last executing test programs: 17.599376121s ago: executing program 0 (id=431): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000400)=""/159, 0x9f) 16.622137287s ago: executing program 1 (id=435): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") openat(r0, 0x0, 0x42, 0x4) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) creat(&(0x7f0000000b80)='./bus\x00', 0x155) 15.146144804s ago: executing program 1 (id=437): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x4801, &(0x7f0000000040)={[{@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) creat(0x0, 0xbb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100000000000000", @ANYRES32=0x0], 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) 13.05830826s ago: executing program 1 (id=440): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x44, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.925141573s ago: executing program 0 (id=441): epoll_create(0x1000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x2, 0xf, 0x2, "600e229ba133a2fd972ef1fb92c8be83c669c4e432eb59047d82569a0c3706ed457ed2e884930af0c0cea5439fb872c48f7ea8ece9b5e5276cecce82288f93", 0x3f}, 0x60) 12.402547835s ago: executing program 1 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000480)={0x10003, 0x3, 0x52f}) 12.168637367s ago: executing program 3 (id=445): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000080)=0x1, 0x4) unshare(0x2040400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x7, 0x2, 0x5c, 0x2, 0x73, 0x23, 0x6, 0x7, 0x101, 0x6, 0x5, 0x2, 0x401, 0x9, 0x283, 0xfffffff7, 0xb3, 0x6, 0x0, 0x6, 0x7, 0x800, 0x0, 0x9, 0xa, 0x8, 0x43, 0x3, 0x60000000, 0x10000, 0x4, 0x50000, 0xffffff7f, 0x4, 0x0, 0x1, 0x6, 0x1fd, 0x4, 0xdc6f, 0x8f99, 0x1, 0xfffffeff, 0x1, 0x5, 0x2, 0x401, 0x8000, 0x6, 0x3, 0x8001, 0x9, 0xc, 0x89, 0x2, 0x8ef, 0x74ac, 0x98b, 0xfffffff7, 0x80000000, 0x7fff, 0x7, 0x2, 0x0, 0x7, 0x2, 0x9, 0x2, 0x14ddfd53, 0x3cd, 0x5, 0xffffffff, 0x7, 0x9, 0x1fc0, 0x41, 0x5, 0xfffffff9, 0x2, 0x7a, 0x3, 0x6, 0x4, 0xfffffffc, 0xa, 0x400, 0x6, 0x7f, 0x0, 0x1, 0x80000001, 0x9, 0x6, 0x5, 0x4, 0x1000, 0x5, 0xe8aa, 0x17b8, 0x7, 0xba36, 0x0, 0x7fff, 0x401, 0xffffe0f1, 0x100, 0x6, 0xf11, 0x71db, 0x6, 0xf8, 0x5, 0x4, 0xdd8, 0x9, 0x9, 0x1, 0x8, 0x80, 0x7, 0x6, 0x4, 0xffffffff, 0xe27, 0x9, 0x10001, 0x5, 0xe, 0x8001, 0x7ff, 0x7ff, 0x62f, 0x8, 0x0, 0x4, 0xfff, 0x3, 0x0, 0x561f0d9b, 0x1000, 0x5, 0x9, 0xcc, 0x9, 0xffffffff, 0x0, 0x10001, 0x5, 0x7, 0x5030, 0x1c, 0x7, 0xa4000000, 0x0, 0x7143, 0x0, 0x437b, 0xffffeaf4, 0xa1, 0x80000000, 0x1010, 0x4, 0x6, 0x80, 0x1ff, 0x3, 0x4, 0xe, 0x5da342fc, 0x9, 0x1, 0xfffffff6, 0x640, 0x89fa, 0x9, 0x4, 0x4, 0x9, 0x8, 0x5, 0x7fffffff, 0xc0, 0x80000000, 0x40, 0x80, 0x10000, 0x2, 0x1, 0x6, 0xf90, 0xc2, 0xffffffff, 0x8, 0x5, 0x101, 0xcf, 0x0, 0x7fffffff, 0x5, 0x7, 0x2, 0x8, 0x1, 0x80000000, 0x1, 0x1, 0x800, 0x3, 0xffff, 0x8, 0xfffffffd, 0x1000, 0x87, 0x0, 0x80000001, 0xc, 0xff, 0x5, 0x7, 0x96f, 0x5, 0x10, 0xffffffff, 0x1, 0x9, 0x4, 0x0, 0x3, 0x8, 0x0, 0x8001, 0x233, 0x6a, 0x3, 0x4, 0x9, 0x8b8, 0xfff, 0xcfa, 0xf8b4, 0xfffffff9, 0xc0d, 0x4d, 0x8000, 0x8, 0x1, 0xb1, 0x0, 0x0, 0x3, 0x1, 0x400, 0x9, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xc, 0x401, 0x0, 0x3, 0xfffffff7, 0x7580, 0x0, 0x2, 0x474, 0x1, 0x1000, 0x8, 0x3cd, 0x0, 0xd5, 0x2, 0x2, 0x7, 0x5, 0x66d6, 0xe9, 0x9, 0x8, 0x2, 0x1, 0x3, 0x400, 0xc1aa, 0x4, 0xffff2efb, 0x6, 0xfffffffc, 0xdf8, 0xb, 0x34313fbc, 0x41df, 0x7, 0x80000000, 0x7, 0x9, 0xfffffe00, 0x5, 0xb73, 0x7, 0x0, 0x80000000, 0x400, 0x2, 0x9, 0x0, 0x3, 0x3, 0xfffffff7, 0x6, 0x0, 0x3, 0x2, 0x3, 0x400, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x10, 0x8, 0x4, 0x3, 0xfffffff7, 0xb, 0x29, 0x84, 0x7, 0x6, 0x9, 0xb9e2, 0x3, 0x8, 0x3, 0xa9, 0x0, 0x9, 0x0, 0xc, 0x4, 0xfff, 0x0, 0x3, 0x1, 0x3, 0x401, 0x0, 0xfffffffb, 0xffff367d, 0xffffffff, 0x5e5b2c60, 0xa, 0x5bf7, 0x1, 0x51, 0x101, 0x3, 0xde3, 0x1, 0x1, 0xfffffff8, 0x7, 0x8, 0x2, 0xffffffd9, 0x2, 0x4, 0x80, 0x3, 0xa, 0x5, 0x8, 0x8000, 0x9, 0xfe1, 0x6, 0x4, 0x0, 0x80000000, 0xb, 0x9, 0xfffffff9, 0x4, 0x0, 0x9, 0x401, 0x8, 0x8a, 0x3, 0x5, 0x79903359, 0x8, 0x7, 0x41, 0x2, 0xffffffff, 0x7760, 0x800, 0x5, 0x80000000, 0xffffffff, 0xfffffff8, 0x4e3a0b6, 0x9, 0x9, 0x0, 0xffffffff, 0x8, 0x9, 0x0, 0x2, 0x6, 0x10, 0x6, 0x17, 0x7, 0x8, 0x4, 0xbc, 0x5, 0x7, 0x0, 0x9, 0xb, 0x0, 0x849, 0x61, 0x3ff, 0x0, 0x8, 0x10001, 0x9, 0x3, 0x3, 0x7fffffff, 0x1, 0x4, 0x8, 0x3ff, 0x8001, 0x6, 0x4, 0x6, 0xfa, 0xe, 0xb, 0xfffffffd, 0x7, 0x3c, 0xc548, 0xa, 0x2, 0x4, 0x9, 0x4, 0x7, 0x9, 0xaec4, 0x8, 0x5, 0xfffffff7, 0x401e0095, 0x1, 0xe09, 0x7fff, 0xe5, 0x2a, 0x2, 0x9, 0x5, 0x5, 0xfffffffc, 0x81, 0x5, 0x3, 0x0, 0x9, 0x7, 0x81, 0x7, 0x800, 0x57, 0x8, 0x81, 0x2, 0x8001, 0x101, 0x6, 0x4, 0xad07, 0x8, 0x9, 0x689, 0x3, 0x6, 0x1, 0xfffffffc, 0x7, 0x4, 0xf2f, 0x6, 0x0, 0x5, 0x3, 0xa7, 0x1, 0x4, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x6, 0x1, 0x5, {0x5, 0x1, 0x2, 0x9, 0x7ff, 0x33}, {0x8, 0xc22d0cf2a28b1e3d, 0x0, 0x5, 0x1, 0x5}, 0x1, 0x2, 0x80000004}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 11.158830597s ago: executing program 0 (id=446): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881a5, 0x14}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="5617", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1e, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xa0}, [@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000640)={0x0, 0x7, 0x0, 0x5, 0x0, [0x0, 0x0, 0x0], [0xfffffffa, 0x7, 0x122c, 0x80], [0x5, 0xfffffff8, 0x0, 0x5b], [0x5e81, 0x3ff, 0x9, 0xffffffff7fffffff]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000006c0)={0x0, 0x7, 0x3, 0x3, 0x2, [0x0, 0x0, 0x0, r6], [0x0, 0x6, 0x1, 0xfffffffa], [0x18, 0x4, 0x4, 0x1], [0x3, 0x3, 0x3, 0x3]}) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0xfffffffd, 0x20000000}}}}}, 0x0) 10.164940706s ago: executing program 0 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 10.152520976s ago: executing program 3 (id=448): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0xc4) socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000300)="94719464b32f00fbfaf0367f4722cb5f979a74303acb5cad245c2a6cdbb0a80136d1507a295b5a1afa81211173745d7d98b3414d6b87c04bef013066635b1f", 0x3f}], 0x1}}], 0x2, 0x8005) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r1, 0x0) readlink(0x0, &(0x7f0000000500)=""/250, 0xfa) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) mprotect(&(0x7f0000387000/0x4000)=nil, 0x4000, 0x5) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000002540)=0x1) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4060) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301018521570d0e0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) 9.193501761s ago: executing program 3 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000400)=""/159, 0x9f) 8.925000488s ago: executing program 1 (id=452): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x100) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 8.764950854s ago: executing program 0 (id=453): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg(r1, 0x0, 0x40000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x4000, 0x7, {0x77359400}, {0x4, 0x0, 0x7f, 0xdf, 0x8, 0xbc, "3b7d93f9"}, 0x2, 0x2, {0x0}, 0x4}) 7.232530615s ago: executing program 0 (id=456): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x18c1088, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32, @ANYRES64], 0x1, 0x374, &(0x7f0000000ec0)="$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") socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.459576849s ago: executing program 2 (id=462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.976565427s ago: executing program 2 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x7, 0x9, 0xffffb9e5, 0xffffffff, 0x3ff, 0x84a, 0x5, 0x7f}}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0xa99f24d, 0x7, 0xffffffff, 0x5, 0x2, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0xfc000000, 0x4, 0xae1}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x7, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x6cb2, 0x7, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048e5}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.652013749s ago: executing program 3 (id=465): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0x8, 0x100008d}, 0x0) socket(0x1, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) syz_open_dev$cec(0x0, 0x0, 0x82002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x3, @empty, 0x800}, 0x1c) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0xc) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) preadv(0xffffffffffffffff, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) 3.604699564s ago: executing program 2 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.573019986s ago: executing program 3 (id=467): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x5, {0x1, @struct, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @usage=0x200000000000007, 0x0, 0x8, [0x2000000, 0x0, 0x0, 0x1, 0x800000000000, 0xd]}, {0x4, @usage, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2, @usage, 0x0, 0x0, [0x2, 0x0, 0x3, 0xffffffffffffffff]}, {0x0, @struct={0x5, 0xfffffffc}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x3b, @usage=0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x5, 0x5]}, {0xfffffffffffffffe}}) 2.53194232s ago: executing program 4 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.428983911s ago: executing program 2 (id=469): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881a5, 0x14}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="5617", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1e, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xa0}, [@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000640)={0x0, 0x7, 0x0, 0x5, 0x0, [0x0, 0x0, 0x0], [0xfffffffa, 0x7, 0x122c, 0x80], [0x5, 0xfffffff8, 0x0, 0x5b], [0x5e81, 0x3ff, 0x9, 0xffffffff7fffffff]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000006c0)={0x0, 0x7, 0x3, 0x3, 0x2, [0x0, 0x0, 0x0, r4], [0x0, 0x6, 0x1, 0xfffffffa], [0x18, 0x4, 0x4, 0x1], [0x3, 0x3, 0x3, 0x3]}) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0xfffffffd, 0x20000000}}}}}, 0x0) 2.410305422s ago: executing program 1 (id=470): syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x4b, 0xfd, 0xf2, 0x20, 0x424, 0xcf30, 0xd3ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0xa0, 0x1, [{{0x9, 0x4, 0x96, 0x3, 0x0, 0x62, 0xbf, 0x2c, 0xab}}]}}]}}, 0x0) 2.052147437s ago: executing program 2 (id=471): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x44, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.979707515s ago: executing program 4 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.843890618s ago: executing program 4 (id=473): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0xc4) socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000300)="94719464b32f00fbfaf0367f4722cb5f979a74303acb5cad245c2a6cdbb0a80136d1507a295b5a1afa81211173745d7d98b3414d6b87c04bef013066635b1f", 0x3f}], 0x1}}], 0x2, 0x8005) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r1, 0x0) readlink(0x0, &(0x7f0000000500)=""/250, 0xfa) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) mprotect(&(0x7f0000387000/0x4000)=nil, 0x4000, 