: executing program 35 (id=650): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 971.601671ms ago: executing program 36 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004800) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0xfffffffffffffed9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r6, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 18.75334ms ago: executing program 37 (id=654): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 0s ago: executing program 38 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) kernel console output (not intermixed with test programs): T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.187551][ T4330] Cannot create hsr debugfs directory [ 28.260838][ T4324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.321111][ T4324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.368206][ T4324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.409032][ T4324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.458881][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.517928][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.568231][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.597916][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.638612][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.693278][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.738662][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.789327][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.844759][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.876984][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 28.892010][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.927556][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.956375][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 28.956443][ T4323] Bluetooth: hci0: command 0x0409 tx timeout [ 28.966441][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 28.966449][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 28.978386][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.019547][ T4325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.057624][ T4325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.105607][ T4325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.139491][ T4325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.195332][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.198717][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.207663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.211826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.219997][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.229789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.231589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.233015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.234501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.236008][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.237226][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.239727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.243088][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.251595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.253127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.254879][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.255930][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.257633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.259411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.261063][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.262202][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.263607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.267283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.274992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.276739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.278172][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.279274][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.280675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.285245][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.290834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.292928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.294521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.296011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.299005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.308624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.310112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.311491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.313343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.317647][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.321383][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.322992][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.324472][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.325952][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.329069][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.332213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.333751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.335170][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.336367][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.341560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.343049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.345258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.347669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.349476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.352587][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.354376][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.355729][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.356924][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.361103][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.368733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.370217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.371958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.373422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.376978][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.393764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.404813][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.406111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.408333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.411545][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.413194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.417744][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.423040][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.424648][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.433430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.434985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.442063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.443537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.444902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.450228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.451804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.453904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.456894][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.459477][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.463205][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.470844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.472417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.473909][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.475014][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.479381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.481543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.482929][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484037][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.485380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.487659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.494633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.497834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.506567][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.507806][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.509215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.510827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.512225][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.513666][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.515061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.516234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.519281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.522699][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.532769][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.539274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.540596][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.541837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.543498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.553740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.555450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.558040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.559524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.561072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.562630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.564649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.566218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.568083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.569623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.571018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.575378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.577668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.582284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.583753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.585209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.586674][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.591320][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.593336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.594956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.599718][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.600988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.602548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.611445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.613035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.630329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.631916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.633632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.634919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.641594][ T4320] device veth0_vlan entered promiscuous mode [ 29.645239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.646743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.648186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.649754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.651769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.653160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.658666][ T4324] device veth0_vlan entered promiscuous mode [ 29.661170][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.666122][ T4320] device veth1_vlan entered promiscuous mode [ 29.673131][ T4324] device veth1_vlan entered promiscuous mode [ 29.694965][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.701301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.702920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.704305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.705759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.708140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.710232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.711737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.712970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.715681][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.717648][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.724416][ T4320] device veth0_macvtap entered promiscuous mode [ 29.729231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.730786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.732425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.740201][ T4333] device veth0_vlan entered promiscuous mode [ 29.742295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.743865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.745380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.748541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.750344][ T4324] device veth0_macvtap entered promiscuous mode [ 29.753382][ T4320] device veth1_macvtap entered promiscuous mode [ 29.759743][ T4324] device veth1_macvtap entered promiscuous mode [ 29.765747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.767445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.768842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.770235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.771721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.782358][ T4333] device veth1_vlan entered promiscuous mode [ 