0x5) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000002540)=0x1) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4060) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301018521570d0e0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) 1.542486908s ago: executing program 4 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc80"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, r6, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x8, 0x6, 0x7, 0xd4f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x64}}, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) 457.346475ms ago: executing program 4 (id=475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="010000"], 0x3c}}, 0x0) 336.451517ms ago: executing program 2 (id=476): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000400)=""/159, 0x9f) 197.157101ms ago: executing program 3 (id=477): creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) dup(r1) 0s ago: executing program 4 (id=478): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 58.606670][ T4171] cgroup: Unknown subsys name 'net' [ 58.755041][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.240942][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.725760][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.773433][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 61.831404][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.883663][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.916744][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.924095][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.933088][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.948452][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.976642][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.983901][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.992237][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.022267][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.029523][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.037575][ T4181] device bridge_slave_0 entered promiscuous mode [ 62.071446][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.079456][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.087331][ T4181] device bridge_slave_1 entered promiscuous mode [ 62.123513][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.133030][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.140304][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.149110][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.171733][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.181133][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.188488][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.196293][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.206229][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.243137][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.290988][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.298079][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.306275][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.316900][ T4183] team0: Port device team_slave_0 added [ 62.325091][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.349361][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.356467][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.364639][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.372860][ T4183] team0: Port device team_slave_1 added [ 62.388698][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.400365][ T4181] team0: Port device team_slave_0 added [ 62.407092][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.414323][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.422520][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.454022][ T4181] team0: Port device team_slave_1 added [ 62.459981][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.467049][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.476212][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.492213][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.499259][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.525473][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.539549][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.546671][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.572726][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.607974][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.620347][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.635841][ T4191] team0: Port device team_slave_0 added [ 62.674151][ T4191] team0: Port device team_slave_1 added [ 62.680996][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.687959][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.714110][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.727019][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.747164][ T4184] team0: Port device team_slave_0 added [ 62.767350][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.774601][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.800979][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.813811][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.832569][ T4184] team0: Port device team_slave_1 added [ 62.859175][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.866140][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.880592][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.887570][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.913929][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.958510][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.965586][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.991757][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.012763][ T4182] team0: Port device team_slave_0 added [ 63.022680][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.029936][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.056020][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.074184][ T4181] device hsr_slave_0 entered promiscuous mode [ 63.081027][ T4181] device hsr_slave_1 entered promiscuous mode [ 63.087552][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.098382][ T4181] Cannot create hsr debugfs directory [ 63.105046][ T4182] team0: Port device team_slave_1 added [ 63.117888][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.125094][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.151486][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.230817][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.237807][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.264301][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.277857][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.285818][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.292591][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.301684][ T4191] Cannot create hsr debugfs directory [ 63.314989][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.321958][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.328997][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.336597][ T4184] Cannot create hsr debugfs directory [ 63.346336][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.353538][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.380119][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.399093][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 63.408416][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 63.414439][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.414506][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.426641][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.553847][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.560983][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.567522][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.575252][ T4182] Cannot create hsr debugfs directory [ 63.759874][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.774963][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.787929][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.806442][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.852153][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.862039][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.875978][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.899414][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.946564][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.983290][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.996650][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.016497][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.045745][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.086474][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.097515][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.111966][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.123094][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.133707][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.141899][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.152414][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.178932][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.190545][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.201359][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.208673][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.249592][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.257722][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.267245][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.276392][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.283553][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.292369][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.311482][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.339266][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.352037][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.370686][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.382994][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.406731][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.414034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.423931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.433082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.465868][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.474963][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.496370][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.504974][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.517997][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.534139][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.546852][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.557396][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.570612][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.579834][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.590372][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.597482][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.613341][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.624682][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.639182][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.650619][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.659744][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.668425][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.676912][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.686135][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.694519][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.703323][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.712389][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.719534][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.759967][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.775330][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.786089][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.801063][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.813799][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.820939][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.828801][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.837796][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.847337][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.854531][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.862918][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.880959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.891325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.902864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.935690][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.944030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.953638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.989674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.007170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.016003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.025079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.046579][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.059431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.067891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.076747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.089729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.098413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.107062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.115958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.125427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.134126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.149628][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.173414][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.185193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.202803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.211910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.222264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.232028][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.239162][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.247385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.257112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.266023][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.273130][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.281277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.289046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.296502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.311955][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.330781][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.349504][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.381418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.395916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.405688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.415440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.425773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.435000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.444390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.453317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.464789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.473268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.480985][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 65.482774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.487178][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 65.500872][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 65.506990][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 65.518460][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 65.527501][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.543572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.556022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.566182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.582099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.591469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.600498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.612080][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.625974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.635368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.644229][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.651360][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.693649][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.706075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.723355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.734742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.745306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.773484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.782516][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.789641][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.797846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.812008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.821159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.832188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.840700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.862159][ T4183] device veth0_vlan entered promiscuous mode [ 65.881903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.897347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.906157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.947076][ T4183] device veth1_vlan entered promiscuous mode [ 65.957299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.967433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.976903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.987462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.996412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.005509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.014690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.037413][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.056859][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.079591][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.102582][ T4181] device veth0_vlan entered promiscuous mode [ 66.117050][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.125511][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.133927][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.142630][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.152252][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.161342][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.169898][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.178079][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.186564][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.194717][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.203151][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.217974][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.244198][ T4183] device veth0_macvtap entered promiscuous mode [ 66.271153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.281037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.310593][ T4183] device veth1_macvtap entered promiscuous mode [ 66.324579][ T4181] device veth1_vlan entered promiscuous mode [ 66.340023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.354608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.364859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.411082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.426838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.438198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.454134][ T4182] device veth0_vlan entered promiscuous mode [ 66.467476][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.490199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.500402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.511631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.521763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.531527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.540913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.550481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.560436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.574462][ T4182] device veth1_vlan entered promiscuous mode [ 66.591867][ T4181] device veth0_macvtap entered promiscuous mode [ 66.617490][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.633827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.642901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.651526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.660108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.667556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.677551][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.699912][ T4181] device veth1_macvtap entered promiscuous mode [ 66.707597][ T4182] device veth0_macvtap entered promiscuous mode [ 66.724842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.733600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.742462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.751367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.761388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.770280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.779414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.788456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.798915][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.807813][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817123][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.826153][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.843519][ T4182] device veth1_macvtap entered promiscuous mode [ 66.901555][ T4191] device veth0_vlan entered promiscuous mode [ 66.910714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.920195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.929332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.937731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.946935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.961315][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.972435][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.984153][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.008300][ T4191] device veth1_vlan entered promiscuous mode [ 