29.789862][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.791312][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.793047][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.795104][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.800135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.801730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.803091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.804640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.806195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.808971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.810552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.812042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.814231][ T4325] device veth0_vlan entered promiscuous mode [ 29.816059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.817750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.819151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.820349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.825768][ T4333] device veth0_macvtap entered promiscuous mode [ 29.830517][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.832043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.834143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.835668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.837966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.843059][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.844832][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.847213][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.849392][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.851783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.853392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.854923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.860008][ T4325] device veth1_vlan entered promiscuous mode [ 29.862811][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.864194][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.865535][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.867965][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870853][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.872204][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.873413][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874738][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.877916][ T4333] device veth1_macvtap entered promiscuous mode [ 29.909552][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.911272][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.912839][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.914429][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.919456][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.921017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.922553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.923955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.925446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.927822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.963211][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.964882][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.967211][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.968856][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.970966][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.972178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.974131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.975553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.977749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.981042][ T4325] device veth0_macvtap entered promiscuous mode [ 29.984696][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.985950][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.999244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.000811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.002903][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.004302][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.005740][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.008247][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.010799][ T4325] device veth1_macvtap entered promiscuous mode [ 30.022988][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.024762][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.026944][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.028650][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.030231][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.031847][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.034106][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.035538][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.040780][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.042431][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.043871][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.045231][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.047285][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.048795][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.050346][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.051754][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.055791][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.056590][ T4330] device veth0_vlan entered promiscuous mode [ 30.057680][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.060050][ T4330] device veth1_vlan entered promiscuous mode [ 30.061322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 30.062762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.073540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 30.074972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.077386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.081072][ T4330] device veth0_macvtap entered promiscuous mode [ 30.085496][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.086877][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.092824][ T4330] device veth1_macvtap entered promiscuous mode [ 30.094261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.095861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.097682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.102714][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.104578][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.106105][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.109364][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.110790][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.112445][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.114707][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.122824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.124470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.131211][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.133077][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.134683][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.137142][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.138633][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.140247][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.141773][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.143248][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.150207][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.159643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.161367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.169705][ T4431] batman_adv: batadv0: Adding interface: dummy0 [ 30.170772][ T4431] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.174594][ T4431] batman_adv: batadv0: Interface activated: dummy0 [ 30.179460][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.180718][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.182623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.190230][ T4431] batadv0: mtu less than device minimum [ 30.192927][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.195994][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.199281][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.202360][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.205324][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.208350][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.211282][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.214415][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.217394][ T4431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.238919][ T4325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.240346][ T4325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.241798][ T4325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.243206][ T4325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.251483][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.252801][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.255364][ T4432] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 30.265521][ T4432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.268970][ T4432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 30.270892][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.272560][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.274199][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.275877][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.280199][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.281779][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.283957][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.285881][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.291283][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.295340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.297113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.299230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.309112][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.310492][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.312349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.314604][ T4434] tipc: Started in network mode [ 30.315419][ T4434] tipc: Node identity e219f65e5646, cluster identity 4711 [ 30.320076][ T4434] tipc: Enabled bearer , priority 0 [ 30.322257][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.323661][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.325104][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.327940][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.330939][ T4434] device syzkaller0 entered promiscuous mode [ 30.377210][ T4434] Zero length message leads to an empty skb [ 30.387891][ T4434] tipc: Resetting bearer [ 30.392694][ T4433] tipc: Resetting bearer [ 30.453898][ T4440] loop3: detected capacity change from 0 to 128 [ 30.455513][ T4440] ======================================================= [ 30.455513][ T4440] WARNING: The mand mount option has been deprecated and [ 30.455513][ T4440] and is ignored by this kernel. Remove the mand [ 30.455513][ T4440] option from the mount to silence this warning. [ 30.455513][ T4440] ======================================================= [ 30.464404][ T4440] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 30.467212][ T4440] hpfs: filesystem error: improperly stopped [ 30.468520][ T4440] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 30.470533][ T4440] hpfs: You really don't want any checks? You are crazy... [ 30.472093][ T4440] hpfs: hpfs_map_sector(): read error [ 30.472943][ T4440] hpfs: code page support is disabled [ 30.474148][ T4440] hpfs: hpfs_map_4sectors(): unaligned read [ 30.475228][ T4440] hpfs: hpfs_map_4sectors(): unaligned read [ 30.476120][ T4440] hpfs: filesystem error: unable to find root dir [ 30.480279][ T4433] tipc: Disabling bearer [ 30.489086][ T4436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.541147][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.549938][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.552337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.577331][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.578629][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.580630][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.601869][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.603172][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.605022][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.633343][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.634711][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.642093][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.876679][ T4403] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.957015][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 31.007297][ T4451] loop4: detected capacity change from 0 to 256 [ 31.036482][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 31.040056][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 31.040091][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 31.041200][ T4329] Bluetooth: hci4: command 0x041b tx timeout [ 31.084357][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 31.091430][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 31.092680][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.093845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.095029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.096342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.097555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.098888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.100111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.101457][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.102781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.104101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.105448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.106708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.107891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.108981][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.110097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.111257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.112418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.113595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.114827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.116080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.117394][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.118712][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.119958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.121159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.122375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.123663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.124903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.126171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.127493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.128699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.129955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.131251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.132503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.133727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.134977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.136264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.137526][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.138811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.140026][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.141204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.142397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.143665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.144879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.146114][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.147503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.148737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.150010][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.151241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.152449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.153702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.154928][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.156197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.157465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.158758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.160107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.161411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.162697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.164007][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.165194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.166543][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.167758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.169032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.170310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.171493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.172773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.174117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.175334][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.176658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.177914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.179158][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.180484][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.181778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.183015][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.184387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.185633][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.186949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.188151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.189331][ T4403] usb 1-1: config 1 interface 0 altsetting 205 bulk endpoint 0x3 has invalid maxpacket 8 [ 31.189450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.191364][ T4403] usb 1-1: config 1 interface 0 altsetting 205 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.192224][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.194539][ T4403] usb 1-1: config 1 interface 0 has no altsetting 0 [ 31.195691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.197968][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.199168][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.200354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.200948][ T4403] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.201587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.203412][ T4403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.204131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.205622][ T4403] usb 1-1: Product: syz [ 31.206594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.206606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.207849][ T4403] usb 1-1: Manufacturer: syz [ 31.208372][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.209934][ T4403] usb 1-1: SerialNumber: syz [ 31.210280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.213463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.214663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.215897][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.217238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.218568][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.219756][ T4444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.219849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.222375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.223637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.224864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.226090][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.227483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.228670][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.229914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.231204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.232471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.233570][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.234775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.235947][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.237245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.238561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.239882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.241151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.242485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.243733][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.245045][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.246191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.247463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.248678][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.249949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.251211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.252544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.253797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.255017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.256383][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.257629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.258745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.260083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 31.261377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 31.469629][ T4403] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 31.478479][ T4458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.480003][ T4458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.481318][ T4403] usb 1-1: USB disconnect, device number 2 [ 31.869331][ T4460] loop1: detected capacity change from 0 to 4096 [ 31.874072][ T4460] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 32.036118][ T4472] loop3: detected capacity change from 0 to 64 [ 32.039695][ T4472] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 32.045877][ T4472] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 32.110530][ T4477] device syzkaller0 entered promiscuous mode [ 32.209169][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 32.531562][ T4489] loop0: detected capacity change from 0 to 256 [ 32.635179][ T4493] loop0: detected capacity change from 0 to 4096 [ 32.642402][ T4493] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 32.725037][ T4497] loop0: detected capacity change from 0 to 4096 [ 32.728802][ T4497] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 32.838352][ T4502] capability: warning: `syz.0.30' uses deprecated v2 capabilities in a way that may be insecure [ 32.895843][ T4510] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 32.909608][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.911562][ T4510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.944150][ T4516] tap0: tun_chr_ioctl cmd 1074025677 [ 32.951918][ T4516] tap0: linktype set to 768 [ 32.967345][ T4518] netlink: 'syz.0.33': attribute type 6 has an invalid length. [ 33.008603][ T4521] loop0: detected capacity change from 0 to 256 [ 33.047413][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 33.097996][ T4529] loop2: detected capacity change from 0 to 4096 [ 33.107267][ T4529] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 33.110327][ T4533] loop3: detected capacity change from 0 to 164 [ 33.117432][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 33.118436][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 33.119389][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 33.172875][ T4540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.39'. [ 33.174441][ T4540] batman_adv: batadv0: Interface deactivated: dummy0 [ 33.218200][ T4540] batman_adv: batadv0: Removing interface: dummy0 [ 33.322345][ T4560] loop0: detected capacity change from 0 to 8 [ 33.366086][ T4566] loop3: detected capacity change from 0 to 1024 [ 33.869948][ T4589] loop2: detected capacity change from 0 to 4096 [ 33.872805][ T4589] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 33.938877][ T4599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 34.028734][ T4601] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 34.041087][ T4598] loop3: detected capacity change from 0 to 40427 [ 34.044328][ T4598] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 34.045917][ T4598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.047933][ T4598] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 34.049265][ T4598] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 34.061184][ T4598] F2FS-fs (loop3): invalid crc value [ 34.070816][ T4607] loop2: detected capacity change from 0 to 8 [ 34.075515][ T4598] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.084722][ T4598] F2FS-fs (loop3): Start checkpoint disabled! [ 34.101739][ T4598] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.103017][ T4598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 34.111571][ T4598] syz.3.56: attempt to access beyond end of device [ 34.111571][ T4598] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.149582][ T4575] kworker/u4:8: attempt to access beyond end of device [ 34.149582][ T4575] loop3: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 34.157939][ T4575] kworker/u4:8: attempt to access beyond end of device [ 34.157939][ T4575] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 34.213256][ T4615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.215421][ T4615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.381612][ T4629] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 34.389894][ T4629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.391783][ T4629] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 34.414461][ T4631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.69'. [ 34.747176][ T4633] loop4: detected capacity change from 0 to 256 [ 34.783521][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.784819][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.837322][ T4639] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 34.939537][ T4642] loop0: detected capacity change from 0 to 64 [ 34.941496][ T4642] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 35.117308][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 35.197060][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 35.197083][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 35.199371][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 35.224580][ T4642] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 35.347181][ T27] audit: type=1326 audit(35.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 35.350874][ T27] audit: type=1326 audit(35.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 35.357586][ T27] audit: type=1326 audit(35.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 35.363217][ T27] audit: type=1326 audit(35.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 35.368084][ T27] audit: type=1326 audit(35.