67.022270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.030806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.039610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.050817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.059841][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.070488][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.080623][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.093304][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.104551][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.120595][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.131506][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.143900][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.160975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.169962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.179179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.187809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.196671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.205494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.214856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.225770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.240777][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.253742][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.263836][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.276315][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.287697][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.295974][ T4184] device veth0_vlan entered promiscuous mode [ 67.315584][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.325548][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336325][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345358][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.369240][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.378041][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.390766][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.403057][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412432][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.421447][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.449158][ T4184] device veth1_vlan entered promiscuous mode [ 67.521816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.535593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.544172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.553429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.558586][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 67.568530][ T4186] Bluetooth: hci2: command 0x040f tx timeout [ 67.579244][ T4186] Bluetooth: hci1: command 0x040f tx timeout [ 67.585347][ T4186] Bluetooth: hci3: command 0x040f tx timeout [ 67.591802][ T4186] Bluetooth: hci0: command 0x040f tx timeout [ 67.596437][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.599397][ T4191] device veth0_macvtap entered promiscuous mode [ 67.622001][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.635284][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.645270][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.655336][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.664374][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.674500][ T4184] device veth0_macvtap entered promiscuous mode [ 67.696824][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.705451][ T4191] device veth1_macvtap entered promiscuous mode [ 67.715560][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.740626][ T4184] device veth1_macvtap entered promiscuous mode [ 67.745825][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.767736][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.769242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.785150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.793354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.802098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.810339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.835476][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.847558][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.857791][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.871898][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.882462][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.893286][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.905560][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.925967][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.937884][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.949602][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.960985][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.971470][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.985241][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.995474][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.006213][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.018714][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.026653][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.044119][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.056923][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.066518][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.078383][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.089573][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.100138][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.110903][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.125486][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.138189][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.149740][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.165682][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.176896][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.187325][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.198628][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.211633][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.222147][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.232209][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.242706][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.254121][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.267706][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.276718][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.286947][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.296431][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.318076][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.345016][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.363124][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.372183][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.389295][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.397319][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.418347][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.426340][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.436460][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.450892][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.460887][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.469908][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.504760][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.515395][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.631591][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.654157][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.706334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.767332][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.798657][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.837149][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.859414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.891576][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.908638][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.924761][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.942627][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.950732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.971902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.036758][ T4293] loop3: detected capacity change from 0 to 32768 [ 69.190065][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.238548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.248160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.277091][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.290306][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.316901][ T4293] XFS (loop3): Mounting V5 Filesystem [ 69.351956][ T4313] netlink: 'syz.4.5': attribute type 12 has an invalid length. [ 69.435494][ T4313] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 69.500697][ T4293] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 69.522453][ T4313] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5'. [ 69.590583][ T4313] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 69.598522][ T4313] netlink: 39 bytes leftover after parsing attributes in process `syz.4.5'. [ 69.620221][ T4313] Zero length message leads to an empty skb [ 69.649296][ T4247] Bluetooth: hci0: command 0x0419 tx timeout [ 69.656255][ T4247] Bluetooth: hci3: command 0x0419 tx timeout [ 69.675340][ T4293] XFS (loop3): Starting recovery (logdev: internal) [ 69.683107][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 69.696420][ T4247] Bluetooth: hci2: command 0x0419 tx timeout [ 69.708893][ T4247] Bluetooth: hci4: command 0x0419 tx timeout [ 69.716198][ T4321] loop2: detected capacity change from 0 to 512 [ 69.746307][ T4293] XFS (loop3): Ending recovery (logdev: internal) [ 69.841849][ T4321] EXT4-fs (loop2): Ignoring removed nobh option [ 69.901655][ T4183] XFS (loop3): Unmounting Filesystem [ 69.946804][ T4321] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 70.052947][ T4321] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 70.066844][ T4321] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 70.079900][ T4330] process 'syz.1.9' launched './file1' with NULL argv: empty string added [ 70.430091][ T4339] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 70.844935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.079421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.088425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.098150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.107094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.116023][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.124952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.133888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.434271][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440942][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.572661][ T4336] loop0: detected capacity change from 0 to 8 [ 71.641764][ T4336] SQUASHFS error: xz decompression failed, data probably corrupt [ 71.649866][ T4336] SQUASHFS error: Failed to read block 0x108: -5 [ 71.656793][ T4336] SQUASHFS error: Unable to read metadata cache entry [106] [ 71.664169][ T4336] SQUASHFS error: Unable to read inode 0x11f [ 72.098241][ T4240] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 72.282524][ T4346] loop2: detected capacity change from 0 to 32768 [ 72.338792][ T4346] ======================================================= [ 72.338792][ T4346] WARNING: The mand mount option has been deprecated and [ 72.338792][ T4346] and is ignored by this kernel. Remove the mand [ 72.338792][ T4346] option from the mount to silence this warning. [ 72.338792][ T4346] ======================================================= [ 72.480278][ T4346] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.504581][ T4323] loop4: detected capacity change from 0 to 32768 [ 72.589291][ T4323] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6 (4323) [ 72.798327][ T4240] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.868521][ T4240] usb 4-1: no configurations [ 72.873564][ T4240] usb 4-1: can't read configurations, error -22 [ 72.965700][ T4323] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 73.120799][ T4323] BTRFS info (device loop4): enabling disk space caching [ 73.289537][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 73.403795][ T4323] BTRFS info (device loop4): turning off barriers [ 73.556382][ T4323] BTRFS info (device loop4): enabling ssd optimizations [ 73.611499][ T4323] BTRFS info (device loop4): turning on flush-on-commit [ 73.684285][ T4365] tipc: Enabling of bearer rejected, failed to enable media [ 73.693660][ T4323] BTRFS info (device loop4): force clearing of disk cache [ 73.708249][ T4323] BTRFS info (device loop4): using spread ssd allocation scheme [ 73.739859][ T4323] BTRFS info (device loop4): disk space caching is enabled [ 73.747803][ T4367] device syzkaller0 entered promiscuous mode [ 73.778276][ T4323] BTRFS info (device loop4): has skinny extents [ 73.798894][ T4323] workqueue: max_active 65535 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 73.812822][ T4366] block nbd0: shutting down sockets [ 73.882921][ T4323] workqueue: max_active 65535 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 73.959082][ T4323] workqueue: max_active 65535 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 74.058172][ T4226] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.120981][ T4323] workqueue: max_active 65535 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 74.195977][ T4323] workqueue: max_active 65535 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 74.315093][ T4323] workqueue: max_active 65535 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 74.479084][ T4226] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.689021][ T4226] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.751953][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.829497][ T4226] usb 3-1: Product: syz [ 74.871183][ T4226] usb 3-1: Manufacturer: syz [ 74.913943][ T4226] usb 3-1: SerialNumber: syz [ 75.028038][ T4226] usb 3-1: config 0 descriptor?? [ 75.079860][ T4323] workqueue: max_active 65535 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 75.119133][ T4323] workqueue: max_active 65535 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 75.189045][ T4323] workqueue: max_active 65535 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 75.232226][ T4323] BTRFS error (device loop4): open_ctree failed: -12 [ 75.425905][ T4392] device syzkaller0 entered promiscuous mode [ 75.434516][ T4394] tipc: Started in network mode [ 75.454056][ T4394] tipc: Node identity 9aba38a5ec79, cluster identity 4711 [ 75.461570][ T4394] tipc: Enabled bearer , priority 0 [ 75.609867][ T4394] tipc: Resetting bearer [ 75.680547][ T4384] loop3: detected capacity change from 0 to 32768 [ 75.819208][ T4384] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 75.860640][ T4393] tipc: Disabling bearer [ 75.876472][ T4384] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.165595][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 76.799306][ T1111] usb 3-1: USB disconnect, device number 2 [ 78.257111][ T4430] loop4: detected capacity change from 0 to 512 [ 78.441713][ T4427] loop2: detected capacity change from 0 to 4096 [ 78.655840][ T4430] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.665135][ T4430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.697436][ T4430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.789114][ T4430] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.29: bad orphan inode 131083 [ 78.815166][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 78.943741][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 79.162739][ T4445] device syzkaller0 entered promiscuous mode [ 79.752432][ T4453] program syz.1.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.795672][ T4429] loop0: detected capacity change from 0 to 40427 [ 79.871617][ T4455] loop1: detected capacity change from 0 to 512 [ 79.936995][ T4429] F2FS-fs (loop0): invalid crc value [ 79.946304][ T4462] loop2: detected capacity change from 0 to 128 [ 79.946453][ T4455] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 79.991747][ T4429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.996642][ T1108] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 81.048772][ T4429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.908756][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 82.072537][ T4489] loop2: detected capacity change from 0 to 512 [ 82.153393][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 82.205350][ T4489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.220374][ T4489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.295642][ T4489] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.47: bad orphan inode 131083 [ 82.388603][ T1108] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.408176][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.416215][ T1108] usb 4-1: Product: syz [ 82.428143][ T1108] usb 4-1: Manufacturer: syz [ 82.437866][ T1108] usb 4-1: SerialNumber: syz [ 82.455065][ T1108] usb 4-1: config 0 descriptor?? [ 82.473973][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 82.717935][ T4482] loop4: detected capacity change from 0 to 32768 [ 83.218391][ T1108] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 83.234910][ T1108] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 83.379094][ T1108] usb 4-1: USB disconnect, device number 4 [ 85.805214][ T4530] loop3: detected capacity change from 0 to 4096 [ 85.842501][ T4530] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 85.934095][ T4530] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 86.152251][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 86.681444][ T1325] cfg80211: failed to load regulatory.db [ 86.799859][ T4545] loop1: detected capacity change from 0 to 8192 [ 88.558337][ T1325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 89.209036][ T1325] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.259290][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.374771][ T1325] usb 5-1: Product: syz [ 89.482114][ T1325] usb 5-1: Manufacturer: syz [ 89.487200][ T1325] usb 5-1: SerialNumber: syz [ 89.606275][ T1325] usb 5-1: config 0 descriptor?? [ 89.857472][ T4567] loop1: detected capacity change from 0 to 32768 [ 89.888446][ T1325] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.929778][ T4567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.64 (4567) [ 89.942199][ T4226] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.080079][ T4567] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 90.103896][ T4567] BTRFS info (device loop1): enabling auto defrag [ 90.118487][ T4567] BTRFS info (device loop1): using free space tree [ 90.198753][ T4579] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 90.328308][ T4567] BTRFS info (device loop1): has skinny extents [ 90.896832][ T1325] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 91.188434][ T4226] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 91.203286][ T4226] usb 3-1: config 0 has no interface number 0 [ 91.233119][ T4226] usb 3-1: config 0 interface 41 has no altsetting 0 [ 91.371424][ T13] usb 5-1: USB disconnect, device number 2 [ 91.688313][ T4226] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 91.688365][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.688391][ T4226] usb 3-1: Product: syz [ 91.688405][ T4226] usb 3-1: Manufacturer: syz [ 91.688416][ T4226] usb 3-1: SerialNumber: syz [ 91.690176][ T4226] usb 3-1: config 0 descriptor?? [ 92.179241][ T4567] BTRFS error (device loop1): open_ctree failed: -22 [ 92.805180][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 92.878968][ T4226] CoreChips: probe of 3-1:0.41 failed with error -71 [ 93.035935][ T4507] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4507) [ 93.067135][ T4226] usb 3-1: USB disconnect, device number 3 [ 93.081088][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 94.450208][ T4639] device syzkaller0 entered promiscuous mode [ 97.401237][ T4659] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 98.862746][ T4664] loop0: detected capacity change from 0 to 512 [ 99.048103][ C1] sched: RT throttling activated [ 99.059664][ T4664] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.077175][ T4664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.159066][ T4664] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.83: bad orphan inode 131083 [ 99.219153][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 100.833033][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.123324][ T4667] loop3: detected capacity change from 0 to 40427 [ 101.160217][ T4667] F2FS-fs (loop3): invalid crc value [ 101.206523][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.277641][ T4667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.455893][ T4667] F2FS-fs (loop3): Start checkpoint disabled! [ 102.320494][ T4676] loop0: detected capacity change from 0 to 40427 [ 102.355733][ T4676] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 103.248736][ T4676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.401335][ T4691] sctp: failed to load transform for md5: -4 [ 104.126133][ T4676] F2FS-fs (loop0): invalid crc value [ 104.156237][ T4676] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 105.067872][ T4733] loop3: detected capacity change from 0 to 24 [ 105.209528][ T4733] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 105.247457][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 105.266856][ T4733] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 105.403675][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 110.666379][ T4783] loop0: detected capacity change from 0 to 512 [ 110.785292][ T4773] loop2: detected capacity change from 0 to 32768 [ 110.868731][ T4783] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.112: bad orphan inode 11862016 [ 110.917396][ T4783] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.958416][ T4783] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.037046][ T4792] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 111.059328][ T4765] loop3: detected capacity change from 0 to 32768 [ 111.095761][ T4773] XFS (loop2): Mounting V5 Filesystem [ 111.362336][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 111.923617][ T4773] XFS (loop2): Ending clean mount [ 112.377994][ T4173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4173) [ 112.425381][ T26] audit: type=1800 audit(1760574186.398:2): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 112.456648][ T26] audit: type=1800 audit(1760574186.428:3): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 112.707305][ T4815] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 113.390699][ T4819] loop0: detected capacity change from 0 to 512 [ 113.490639][ T4819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.728139][ T4824] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 114.121773][ T4819] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.116: bad orphan inode 131083 [ 114.133486][ T4819] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 114.169903][ T4184] XFS (loop2): Unmounting