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 35.399030][ T4655] loop0: detected capacity change from 0 to 4096 [ 35.410112][ T4655] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 35.420601][ T4655] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 35.493929][ T4662] loop3: detected capacity change from 0 to 4096 [ 35.521235][ T4666] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.538819][ T4668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.83'. [ 35.632308][ T4676] loop1: detected capacity change from 0 to 64 [ 35.639754][ T4678] loop3: detected capacity change from 0 to 256 [ 35.642435][ T4676] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 35.644846][ T4678] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.646823][ T4678] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 35.648180][ T4676] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 35.675053][ T4678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 35.721124][ T4684] loop2: detected capacity change from 0 to 64 [ 35.741988][ T4686] loop1: detected capacity change from 0 to 1024 [ 35.766090][ T4686] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.768763][ T4686] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.771091][ T4686] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 35.777427][ T4686] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 35.781422][ T4686] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 35.785094][ T4686] EXT4-fs (loop1): 1 truncate cleaned up [ 35.787760][ T9] hfs: request for non-existent node 1280 in B*Tree [ 35.789058][ T9] hfs: request for non-existent node 1280 in B*Tree [ 35.791913][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.830070][ T4325] EXT4-fs (loop1): unmounting filesystem. [ 35.839961][ T4690] loop2: detected capacity change from 0 to 512 [ 35.854532][ T4690] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.869423][ T4693] device syzkaller0 entered promiscuous mode [ 35.966556][ T4695] netlink: 44 bytes leftover after parsing attributes in process `syz.2.97'. [ 35.977924][ T3899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.038641][ T4700] loop2: detected capacity change from 0 to 64 [ 36.073587][ T4702] loop2: detected capacity change from 0 to 8 [ 36.186258][ T3899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.188647][ T3899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.205411][ T4710] loop1: detected capacity change from 0 to 64 [ 36.248016][ T3899] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 36.249920][ T3899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.250982][ T4710] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 36.253348][ T3899] usb 1-1: config 0 descriptor?? [ 36.257440][ T4710] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 36.299216][ T4714] loop1: detected capacity change from 0 to 512 [ 36.566815][ T4714] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 36.585256][ T4714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.596752][ T4714] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.106: Block bitmap for bg 0 marked uninitialized [ 36.600556][ T4714] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 36.603879][ T4714] EXT4-fs (loop1): 1 orphan inode deleted [ 36.605134][ T4714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.615199][ T4714] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 36.625010][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.627316][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.630695][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.632881][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.634378][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.635687][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.651828][ T4714] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 36.653797][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.655287][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.662882][ T4722] loop4: detected capacity change from 0 to 128 [ 36.665228][ T4714] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.106: Block bitmap for bg 0 marked uninitialized [ 36.674851][ T4722] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.683532][ T4722] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.719478][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.791546][ T3899] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 36.794443][ T4731] loop4: detected capacity change from 0 to 8 [ 36.799072][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.849079][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.857804][ T3899] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -38 [ 36.876944][ T4331] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 36.878320][ T4331] Bluetooth: hci0: Injecting HCI hardware error event [ 36.884602][ T4336] Bluetooth: hci0: hardware error 0x00 [ 36.928359][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.932536][ T4717] chnl_net:caif_netlink_parms(): no params data found [ 36.965590][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.967646][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.969274][ T4717] device bridge_slave_0 entered promiscuous mode [ 36.971612][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.973072][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.974566][ T4717] device bridge_slave_1 entered promiscuous mode [ 36.980811][ T4745] device syzkaller0 entered promiscuous mode [ 36.988236][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.989342][ T3899] usb 1-1: USB disconnect, device number 3 [ 36.990870][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.093644][ T4717] team0: Port device team_slave_0 added [ 37.095410][ T4717] team0: Port device team_slave_1 added [ 37.104721][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.105796][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.110853][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.113234][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.114458][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.119196][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.137444][ T4749] 9pnet_fd: Insufficient options for proto=fd [ 37.161525][ T4751] 9pnet_fd: Insufficient options for proto=fd [ 37.179160][ T4717] device hsr_slave_0 entered promiscuous mode [ 37.181151][ T4753] loop2: detected capacity change from 0 to 64 [ 37.182845][ T4753] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 37.191415][ T4753] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 37.195383][ T4325] EXT4-fs (loop1): unmounting filesystem. [ 37.207669][ T4717] device hsr_slave_1 entered promiscuous mode [ 37.239632][ T4717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.240962][ T4717] Cannot create hsr debugfs directory [ 37.264932][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.266706][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.269239][ T4761] loop2: detected capacity change from 0 to 8 [ 37.411780][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.415547][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.421262][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.423456][ T4717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.425029][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.448029][ T4717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.555907][ T4787] 9pnet_fd: Insufficient options for proto=fd [ 37.570151][ T4717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.579920][ T4789] loop0: detected capacity change from 0 to 64 [ 37.582356][ T4789] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 37.583948][ T4789] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 37.605531][ T4791] 9pnet_fd: Insufficient options for proto=fd [ 37.607553][ T4717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.655801][ T4795] loop0: detected capacity change from 0 to 8 [ 37.681653][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.682990][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.684527][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.685691][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.777270][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.780603][ T4812] tipc: Enabling of bearer rejected, failed to enable media [ 37.782657][ T4812] device syzkaller0 entered promiscuous mode [ 37.902530][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.924431][ T4831] loop1: detected capacity change from 0 to 64 [ 37.926089][ T4831] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 37.928442][ T4831] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 37.960436][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.962181][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.963757][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.975515][ T4836] loop4: detected capacity change from 0 to 8 [ 37.980003][ T4837] 9pnet_fd: Insufficient options for proto=fd [ 37.980738][ T4834] 9pnet_fd: Insufficient options for proto=fd [ 38.015739][ T4839] loop2: detected capacity change from 0 to 64 [ 38.098253][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.100680][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.139487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.141303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.143258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.145568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.148559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.150130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.151697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.153121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.154793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.156545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.166249][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.208731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.264535][ T4863] 9pnet_fd: Insufficient options for proto=fd [ 38.293567][ T4866] 9pnet_fd: Insufficient options for proto=fd [ 38.314059][ T4870] loop2: detected capacity change from 0 to 64 [ 38.698941][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.701440][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.705904][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.711750][ T4879] loop4: detected capacity change from 0 to 4096 [ 38.726507][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 38.799479][ T4330] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 38.800649][ T4330] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 38.904794][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.908458][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.933401][ T4905] loop1: detected capacity change from 0 to 8 [ 39.036687][ T4336] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 39.096774][ T4911] loop0: detected capacity change from 0 to 4096 [ 39.098441][ T4911] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 39.104280][ T4911] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 39.152109][ T4915] overlayfs: failed to resolve './file0': -2 [ 39.174064][ T4917] 9pnet_fd: Insufficient options for proto=fd [ 39.194294][ T4919] loop0: detected capacity change from 0 to 64 [ 39.213069][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.214762][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.218306][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.219918][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.223784][ T4906] device syzkaller0 entered promiscuous mode [ 39.387962][ T4717] device veth0_vlan entered promiscuous mode [ 39.392089][ T4717] device veth1_vlan entered promiscuous mode [ 39.708343][ T4929] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.713833][ T4929] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.895415][ T4938] fido_id[4938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.978771][ T4945] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 39.983775][ T4945] CUSE: unknown device info "l" [ 39.984718][ T4945] CUSE: unknown device info "" [ 39.985551][ T4945] CUSE: unknown device info "" [ 39.986484][ T4945] CUSE: unknown device info "" [ 39.987245][ T4945] CUSE: unknown device info "Øá@" [ 39.988277][ T4945] CUSE: unknown device info "" [ 39.989106][ T4945] CUSE: unknown device info "ûÿÿÿ" [ 39.990051][ T4945] CUSE: unknown device info "" [ 39.990826][ T4945] CUSE: unknown device info "" [ 39.991746][ T4945] CUSE: zero length info key specified [ 40.283376][ T4717] device veth0_macvtap entered promiscuous mode [ 40.287613][ T4717] device veth1_macvtap entered promiscuous mode [ 40.321383][ T4951] overlayfs: failed to resolve './file0': -2 [ 40.380372][ T4959] loop0: detected capacity change from 0 to 64 [ 40.381985][ T4959] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 40.383800][ T4959] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 40.400977][ T4947] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 40.402661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.404514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.409234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.454511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.458099][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.459910][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.461671][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.465914][ T4967] loop2: detected capacity change from 0 to 8 [ 40.466570][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.470680][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.473599][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.477931][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.481840][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.495055][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.497969][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.503837][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.511277][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.516155][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.520223][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.524048][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.527811][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.531726][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.535392][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.538463][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.540073][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.541829][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.544329][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.545938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.548201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.549931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.551619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.556918][ T9] device hsr_slave_0 left promiscuous mode [ 40.638419][ T9] device hsr_slave_1 left promiscuous mode [ 41.220392][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 41.275446][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.311515][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.340550][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.347641][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.473235][ T9] device bridge_slave_1 left promiscuous mode [ 41.475154][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.542542][ T4989] loop4: detected capacity change from 0 to 4096 [ 41.563665][ T9] device bridge_slave_0 left promiscuous mode [ 41.564793][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.572017][ T4989] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 41.836989][ T9] device veth1_macvtap left promiscuous mode [ 41.838295][ T9] device veth0_macvtap left promiscuous mode [ 41.839451][ T9] device veth1_vlan left promiscuous mode [ 41.840565][ T9] device veth0_vlan left promiscuous mode [ 41.879140][ T4989] overlayfs: failed to resolve './file1': -2 [ 43.277017][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 43.588288][ T9] team0 (unregistering): Port device team_slave_1 removed [ 43.747556][ T9] team0 (unregistering): Port device team_slave_0 removed [ 43.916981][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.126843][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.020916][ T9] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 45.356323][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 46.530533][ T9] bond0 (unregistering): Released all slaves [ 46.740373][ T4717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.741821][ T4717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.743139][ T4717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.744509][ T4717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.780907][ T5004] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 46.794452][ T5015] tipc: Enabling of bearer rejected, failed to enable media [ 46.823440][ T5016] device syzkaller0 entered promiscuous mode [ 47.722999][ T5053] loop0: detected capacity change from 0 to 4096 [ 47.726112][ T5053] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 47.769966][ T5053] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 47.911447][ T5063] loop0: detected capacity change from 0 to 4096 [ 47.913700][ T5063] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 47.946135][ T5063] overlayfs: failed to resolve './file1': -2 [ 48.634421][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.637824][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.171368][ T5084] loop4: detected capacity change from 0 to 4096 [ 50.175589][ T5084] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 50.185318][ T5084] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 50.222506][ T5086] 9pnet_fd: Insufficient options for proto=fd [ 50.247915][ T5088] loop4: detected capacity change from 0 to 8 [ 50.262124][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 57.301591][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.303557][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.305084][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.310537][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.311837][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 57.313026][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.192366][ T4644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.194014][ T4644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.196667][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.224941][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.226745][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.229497][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.420669][ T5115] loop5: detected capacity change from 0 to 40427 [ 59.423930][ T4331] Bluetooth: hci5: command 0x0409 tx timeout [ 59.433298][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 59.445785][ T5115] F2FS-fs (loop5): invalid crc value [ 59.463246][ T5115] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.475674][ T5115] F2FS-fs (loop5): Start checkpoint disabled! [ 59.486408][ T5115] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 59.496424][ T4986] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.551199][ T4487] kworker/u4:7: attempt to access beyond end of device [ 59.551199][ T4487] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 59.553269][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.554942][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.575977][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.577374][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.578914][ T5091] device bridge_slave_0 entered promiscuous mode [ 59.587641][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.591072][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.592681][ T5091] device bridge_slave_1 entered promiscuous mode [ 59.671763][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.684140][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.702115][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.704069][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.713041][ T4986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.997932][ T4986] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 59.999397][ T4986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.009098][ T4986] usb 1-1: config 0 descriptor?? [ 60.028247][ T5138] loop5: detected capacity change from 0 to 4096 [ 60.045952][ T5138] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 60.053908][ T5091] team0: Port device team_slave_0 added [ 60.056854][ T5091] team0: Port device team_slave_1 added [ 60.077368][ T5138] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 60.096563][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.103601][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.117414][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.140618][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.141857][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.145921][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.182337][ T5147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.183937][ T5147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.308117][ T5091] device hsr_slave_0 entered promiscuous mode [ 60.608587][ T5091] device hsr_slave_1 entered promiscuous mode [ 60.631124][ T5147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.633963][ T5147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.637805][ T4986] elo 0003:04E7:0030.0003: unknown main item tag 0xe [ 60.639053][ T4986] elo 0003:04E7:0030.0003: item fetching failed at offset 8/9 [ 60.640401][ T4986] elo 0003:04E7:0030.0003: parse failed [ 60.641478][ T4986] elo: probe of 0003:04E7:0030.0003 failed with error -22 [ 60.643934][ T5147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.650145][ T5147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.842182][ T4382] usb 1-1: USB disconnect, device number 4 [ 60.959861][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.008607][ T5091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 61.107975][ T5091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 61.186170][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.446956][ T4331] Bluetooth: hci5: command 0x041b tx timeout [ 61.452558][ T5091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 61.474900][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.476596][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.539300][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.552172][ T5091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 61.638826][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.668887][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.673879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.744716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.956097][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.973038][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.977807][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.980922][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.982034][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.983642][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.985470][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.991715][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.992918][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.994519][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.998763][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.012210][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.015449][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.042225][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.045177][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.052861][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.054665][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.068970][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.071699][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.077420][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.079708][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.087676][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.089513][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.389823][ T5209] binder: 5198:5209 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.392050][ T5209] binder: 5209 RLIMIT_NICE not set [ 62.500651][ T5210] binder: BINDER_SET_CONTEXT_MGR already set [ 62.501746][ T5210] binder: 5198:5210 ioctl 4018620d 20004a80 returned -16 [ 62.511038][ T5210] binder: 5198:5210 got transaction to invalid handle, 1 [ 62.512425][ T5210] binder: 5210:5198 cannot find target node [ 62.513374][ T5210] binder: 5198:5210 transaction call to 0:0 failed 3/29201/-22, size 72-24 line 3054 [ 62.569820][ T5210] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.184284][ T5223] misc userio: No port type given on /dev/userio [ 63.351536][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.385162][ T5226] loop5: detected capacity change from 0 to 4096 [ 63.388522][ T5226] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 63.410452][ T5226] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 63.505364][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.507000][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.516415][ T4331] Bluetooth: hci5: command 0x040f tx timeout [ 63.941074][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.943205][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.040363][ T5252] loop5: detected capacity change from 0 to 4096 [ 64.067856][ T5252] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 64.074630][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.078035][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.093440][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.095196][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.108614][ T5091] device veth0_vlan entered promiscuous mode [ 64.128594][ T5091] device veth1_vlan entered promiscuous mode [ 64.132998][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.134869][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.145649][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.240331][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.244367][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.250429][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.257980][ T5091] device veth0_macvtap entered promiscuous mode [ 64.263984][ T5091] device veth1_macvtap entered promiscuous mode [ 64.278592][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.280482][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.282069][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.284109][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.285886][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.288076][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.289709][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.291367][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.293105][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.294916][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.297448][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.299847][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.301580][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.303345][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.305322][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.337953][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.339677][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.341208][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.342873][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.344756][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.346369][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.348636][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.389863][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.391628][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.393131][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.394626][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.413975][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.430471][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.451031][ T5091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.452415][ T5091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.453735][ T5091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.455066][ T5091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.480256][ T1515] cfg80211: failed to load regulatory.db [ 64.487095][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488492][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.818951][ T5249] net_ratelimit: 13 callbacks suppressed [ 64.818964][ T5249] Set syz1 is full, maxelem 65536 reached [ 65.596434][ T4336] Bluetooth: hci5: command 0x0419 tx timeout [ 66.222670][ T5282] capability: warning: `syz.5.237' uses 32-bit capabilities (legacy support in use) [ 66.484403][ T4946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.486542][ T4946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.492857][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.547260][ T4946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.550890][ T4946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.559379][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.858875][ T5303] binder: 5293:5303 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.860995][ T5303] binder: 5303 RLIMIT_NICE not set [ 66.953912][ T5304] binder: BINDER_SET_CONTEXT_MGR already set [ 66.955044][ T5304] binder: 5293:5304 ioctl 4018620d 20004a80 returned -16 [ 66.961207][ T5304] binder: 5293:5304 got transaction to invalid handle, 1 [ 66.962415][ T5304] binder: 5304:5293 cannot find target node [ 66.963381][ T5304] binder: 5293:5304 transaction call to 0:0 failed 6/29201/-22, size 72-24 line 3054 [ 66.993479][ T5304] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.103351][ T5302] loop2: detected capacity change from 0 to 4096 [ 67.111549][ T5302] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 67.131145][ T5302] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 67.271432][ T5312] loop5: detected capacity change from 0 to 4096 [ 67.320392][ T5312] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 67.737861][ T5317] lo speed is unknown, defaulting to 1000 [ 67.740466][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.742147][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.808236][ T9] device hsr_slave_0 left promiscuous mode [ 67.851983][ T9] device hsr_slave_1 left promiscuous mode [ 67.946534][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.947792][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.949787][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.951013][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.954409][ T9] device bridge_slave_1 left promiscuous mode [ 67.955406][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.299239][ T27] audit: type=1326 audit(68.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.5.245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95c068 code=0x7ffc0000 [ 68.302955][ T27] audit: type=1326 audit(68.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.5.245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95c068 code=0x7ffc0000 [ 68.306083][ T27] audit: type=1326 audit(68.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.5.245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffab95c068 code=0x7ffc0000 [ 68.320792][ T9] device bridge_slave_0 left promiscuous mode [ 68.321778][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.466767][ T9] device veth1_macvtap left promiscuous mode [ 68.467830][ T9] device veth0_macvtap left promiscuous mode [ 68.472413][ T9] device veth1_vlan left promiscuous mode [ 68.473402][ T9] device veth0_vlan left promiscuous mode [ 68.478802][ T5357] loop0: detected capacity change from 0 to 64 [ 68.548013][ T5357] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 68.552420][ T5357] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 68.687090][ T5365] loop4: detected capacity change from 0 to 4096 [ 68.691233][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 68.695069][ T5365] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 68.733930][ T5365] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 68.923705][ T5371] random: crng reseeded on system resumption [ 68.953593][ T5371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 69.199882][ T5371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 69.250353][ T5371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 69.917410][ T5381] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.253'. [ 70.638686][ T9] team0 (unregistering): Port device team_slave_1 removed [ 70.787135][ T9] team0 (unregistering): Port device team_slave_0 removed [ 70.956834][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.167559][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.660774][ T9] bond0 (unregistering): Released all slaves [ 73.892909][ T5317] lo speed is unknown, defaulting to 1000 [ 73.894640][ T5317] lo speed is unknown, defaulting to 1000 [ 73.897495][ T5317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.900428][ T5317] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.908948][ T5317] lo speed is unknown, defaulting to 1000 [ 73.910342][ T5317] lo speed is unknown, defaulting to 1000 [ 73.911496][ T5317] lo speed is unknown, defaulting to 1000 [ 73.912690][ T5317] lo speed is unknown, defaulting to 1000 [ 73.914464][ T5317] lo speed is unknown, defaulting to 1000 [ 73.932517][ T5335] lo speed is unknown, defaulting to 1000 [ 74.025702][ T5397] loop4: detected capacity change from 0 to 8 [ 74.101437][ T5387] loop2: detected capacity change from 0 to 4096 [ 74.132066][ T5387] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 74.366443][ T4375] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.616378][ T4375] usb 1-1: Using ep0 maxpacket: 8 [ 74.619115][ T4375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.620994][ T4375] usb 1-1: config 4 interface 0 has no altsetting 0 [ 74.624787][ T4375] usb 1-1: string descriptor 0 read error: -22 [ 74.625775][ T4375] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 74.627420][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.636134][ T4375] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 74.672244][ T4375] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.711795][ T5420] netlink: 'syz.6.261': attribute type 12 has an invalid length. [ 74.723851][ T4375] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 74.741522][ T4375] usb 1-1: media controller created [ 74.975002][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.010026][ T5425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.013835][ T5425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.026120][ T4375] zl10353_read_register: readreg error (reg=127, ret==0) [ 75.044513][ T4375] usb 1-1: USB disconnect, device number 5 [ 75.047345][ T5384] udevd[5384]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 75.171664][ T5434] Set syz1 is full, maxelem 65536 reached [ 75.659624][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.661281][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.965866][ T5463] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 75.985420][ T5469] loop0: detected capacity change from 0 to 8 [ 76.141854][ T5477] loop0: detected capacity change from 0 to 4096 [ 76.150964][ T5477] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 76.164348][ T5484] loop2: detected capacity change from 0 to 4096 [ 76.184753][ T5477] overlayfs: missing 'lowerdir' [ 76.206694][ T5484] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 76.214599][ T5484] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 76.268729][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.271957][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.716807][ T5507] overlayfs: failed to resolve '/ÚO'“a8': -2 [ 76.811813][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 76.883889][ T4331] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 76.930180][ T5521] loop2: detected capacity change from 0 to 8 [ 77.469095][ T5533] loop0: detected capacity change from 0 to 4096 [ 77.471125][ T5533] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 77.501037][ T5533] overlayfs: missing 'lowerdir' [ 78.018084][ T5566] v: renamed from ipvlan1 [ 78.033086][ T5571] loop6: detected capacity change from 0 to 8 [ 78.086786][ T4403] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.756852][ T5590] tipc: Started in network mode [ 78.757975][ T5590] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 78.763306][ T5590] tipc: Enabled bearer , priority 10 [ 78.954618][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.961191][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.029237][ T4403] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.030936][ T4403] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 79.032516][ T4403] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.033806][ T4403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.071109][ T5598] netlink: 44 bytes leftover after parsing attributes in process `syz.4.302'. [ 79.072749][ T5598] IPVS: Unknown mcast interface: vcan0 [ 79.092468][ T5599] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input2 [ 79.338945][ T4403] usb 1-1: invalid MIDI out EP 0 [ 79.370577][ T4403] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 79.410074][ T5392] udevd[5392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.524422][ T5624] ptrace attach of "./syz-executor exec"[5627] was attempted by "./syz-executor exec"[5624] [ 79.527018][ T5624] ptrace attach of "./syz-executor exec"[5627] was attempted by "./syz-executor exec"[5624] [ 79.591701][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.593206][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.620316][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.621831][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.683975][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.685529][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.699054][ T5649] batman_adv: batadv0: Adding interface: dummy0 [ 79.700136][ T5649] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.719526][ T5649] batman_adv: batadv0: Interface activated: dummy0 [ 79.733296][ T5649] batadv0: mtu less than device minimum [ 79.735967][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.739180][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.742253][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.745367][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.748422][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.751441][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.754378][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.757339][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.878264][ T4382] tipc: Node number set to 4269801488 [ 79.920380][ T27] audit: type=1326 audit(79.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 79.930703][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.932958][ T27] audit: type=1326 audit(79.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 79.942562][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.948235][ T27] audit: type=1326 audit(79.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8535a594 code=0x7ffc0000 [ 79.957395][ T27] audit: type=1326 audit(79.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8535bb90 code=0x7ffc0000 [ 79.960841][ T27] audit: type=1326 audit(79.920:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8535bb90 code=0x7ffc0000 [ 79.966127][ T27] audit: type=1326 audit(79.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 79.976363][ T27] audit: type=1326 audit(79.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 79.979880][ T27] audit: type=1326 audit(79.