Filesystem [ 115.178252][ T4829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.054331][ T4838] device syzkaller0 entered promiscuous mode [ 118.442319][ T4857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.657945][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 118.711683][ T4864] loop1: detected capacity change from 0 to 2048 [ 118.876583][ T4864] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 119.808387][ T4864] UDF-fs: Scanning with blocksize 512 failed [ 119.902930][ T4864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.068763][ T4875] loop4: detected capacity change from 0 to 128 [ 122.222624][ T4888] loop4: detected capacity change from 0 to 2048 [ 123.575278][ T4423] attempt to access beyond end of device [ 123.575278][ T4423] loop1: rw=1, want=2050, limit=2048 [ 123.617928][ T4423] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 123.684618][ T4423] attempt to access beyond end of device [ 123.684618][ T4423] loop1: rw=1, want=2050, limit=2048 [ 123.698783][ T4423] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 123.717756][ T4423] attempt to access beyond end of device [ 123.717756][ T4423] loop1: rw=1, want=2050, limit=2048 [ 123.832598][ T4423] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 123.834203][ T4423] attempt to access beyond end of device [ 123.834203][ T4423] loop1: rw=1, want=2050, limit=2048 [ 123.834573][ T4423] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 123.835939][ T4423] attempt to access beyond end of device [ 123.835939][ T4423] loop1: rw=1, want=2052, limit=2048 [ 123.836351][ T4423] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 123.837130][ T4423] attempt to access beyond end of device [ 123.837130][ T4423] loop1: rw=1, want=2052, limit=2048 [ 123.837535][ T4423] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 123.842062][ T4423] attempt to access beyond end of device [ 123.842062][ T4423] loop1: rw=1, want=2052, limit=2048 [ 123.842460][ T4423] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 123.843404][ T4423] attempt to access beyond end of device [ 123.843404][ T4423] loop1: rw=1, want=2052, limit=2048 [ 123.843721][ T4423] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 123.846437][ T4423] attempt to access beyond end of device [ 123.846437][ T4423] loop1: rw=1, want=2054, limit=2048 [ 123.846709][ T4423] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 123.847380][ T4423] attempt to access beyond end of device [ 123.847380][ T4423] loop1: rw=1, want=2054, limit=2048 [ 123.847725][ T4423] Buffer I/O error on dev loop1, logical block 1026, lost async page write [ 124.320403][ T4916] netlink: 'syz.0.149': attribute type 5 has an invalid length. [ 124.332906][ T4918] loop3: detected capacity change from 0 to 64 [ 125.120429][ T4931] device syzkaller0 entered promiscuous mode [ 125.318318][ T4626] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.346518][ T4934] loop1: detected capacity change from 0 to 2048 [ 125.441366][ T4938] xt_connbytes: Forcing CT accounting to be enabled [ 125.487123][ T4934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.526176][ T4940] loop3: detected capacity change from 0 to 256 [ 127.258323][ T4626] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.267741][ T4626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.347368][ T4626] usb 3-1: Product: syz [ 127.365561][ T4626] usb 3-1: Manufacturer: syz [ 127.376228][ T4626] usb 3-1: SerialNumber: syz [ 127.406759][ T4626] usb 3-1: config 0 descriptor?? [ 127.688300][ T4626] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.517803][ T4616] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.668435][ T4626] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 128.708306][ T4616] usb 4-1: device descriptor read/64, error -71 [ 128.957382][ T4960] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 129.680188][ T4616] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.564004][ T4616] usb 4-1: device descriptor read/64, error -71 [ 130.607672][ T4226] usb 3-1: USB disconnect, device number 4 [ 130.726178][ T4616] usb usb4-port1: attempt power cycle [ 130.794115][ T4970] loop3: detected capacity change from 0 to 128 [ 130.870878][ T4970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.893689][ T4970] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.079923][ T4969] loop0: detected capacity change from 0 to 32768 [ 131.133618][ T4969] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.192506][ T4969] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 131.218533][ T4969] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.242869][ T4969] OCFS2: File system is now read-only. [ 131.249171][ T4969] (syz.0.163,4969,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 131.257718][ T4969] (syz.0.163,4969,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 131.267060][ T4969] (syz.0.163,4969,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 131.433816][ T4969] (syz.0.163,4969,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 131.491780][ T4969] (syz.0.163,4969,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 131.557319][ T4969] (syz.0.163,4969,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 131.580129][ T4980] device syzkaller0 entered promiscuous mode [ 131.617055][ T4969] (syz.0.163,4969,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 131.712514][ T4969] (syz.0.163,4969,0):ocfs2_mknod:385 ERROR: status = -30 [ 131.738206][ T26] audit: type=1326 audit(1760574205.708:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.2.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae28854ec9 code=0x0 [ 131.750365][ T4969] (syz.0.163,4969,0):ocfs2_mknod:502 ERROR: status = -30 [ 131.887123][ T4969] (syz.0.163,4969,0):ocfs2_create:676 ERROR: status = -30 [ 132.101640][ T4987] loop4: detected capacity change from 0 to 256 [ 132.949540][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956395][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.659978][ T4998] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 134.990577][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 135.268317][ T4616] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.278331][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.545327][ T4226] usb 4-1: device descriptor read/64, error -71 [ 135.570360][ T5013] device syzkaller0 entered promiscuous mode [ 135.598191][ T4616] usb 5-1: Using ep0 maxpacket: 8 [ 135.719343][ T4616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 135.754710][ T4616] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.754875][ T5020] loop1: detected capacity change from 0 to 2048 [ 135.769293][ T4616] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 135.784417][ T4616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.815739][ T4616] usb 5-1: config 0 descriptor?? [ 135.841319][ T4226] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.854237][ T5020] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.868448][ T5020] NILFS (loop1): mounting unchecked fs [ 135.907003][ T5020] NILFS (loop1): recovery complete [ 135.919597][ T4507] udevd[4507]: incorrect nilfs2 checksum on /dev/loop1 [ 135.953811][ T5021] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.039144][ T4226] usb 4-1: device descriptor read/64, error -71 [ 136.179116][ T4226] usb usb4-port1: attempt power cycle [ 136.296865][ T4616] sony 0003:054C:1000.0001: global environment stack underflow [ 136.336450][ T4616] sony 0003:054C:1000.0001: item 0 0 1 11 parsing failed [ 136.377820][ T4616] sony 0003:054C:1000.0001: parse failed [ 136.391351][ T4616] sony: probe of 0003:054C:1000.0001 failed with error -22 [ 136.445688][ T5023] loop0: detected capacity change from 0 to 128 [ 136.476350][ T5023] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.514130][ T4616] usb 5-1: USB disconnect, device number 3 [ 136.541061][ T5023] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.628445][ T4226] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.818365][ T4226] usb 4-1: device descriptor read/8, error -71 [ 137.098593][ T4226] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.485068][ T4226] usb 4-1: device descriptor read/8, error -71 [ 137.832450][ T5031] loop4: detected capacity change from 0 to 256 [ 137.843033][ T4406] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.853091][ T4226] usb usb4-port1: unable to enumerate USB device [ 138.390445][ T5040] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 138.658394][ T4626] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.156225][ T5036] loop3: detected capacity change from 0 to 2048 [ 139.281909][ T4626] usb 2-1: Using ep0 maxpacket: 8 [ 139.409570][ T4626] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.515434][ T5036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.555439][ T4626] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.581465][ T4626] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 139.610094][ T4626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.653507][ T4626] usb 2-1: config 0 descriptor?? [ 140.140088][ T4626] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 140.177201][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 140.195275][ T4626] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 140.285654][ T4626] pantherlord 0003:0E8F:0003.0002: hidraw0: USB HID v4.00 Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0 [ 140.298519][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 140.378337][ T4626] pantherlord 0003:0E8F:0003.0002: no output reports found [ 140.534807][ T4626] usb 2-1: USB disconnect, device number 2 [ 140.726032][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 141.651738][ T5060] fido_id[5060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.752265][ T5069] loop1: detected capacity change from 0 to 128 [ 143.658205][ T4290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.948346][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 144.268374][ T4290] usb 2-1: no configurations [ 144.273139][ T4290] usb 2-1: can't read configurations, error -22 [ 144.482529][ T5083] loop4: detected capacity change from 0 to 256 [ 144.488935][ T4290] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.748306][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 144.790149][ T4290] usb 2-1: no configurations [ 144.790170][ T4290] usb 2-1: can't read configurations, error -22 [ 144.791188][ T4290] usb usb2-port1: attempt power cycle [ 145.322743][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.448340][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 145.488716][ T4290] usb 2-1: no configurations [ 145.493453][ T4290] usb 2-1: can't read configurations, error -22 [ 145.966221][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 146.254867][ T4290] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.358381][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 146.404402][ T4290] usb 2-1: no configurations [ 146.468838][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 146.529293][ T4290] usb 2-1: can't read configurations, error -22 [ 146.536716][ T4290] usb usb2-port1: unable to enumerate USB device [ 147.430970][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 147.521871][ T5113] device syzkaller0 entered promiscuous mode [ 149.443972][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 