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 79.983286][ T27] audit: type=1326 audit(79.930:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 80.221317][ T27] audit: type=1326 audit(79.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff8535c068 code=0x7ffc0000 [ 80.405660][ T5683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.415912][ T5683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.000078][ T4382] usb 1-1: USB disconnect, device number 6 [ 83.688498][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.336'. [ 85.316451][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.061439][ T5795] loop6: detected capacity change from 0 to 64 [ 86.097979][ T5795] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 86.104010][ T5795] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop6 [ 86.196396][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 86.201043][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 86.202466][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.203728][ T22] usb 1-1: Product: syz [ 86.204414][ T22] usb 1-1: Manufacturer: syz [ 86.205393][ T22] usb 1-1: SerialNumber: syz [ 86.231584][ T22] usb 1-1: config 0 descriptor?? [ 86.656399][ T22] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 86.686494][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.689031][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.771907][ T5820] lo speed is unknown, defaulting to 1000 [ 87.553670][ T5840] loop6: detected capacity change from 0 to 64 [ 87.567444][ T5840] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 87.572466][ T5840] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop6 [ 88.019972][ T5851] process 'syz.5.363' launched './file1' with NULL argv: empty string added [ 88.532808][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.535345][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.005306][ T5877] loop5: detected capacity change from 0 to 64 [ 89.017386][ T5877] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 89.019006][ T5877] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop5 [ 89.039813][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.041512][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.180113][ T5883] device veth1_macvtap left promiscuous mode [ 89.181158][ T5883] device macsec0 entered promiscuous mode [ 89.247377][ T5883] device veth1_macvtap entered promiscuous mode [ 89.248971][ T5883] device macsec0 left promiscuous mode [ 89.455803][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 89.455818][ T27] audit: type=1326 audit(89.440:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5857 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd5c068 code=0x7ffc0000 [ 89.468970][ T27] audit: type=1326 audit(89.460:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5857 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cd5c068 code=0x7ffc0000 [ 89.576618][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.578157][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.080076][ T22] usb write operation failed. (-71) [ 90.316754][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.318279][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.345839][ T5906] CUSE: unknown device info "l" [ 90.346723][ T5906] CUSE: unknown device info "ûÿÿÿ" [ 90.347667][ T5906] CUSE: unknown device info "" [ 90.348426][ T5906] CUSE: unknown device info "" [ 90.349214][ T5906] CUSE: zero length info key specified [ 90.357968][ T22] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.371045][ T22] dvbdev: DVB: registering new adapter (Terratec H7) [ 90.372236][ T22] usb 1-1: media controller created [ 90.375972][ T22] usb read operation failed. (-71) [ 90.381914][ T22] usb write operation failed. (-71) [ 90.384833][ T22] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 90.396223][ T22] usb 1-1: USB disconnect, device number 7 [ 92.242701][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.246782][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.272374][ T5962] batman_adv: batadv0: Adding interface: dummy0 [ 92.273559][ T5962] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.283205][ T5962] batman_adv: batadv0: Interface activated: dummy0 [ 92.297600][ T5962] net_ratelimit: 11 callbacks suppressed [ 92.297620][ T5962] batadv0: mtu less than device minimum [ 92.301262][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.304321][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.307509][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.310567][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.313652][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.316626][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.319586][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.322512][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.325572][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.451645][ T5969] netlink: 128 bytes leftover after parsing attributes in process `syz.0.391'. [ 93.368021][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.369494][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.801790][ T5996] netlink: 'syz.0.399': attribute type 21 has an invalid length. [ 93.803224][ T5996] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.264140][ T6033] 9pnet: Could not find request transport: fd0x0000000000000005 [ 95.365452][ T6035] netlink: 76 bytes leftover after parsing attributes in process `syz.6.408'. [ 95.581968][ T4403] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.585356][ T4403] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.839934][ T6041] batman_adv: batadv0: Adding interface: dummy0 [ 95.842175][ T6041] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.853511][ T6041] batman_adv: batadv0: Interface activated: dummy0 [ 95.951722][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.954422][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.555095][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 96.561489][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 97.196127][ T6103] 9pnet: Could not find request transport: fd0x0000000000000005 [ 97.705312][ T6122] loop2: detected capacity change from 0 to 8 [ 97.718096][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 98.407979][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.770693][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.772089][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.936410][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 98.941286][ T24] usb 1-1: config 0 has no interfaces? [ 98.954028][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 98.955537][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.957582][ T24] usb 1-1: Product: syz [ 98.958451][ T24] usb 1-1: Manufacturer: syz [ 99.081047][ T24] usb 1-1: SerialNumber: syz [ 99.286975][ T24] usb 1-1: config 0 descriptor?? [ 99.322395][ T6184] 9pnet_fd: Insufficient options for proto=fd [ 99.367344][ T6190] loop5: detected capacity change from 0 to 8 [ 99.395405][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.436'. [ 99.831074][ T6118] tipc: New replicast peer: 0.0.0.0 [ 99.832573][ T6118] tipc: Enabled bearer , priority 10 [ 100.219435][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 100.317110][ T4331] Bluetooth: hci5: command 0x0409 tx timeout [ 100.345848][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.348782][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.675569][ T1610] tipc: Subscription rejected, illegal request [ 100.782896][ T6250] 9pnet_fd: Insufficient options for proto=fd [ 100.909771][ T4452] tipc: Node number set to 3026187870 [ 101.167729][ T4929] usb 1-1: USB disconnect, device number 8 [ 101.357537][ T6275] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 101.364426][ T6275] ubi31: attaching mtd0 [ 101.372207][ T6275] ubi31: scanning is finished [ 101.373156][ T6275] ubi31: empty MTD device detected [ 101.903574][ T6275] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 101.904923][ T6275] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 101.906237][ T6275] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 101.907558][ T6275] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 101.908911][ T6275] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 101.910165][ T6275] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 101.911528][ T6275] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 906325634 [ 101.913141][ T6275] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 101.917739][ T6278] ubi31: background thread "ubi_bgt31d" started, PID 6278 [ 102.453400][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.454954][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.643815][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 103.276224][ T6320] 9pnet_fd: Insufficient options for proto=fd [ 103.435742][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.438496][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.548964][ T6350] binder: 6348:6350 tried to acquire reference to desc 0, got 1 instead [ 103.551197][ T6350] binder: 6348:6350 got transaction with invalid offset (62, min 0 max 72) or object. [ 103.553038][ T6350] binder: 6348:6350 transaction call to 6348:0 failed 11/29201/-22, size 72-24 line 3355 [ 103.555084][ T4394] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.073532][ T6393] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 105.088914][ T6393] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 105.447459][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.478'. [ 105.538107][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.540845][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.498447][ T6431] device veth1_macvtap left promiscuous mode [ 106.499421][ T6431] device macsec0 entered promiscuous mode [ 107.794846][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.496'. [ 107.821155][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.822633][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.469076][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.471813][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.293771][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.295387][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.752365][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.515'. [ 109.773199][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.775168][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.831210][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.842456][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.862343][ T6525] nvme_fabrics: missing parameter 'transport=%s' [ 109.863813][ T6525] nvme_fabrics: missing parameter 'nqn=%s' [ 109.873986][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.879026][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.584923][ T6556] 9pnet_fd: Insufficient options for proto=fd [ 111.599111][ T6558] binder: binder_mmap: 6557 2048d000-2048f000 bad vm_flags failed -1 [ 111.632060][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.633607][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.741432][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.744081][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.120143][ T6577] atomic_op 000000004a034924 conn xmit_atomic 0000000000000000 [ 113.778722][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.785356][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.369241][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 114.467322][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 116.175812][ T6681] block device autoloading is deprecated and will be removed. [ 116.251542][ T6681] lo speed is unknown, defaulting to 1000 [ 116.766394][ T4367] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.977561][ T4367] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 116.980413][ T4367] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 116.981850][ T4367] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 116.983177][ T4367] usb 1-1: Manufacturer: syz [ 116.983927][ T4367] usb 1-1: SerialNumber: syz [ 117.286427][ T4367] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 117.290563][ T4367] usb 1-1: USB disconnect, device number 9 [ 117.420278][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.578'. [ 117.452601][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.579'. [ 117.596638][ T4331] Bluetooth: hci3: command 0x2016 tx timeout [ 117.706068][ T6807] loop4: detected capacity change from 0 to 8 [ 117.882650][ T6814] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.883905][ T6814] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.885129][ T6814] vhci_hcd: default hub control req: 230f v0004 i0000 l3 [ 118.214499][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 118.356535][ T4929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 118.556662][ T4329] Bluetooth: hci2: command 0x1003 tx timeout [ 118.558658][ T4336] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 118.626459][ T4929] usb 1-1: Using ep0 maxpacket: 8 [ 118.628996][ T4929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.631710][ T4929] usb 1-1: config 4 interface 0 has no altsetting 0 [ 118.634239][ T6836] loop2: detected capacity change from 0 to 8 [ 118.635136][ T4929] usb 1-1: string descriptor 0 read error: -22 [ 118.646537][ T4929] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 118.648002][ T4929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.659493][ T4929] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 118.662866][ T4929] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.667925][ T4929] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 118.670603][ T4929] usb 1-1: media controller created [ 118.677539][ T4929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.733689][ T6831] syz.5.594 (6831): drop_caches: 2 [ 119.081783][ T4929] zl10353_read_register: readreg error (reg=127, ret==0) [ 119.109573][ T4929] usb 1-1: USB disconnect, device number 10 [ 119.128836][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.135340][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.181175][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.193833][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.537489][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.542356][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.779210][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.781887][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.279035][ T6958] netlink: 76 bytes leftover after parsing attributes in process `syz.6.626'. [ 124.240179][ T6993] random: crng reseeded on system resumption [ 124.492242][ T6997] tipc: Enabling of bearer rejected, already enabled [ 124.942636][ T7001] loop5: detected capacity change from 0 to 8 [ 125.917804][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.982777][ T7037] loop5: detected capacity change from 0 to 8 [ 127.516339][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 140.997041][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.000322][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.001958][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.003567][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.004948][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.006227][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.024577][ T4331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.029600][ T4331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.031309][ T4331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.032807][ T4331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.034188][ T4331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 141.035453][ T4331] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.058547][ T4331] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.060666][ T4331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.062235][ T4331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.063738][ T4331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.065140][ T4331] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 141.069082][ T4331] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.144054][ T7045] lo speed is unknown, defaulting to 1000 [ 141.272772][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 141.934285][ T4331] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 141.937272][ T4331] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 141.941529][ T4331] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 141.943207][ T4331] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.944585][ T4331] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 141.945913][ T4331] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 141.970155][ T4331] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 141.972399][ T4331] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 141.974075][ T4331] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 141.975938][ T4331] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 141.977751][ T4331] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 141.979055][ T4331] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 143.036348][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 143.116430][ T4331] Bluetooth: hci7: command 0x0409 tx timeout [ 143.117853][ T4331] Bluetooth: hci6: command 0x0409 tx timeout [ 143.996410][ T4336] Bluetooth: hci9: command 0x0409 tx timeout [ 143.997800][ T4336] Bluetooth: hci8: command 0x0409 tx timeout [ 145.117786][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 145.196334][ T4336] Bluetooth: hci6: command 0x041b tx timeout [ 145.197366][ T4336] Bluetooth: hci7: command 0x041b tx timeout [ 146.076400][ T4331] Bluetooth: hci8: command 0x041b tx timeout [ 146.077443][ T4331] Bluetooth: hci9: command 0x041b tx timeout [ 147.196333][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 147.276334][ T4331] Bluetooth: hci7: command 0x040f tx timeout [ 147.277264][ T4331] Bluetooth: hci6: command 0x040f tx timeout [ 148.156356][ T4336] Bluetooth: hci9: command 0x040f tx timeout [ 148.157387][ T4336] Bluetooth: hci8: command 0x040f tx timeout [ 149.276338][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 149.356326][ T4336] Bluetooth: hci6: command 0x0419 tx timeout [ 149.357315][ T4336] Bluetooth: hci7: command 0x0419 tx timeout [ 150.236378][ T4331] Bluetooth: hci8: command 0x0419 tx timeout [ 150.237430][ T4331] Bluetooth: hci9: command 0x0419 tx timeout [ 152.116281][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [aoe_tx0:2062] [ 152.117618][ C1] Modules linked in: [ 152.118277][ C1] irq event stamp: 74083749 [ 152.119067][ C1] hardirqs last enabled at (74083748): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 152.120612][ C1] hardirqs last disabled at (74083749): [] el1_interrupt+0x24/0x54 [ 152.121997][ C1] softirqs last enabled at (2696): [] local_bh_enable+0x10/0x34 [ 152.123347][ C1] softirqs last disabled at (2702): [] local_bh_disable+0x10/0x34 [ 152.124810][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Not tainted syzkaller #0 [ 152.125929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 152.127480][ C1] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 152.128612][ C1] pc : _raw_spin_unlock_irqrestore+0x58/0xac [ 152.129467][ C1] lr : _raw_spin_unlock_irqrestore+0x48/0xac [ 152.130379][ C1] sp : ffff800026f07840 [ 152.131028][ C1] x29: ffff800026f07840 x28: ffff0000ef1b3a70 x27: ffff0000e0ff2000 [ 152.132262][ C1] x26: ffff0000ef1b3a00 x25: 1fffe0001b16a196 x24: 0000000000000000 [ 152.133462][ C1] x23: 0000000000000000 x22: dfff800000000000 x21: ffff0000ce240fd8 [ 152.134898][ C1] x20: ffff80001c662b30 x19: 0000000000000000 x18: ffff800011abbcc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 152.136131][ C1] x17: ffff8000181f9000 x16: ffff8000082d22e0 x15: ffff800017cd9fc0 [ 152.137375][ C1] x14: ffff0000d1840a98 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 152.138538][ C1] x11: ff0080000a893b14 x10: 0000000000000003 x9 : 0000000000000080 [ 152.139749][ C1] x8 : 00000000000000c0 x7 : ffff80000b35b6a0 x6 : 0000000000000000 [ 152.141049][ C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 152.142161][ C1] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : ffff80018a6c8000 [ 152.143355][ C1] Call trace: [ 152.143854][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 152.144694][ C1] uart_write_room+0x150/0x2d4 [ 152.145383][ C1] tty_write_room+0x6c/0x8c [ 152.146089][ C1] handle_tx+0x120/0x5f8 [ 152.146688][ C1] caif_xmit+0x108/0x150 [ 152.147322][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 152.148069][ C1] __dev_queue_xmit+0x155c/0x309c [ 152.148817][ C1] tx+0x9c/0x1c8 [ 152.149371][ C1] kthread+0x160/0x330 [ 152.149972][ C1] kthread+0x250/0x2d8 [ 152.150577][ C1] ret_from_fork+0x10/0x20 [ 152.151271][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 152.152261][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 152.153586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 152.155162][ C1] Call trace: [ 152.155681][ C1] dump_backtrace+0x1c8/0x1f4 [ 152.156383][ C1] show_stack+0x2c/0x3c [ 152.157000][ C1] __dump_stack+0x30/0x40 [ 152.157634][ C1] dump_stack_lvl+0xf8/0x160 [ 152.158318][ C1] dump_stack+0x1c/0x5c [ 152.158969][ C1] panic+0x2e0/0x79c [ 152.159623][ C1] softlockup_fn+0x0/0x120 [ 152.160341][ C1] __hrtimer_run_queues+0x420/0xc64 [ 152.161147][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 152.161911][ C1] arch_timer_handler_virt+0x74/0x88 [ 152.162796][ C1] handle_percpu_devid_irq+0x174/0x34c [ 152.163701][ C1] generic_handle_domain_irq+0xe0/0x140 [ 152.164586][ C1] gic_handle_irq+0x70/0x1e4 [ 152.165342][ C1] call_on_irq_stack+0x30/0x48 [ 152.166124][ C1] do_interrupt_handler+0xd4/0x138 [ 152.166957][ C1] el1_interrupt+0x34/0x54 [ 152.167708][ C1] el1h_64_irq_handler+0x18/0x24 [ 152.168523][ C1] el1h_64_irq+0x64/0x68 [ 152.169134][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 152.169928][ C1] uart_write_room+0x150/0x2d4 [ 152.170644][ C1] tty_write_room+0x6c/0x8c [ 152.171302][ C1] handle_tx+0x120/0x5f8 [ 152.171905][ C1] caif_xmit+0x108/0x150 [ 152.172530][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 152.173243][ C1] __dev_queue_xmit+0x155c/0x309c [ 152.173907][ C1] tx+0x9c/0x1c8 [ 152.174421][ C1] kthread+0x160/0x330 [ 152.175047][ C1] kthread+0x250/0x2d8 [ 152.175688][ C1] ret_from_fork+0x10/0x20 [ 152.176379][ C1] SMP: stopping secondary CPUs [ 152.177105][ C1] Kernel Offset: disabled [ 152.177732][ C1] CPU features: 0x080000,000f0097,a65bfea7 [ 152.178613][ C1] Memory Limit: none [ 152.189522][ C1] [ 152.189888][ C1] ================================ [ 152.190644][ C1] WARNING: inconsistent lock state [ 152.191396][ C1] syzkaller #0 Tainted: G L [ 152.192283][ C1] -------------------------------- [ 152.193098][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 152.194205][ C1] aoe_tx0/2062 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 152.195151][ C1] ffff8000151013d8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 152.196800][ C1] {HARDIRQ-ON-W} state was registered at: [ 152.197713][ C1] lock_acquire+0x20c/0x644 [ 152.198498][ C1] _raw_spin_lock+0x54/0x6c [ 152.199265][ C1] efi_call_rts+0x260/0x9f4 [ 152.199985][ C1] process_one_work+0x7f4/0x13a8 [ 152.200771][ C1] worker_thread+0x8c8/0xfbc [ 152.201503][ C1] kthread+0x250/0x2d8 [ 152.202187][ C1] ret_from_fork+0x10/0x20 [ 152.202969][ C1] irq event stamp: 74083749 [ 152.203627][ C1] hardirqs last enabled at (74083748): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 152.205343][ C1] hardirqs last disabled at (74083749): [] el1_interrupt+0x24/0x54 [ 152.206896][ C1] softirqs last enabled at (2696): [] local_bh_enable+0x10/0x34 [ 152.208296][ C1] softirqs last disabled at (2702): [] local_bh_disable+0x10/0x34 [ 152.209838][ C1] [ 152.209838][ C1] other info that might help us debug this: [ 152.211029][ C1] Possible unsafe locking scenario: [ 152.211029][ C1] [ 152.212185][ C1] CPU0 [ 152.212689][ C1] ---- [ 152.213208][ C1] lock(efi_rt_lock); [ 152.213797][ C1] [ 152.214308][ C1] lock(efi_rt_lock); [ 152.214927][ C1] [ 152.214927][ C1] *** DEADLOCK *** [ 152.214927][ C1] [ 152.216118][ C1] 4 locks held by aoe_tx0/2062: [ 152.216816][ C1] #0: ffff800015296e60 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 152.218353][ C1] #1: ffff0000df5550d8 (_xmit_NONE#2){+.-.}-{2:2}, at: __dev_queue_xmit+0x1090/0x309c [ 152.219984][ C1] #2: ffff800015296e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 152.221469][ C1] #3: ffff8000171646c8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x728 [ 152.222995][ C1] [ 152.222995][ C1] stack backtrace: [ 152.223940][ C1] CPU: 1 PID: 2062 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 152.225409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 152.227051][ C1] Call trace: [ 152.227581][ C1] dump_backtrace+0x1c8/0x1f4 [ 152.228365][ C1] show_stack+0x2c/0x3c [ 152.228982][ C1] __dump_stack+0x30/0x40 [ 152.229723][ C1] dump_stack_lvl+0xf8/0x160 [ 152.230492][ C1] dump_stack+0x1c/0x5c [ 152.231160][ C1] print_usage_bug+0x4c0/0x6d8 [ 152.231886][ C1] mark_lock_irq+0x788/0x9e4 [ 152.232569][ C1] mark_lock+0x224/0x320 [ 152.233224][ C1] __lock_acquire+0xd2c/0x6544 [ 152.233934][ C1] lock_acquire+0x20c/0x644 [ 152.234668][ C1] _raw_spin_lock+0x54/0x6c [ 152.235311][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 152.236379][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 152.237260][ C1] efi_pstore_write+0x26c/0x358 [ 152.238021][ C1] pstore_dump+0x504/0x728 [ 152.238783][ C1] kmsg_dump+0x170/0x260 [ 152.239480][ C1] panic+0x36c/0x79c [ 152.240108][ C1] softlockup_fn+0x0/0x120 [ 152.240853][ C1] __hrtimer_run_queues+0x420/0xc64 [ 152.241651][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 152.242403][ C1] arch_timer_handler_virt+0x74/0x88 [ 152.243281][ C1] handle_percpu_devid_irq+0x174/0x34c [ 152.244176][ C1] generic_handle_domain_irq+0xe0/0x140 [ 152.245105][ C1] gic_handle_irq+0x70/0x1e4 [ 152.245924][ C1] call_on_irq_stack+0x30/0x48 [ 152.246742][ C1] do_interrupt_handler+0xd4/0x138 [ 152.247574][ C1] el1_interrupt+0x34/0x54 [ 152.248310][ C1] el1h_64_irq_handler+0x18/0x24 [ 152.249085][ C1] el1h_64_irq+0x64/0x68 [ 152.249764][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 152.250646][ C1] uart_write_room+0x150/0x2d4 [ 152.251438][ C1] tty_write_room+0x6c/0x8c [ 152.252176][ C1] handle_tx+0x120/0x5f8 [ 152.252884][ C1] caif_xmit+0x108/0x150 [ 152.253559][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 152.254404][ C1] __dev_queue_xmit+0x155c/0x309c [ 152.255171][ C1] tx+0x9c/0x1c8 [ 152.255707][ C1] kthread+0x160/0x330 [ 152.256293][ C1] kthread+0x250/0x2d8 [ 152.257033][ C1] ret_from_fork+0x10/0x20 [ 152.480391][ C1] Rebooting in 86400 seconds..