149.640988][ T5115] loop4: detected capacity change from 0 to 32768 [ 149.716473][ T5115] XFS (loop4): Mounting V5 Filesystem [ 149.855073][ T5115] XFS (loop4): Ending clean mount [ 149.878173][ T4626] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 149.900526][ T5115] XFS (loop4): Quotacheck needed: Please wait. [ 150.057338][ T5115] XFS (loop4): Quotacheck: Done. [ 150.589663][ T4626] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.643708][ T4626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.755249][ T4626] usb 3-1: Product: syz [ 150.817545][ T4626] usb 3-1: Manufacturer: syz [ 150.887298][ T4626] usb 3-1: SerialNumber: syz [ 151.220831][ T4626] usb 3-1: config 0 descriptor?? [ 151.358603][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.404273][ T4191] XFS (loop4): Unmounting Filesystem [ 151.588246][ T4626] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 151.608538][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 151.660501][ T1108] usb 4-1: no configurations [ 151.665193][ T1108] usb 4-1: can't read configurations, error -22 [ 152.518222][ T1108] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.557134][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 152.631133][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 152.828366][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 152.878520][ T1108] usb 4-1: no configurations [ 152.883177][ T1108] usb 4-1: can't read configurations, error -22 [ 152.924255][ T1108] usb usb4-port1: attempt power cycle [ 153.104297][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 153.448183][ T1108] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.928478][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 153.968523][ T1108] usb 4-1: no configurations [ 153.973386][ T1108] usb 4-1: can't read configurations, error -22 [ 154.566066][ T5177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 154.578123][ T4626] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 154.604385][ T4626] usb 3-1: USB disconnect, device number 5 [ 156.099866][ T5197] loop2: detected capacity change from 0 to 128 [ 156.167836][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 156.249698][ T5197] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 156.420098][ T5197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.190301][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 157.608315][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.654259][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 158.598210][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 158.658303][ T21] usb 1-1: no configurations [ 158.663079][ T21] usb 1-1: can't read configurations, error -22 [ 158.799000][ T4626] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 159.319343][ T4626] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.343870][ T4626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.390342][ T4626] usb 5-1: Product: syz [ 159.408911][ T4626] usb 5-1: Manufacturer: syz [ 159.425627][ T4626] usb 5-1: SerialNumber: syz [ 159.451788][ T4626] usb 5-1: config 0 descriptor?? [ 159.788418][ T4626] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.898612][ T5238] loop2: detected capacity change from 0 to 24 [ 159.951243][ T5238] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 159.988311][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.436697][ T5238] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 163.418312][ T4626] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 163.441149][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 163.466357][ T4626] usb 5-1: USB disconnect, device number 4 [ 163.582536][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 164.549671][ T5269] loop0: detected capacity change from 0 to 128 [ 165.433301][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 165.495401][ T5272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 165.502692][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.529618][ T5280] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 165.536258][ T5280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.653493][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 165.666928][ T5280] vhci_hcd vhci_hcd.0: Device attached [ 165.685789][ T5286] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 165.692738][ T5286] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.739689][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.767797][ T5286] vhci_hcd vhci_hcd.0: Device attached [ 165.790956][ T4618] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.816081][ T5272] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 165.822739][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.856025][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 165.888455][ T5280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 165.895120][ T5280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.909392][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.928576][ T5280] vhci_hcd vhci_hcd.0: Device attached [ 165.934974][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.943807][ T4424] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 165.972623][ T5272] vhci_hcd vhci_hcd.0: port 0 already used [ 165.985599][ T5300] vhci_hcd: connection closed [ 165.988814][ T5295] vhci_hcd: connection closed [ 165.988968][ T5288] vhci_hcd: connection closed [ 165.997852][ T9] vhci_hcd: stop threads [ 166.002206][ T5281] vhci_hcd: connection closed [ 166.004299][ T9] vhci_hcd: release socket [ 166.016682][ T5278] vhci_hcd: connection reset by peer [ 166.029871][ T9] vhci_hcd: disconnect device [ 166.036202][ T9] vhci_hcd: stop threads [ 166.040942][ T9] vhci_hcd: release socket [ 166.046991][ T9] vhci_hcd: disconnect device [ 166.062137][ T9] vhci_hcd: stop threads [ 166.068552][ T4618] usb 2-1: Using ep0 maxpacket: 32 [ 166.068925][ T9] vhci_hcd: release socket [ 166.095968][ T9] vhci_hcd: disconnect device [ 166.108039][ T9] vhci_hcd: stop threads [ 166.116711][ T9] vhci_hcd: release socket [ 166.125723][ T9] vhci_hcd: disconnect device [ 166.132358][ T9] vhci_hcd: stop threads [ 166.136637][ T9] vhci_hcd: release socket [ 166.146067][ T9] vhci_hcd: disconnect device [ 166.151188][ T4290] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 166.189009][ T4618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.208135][ T4618] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.217159][ T4618] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 166.240224][ T4618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.252081][ T4618] usb 2-1: config 0 descriptor?? [ 166.493739][ T21] usb 2-1: USB disconnect, device number 7 [ 166.769077][ T4290] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.857610][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.996032][ T4290] usb 3-1: Product: syz [ 167.134102][ T4290] usb 3-1: Manufacturer: syz [ 167.253741][ T4290] usb 3-1: SerialNumber: syz [ 167.352395][ T5316] tipc: Started in network mode [ 167.371593][ T4290] usb 3-1: config 0 descriptor?? [ 167.404277][ T5316] tipc: Node identity 821f106c73b5, cluster identity 4711 [ 167.470412][ T5316] tipc: Enabled bearer , priority 0 [ 167.593730][ T5322] tipc: Resetting bearer [ 167.638499][ T4290] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.659705][ T5315] tipc: Disabling bearer [ 168.068158][ T4616] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.224056][ T5340] device syzkaller0 entered promiscuous mode [ 168.468380][ T4616] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.488342][ T4616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.268528][ T4616] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.277868][ T4616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.289913][ T4616] usb 2-1: SerialNumber: syz [ 169.298895][ T4626] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 169.398364][ T4290] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 169.410513][ T4290] usb 3-1: USB disconnect, device number 6 [ 169.576990][ T4616] usb 2-1: 0:2 : does not exist [ 169.589043][ T4616] usb 2-1: unit 5 not found! [ 169.624736][ T5349] loop2: detected capacity change from 0 to 32768 [ 169.630516][ T4616] usb 2-1: USB disconnect, device number 8 [ 169.658522][ T4626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.673544][ T4626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.685798][ T4626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 169.767509][ T4626] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 169.847587][ T5349] XFS (loop2): Mounting V5 Filesystem [ 169.858582][ T4626] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.868563][ T4626] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.876705][ T4626] usb 1-1: Manufacturer: syz [ 169.885757][ T4626] usb 1-1: config 0 descriptor?? [ 169.920484][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.926794][ T5349] XFS (loop2): Ending clean mount [ 170.400300][ T5342] loop0: detected capacity change from 0 to 1024 [ 170.958253][ T4626] rc_core: IR keymap rc-hauppauge not found [ 170.964519][ T4626] Registered IR keymap rc-empty [ 171.078231][ T4424] vhci_hcd: vhci_device speed not set [ 171.289858][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.358592][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.379078][ T5349] syz.2.267 (5349) used greatest stack depth: 19912 bytes left [ 171.397758][ T4626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 171.481652][ T4626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 171.521555][ T4184] XFS (loop2): Unmounting Filesystem [ 171.670742][ T5378] tipc: Enabled bearer , priority 0 [ 171.682282][ T5378] tipc: Resetting bearer [ 171.694088][ T5376] tipc: Enabling of bearer rejected, failed to enable media [ 171.728375][ T5377] tipc: Disabling bearer [ 171.748876][ T5376] device syzkaller0 entered promiscuous mode [ 171.757632][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.799781][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.858347][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.898314][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.958377][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 171.998333][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 172.038246][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 172.078291][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 172.198190][ T4616] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.211646][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 172.938205][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 172.978205][ T4626] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 173.009510][ T4626] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.021354][ T4626] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.059079][ T4626] usb 1-1: USB disconnect, device number 4 [ 173.168201][ T4616] usb 2-1: Using ep0 maxpacket: 32 [ 173.388369][ T4616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.406472][ T4616] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.426153][ T4616] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 173.436295][ T4616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.485573][ T5402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.278'. [ 173.544498][ T4616] usb 2-1: config 0 descriptor?? [ 173.565046][ T5402] netlink: 80 bytes leftover after parsing attributes in process `syz.2.278'. [ 173.863260][ T4616] usb 2-1: USB disconnect, device number 9 [ 178.495281][ T5428] tipc: Enabling of bearer rejected, failed to enable media [ 179.300291][ T5448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 182.013577][ T5462] loop0: detected capacity change from 0 to 512 [ 183.075672][ T5462] EXT4-fs (loop0): Test dummy encryption mode enabled [ 183.161928][ T5471] loop4: detected capacity change from 0 to 256 [ 183.167865][ T5462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.517264][ T5462] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.292: bad orphan inode 131083 [ 183.565965][ T5477] loop2: detected capacity change from 0 to 128 [ 183.682133][ T5462] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 184.379990][ T5481] netlink: 256 bytes leftover after parsing attributes in process `syz.3.297'. [ 184.389386][ T5481] unsupported nlmsg_type 40 [ 185.562476][ T5491] tipc: Enabling of bearer rejected, failed to enable media [ 185.893066][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 186.866882][ T4424] Bluetooth: hci1: command 0x0406 tx timeout [ 186.873432][ T4424] Bluetooth: hci0: command 0x0406 tx timeout [ 186.928200][ T4424] Bluetooth: hci3: command 0x0406 tx timeout [ 186.956144][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 187.020875][ T5525] device syzkaller0 entered promiscuous mode [ 189.944882][ T5543] loop3: detected capacity change from 0 to 32768 [ 190.278468][ T4623] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.736338][ T5543] XFS (loop3): Mounting V5 Filesystem [ 191.018772][ T4623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.110405][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 191.914179][ T4623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.972036][ T5572] tipc: Enabling of bearer rejected, failed to enable media [ 191.983344][ T5572] device syzkaller0 entered promiscuous mode [ 192.014948][ T5543] XFS (loop3): Ending clean mount [ 192.090404][ T5543] XFS (loop3): Quotacheck needed: Please wait. [ 192.095932][ T4623] usb 2-1: string descriptor 0 read error: -71 [ 192.108933][ T4623] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.153129][ T4623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.208023][ T4623] usb 2-1: can't set config #1, error -71 [ 192.378805][ T4623] usb 2-1: USB disconnect, device number 10 [ 192.758166][ T5543] XFS (loop3): Quotacheck: Done. [ 193.147684][ T4183] XFS (loop3): Unmounting Filesystem [ 194.362145][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.900158][ T5600] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 196.850692][ T5605] loop2: detected capacity change from 0 to 512 [ 196.910789][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 197.133043][ T5605] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.271666][ T5605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.634866][ T5605] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.326: bad orphan inode 131083 [ 197.699392][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 197.725654][ T5617] loop3: detected capacity change from 0 to 256 [ 197.794166][ T5620] loop4: detected capacity change from 0 to 2048 [ 197.880915][ T5620] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 197.901866][ T5620] UDF-fs: Scanning with blocksize 512 failed [ 197.943252][ T5620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.032898][ T4623] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.448491][ T4623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.471548][ T4623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.598450][ T4623] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.617731][ T4623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.672092][ T4623] usb 2-1: SerialNumber: syz [ 199.641420][ T4623] usb 2-1: 0:2 : does not exist [ 199.668362][ T4623] usb 2-1: unit 5 not found! [ 199.727472][ T5620] ODEBUG: Out of memory. ODEBUG disabled [ 199.751399][ T4623] usb 2-1: USB disconnect, device number 11 [ 199.982201][ T5620] syz.4.329 (5620): drop_caches: 2 [ 200.972949][ T5644] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 201.065732][ T5650] loop2: detected capacity change from 0 to 2048 [ 201.112799][ T5650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.199932][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 202.041213][ T5664] loop0: detected capacity change from 0 to 256 [ 202.889871][ T5672] device syzkaller0 entered promiscuous mode [ 204.415794][ T5688] tipc: Enabling of bearer rejected, failed to enable media [ 204.558191][ T4623] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.599085][ T5691] device syzkaller0 entered promiscuous mode [ 204.901636][ T5693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 204.918351][ T4623] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.930671][ T4623] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.018494][ T4623] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.045201][ T4623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.098163][ T4623] usb 4-1: SerialNumber: syz [ 205.344931][ T5698] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 205.407340][ T5700] loop0: detected capacity change from 0 to 256 [ 205.444751][ T5702] loop2: detected capacity change from 0 to 128 [ 205.470264][ T4623] usb 4-1: 0:2 : does not exist [ 205.475170][ T4623] usb 4-1: unit 5 not found! [ 205.494328][ T4623] usb 4-1: USB disconnect, device number 16 [ 205.898617][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.268216][ T4295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.448142][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 207.654545][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.978649][ T4295] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 207.987311][ T4295] usb 1-1: config 0 has no interface number 0 [ 207.995472][ T4295] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 208.008538][ T5731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 208.017725][ T4295] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 208.028251][ T4295] usb 1-1: config 0 interface 88 has no altsetting 0 [ 212.598184][ T4295] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 212.607306][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 212.630339][ T5745] loop2: detected capacity change from 0 to 256 [ 212.639970][ T5743] tipc: Enabling of bearer rejected, failed to enable media [ 212.797962][ T4295] usb 1-1: config 0 descriptor?? [ 212.845989][ T5753] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 212.978526][ T4295] usb 1-1: can't set config #0, error -71 [ 213.724371][ T4295] usb 1-1: USB disconnect, device number 5 [ 215.478519][ T5781] loop4: detected capacity change from 0 to 4096 [ 215.540696][ T5781] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 216.138165][ T4290] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.249573][ T4290] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 218.099899][ T4290] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 218.315561][ T4290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.338544][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.628450][ T4290] usb 2-1: USB disconnect, device number 12 [ 219.966057][ T5805] tipc: Enabling of bearer rejected, failed to enable media [ 220.188276][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 221.041267][ T5827] device syzkaller0 entered promiscuous mode [ 221.844390][ T5825] loop0: detected capacity change from 0 to 32768 [ 221.974736][ T5825] (syz.0.387,5825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.988274][ T5838] loop3: detected capacity change from 0 to 2048 [ 222.028656][ T5825] (syz.0.387,5825,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.032649][ T5840] loop4: detected capacity change from 0 to 128 [ 222.050666][ T5838] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 222.076859][ T5838] UDF-fs: Scanning with blocksize 512 failed [ 222.124608][ T5838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.136726][ T5825] JBD2: Ignoring recovery information on journal [ 222.155295][ T5840] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.280919][ T5840] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.420514][ T5825] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.438710][ T5838] syz.3.390 (5838): drop_caches: 2 [ 223.606400][ T5854] device syzkaller0 entered promiscuous mode [ 223.962496][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 224.599295][ T5848] loop2: detected capacity change from 0 to 40427 [ 224.728999][ T5848] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 224.844488][ T5866] loop3: detected capacity change from 0 to 2048 [ 224.938822][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 225.030344][ T5866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.123145][ T5871] tipc: Enabling of bearer rejected, failed to enable media [ 225.177429][ T5871] device syzkaller0 entered promiscuous mode [ 225.757114][ T5876] device syzkaller0 entered promiscuous mode [ 226.174986][ T5882] tipc: Started in network mode [ 226.204967][ T5882] tipc: Node identity 3effe18203ff, cluster identity 4711 [ 226.217289][ T5882] tipc: Enabled bearer , priority 0 [ 226.246808][ T5882] device syzkaller0 entered promiscuous mode [ 226.253952][ T5883] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 226.302371][ T5884] tipc: Resetting bearer [ 226.352054][ T5881] tipc: Resetting bearer [ 226.511182][ T5881] tipc: Disabling bearer [ 226.736149][ T5890] device syzkaller0 entered promiscuous mode [ 227.129804][ T5900] overlayfs: overlapping lowerdir path [ 229.906813][ T5936] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 230.245658][ T5939] loop4: detected capacity change from 0 to 128 [ 230.632654][ T5947] loop1: detected capacity change from 0 to 2048 [ 230.717137][ T5947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.487625][ T5942] loop4: detected capacity change from 0 to 32768 [ 231.701904][ T5942] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 231.770009][ T26] audit: type=1800 audit(1760574305.748:5): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=9553 res=0 errno=0 [ 231.900572][ T26] audit: type=1804 audit(1760574305.878:6): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.421" name="/newroot/85/file1/file1" dev="loop4" ino=9553 res=1 errno=0 [ 232.431781][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 232.445376][ T5968] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 232.980583][ T5981] overlayfs: overlapping lowerdir path [ 233.334088][ T5987] loop4: detected capacity change from 0 to 128 [ 234.053913][ T5998] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 234.296840][ T5996] loop1: detected capacity change from 0 to 2048 [ 234.351180][ T5996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.732846][ T6007] loop1: detected capacity change from 0 to 512 [ 235.746556][ T6007] EXT4-fs (loop1): Ignoring removed bh option [ 235.757720][ T6007] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 235.771841][ T6007] EXT4-fs (loop1): orphan cleanup on readonly fs [ 235.879416][ T6007] EXT4-fs (loop1): 1 truncate cleaned up [ 235.885524][ T6007] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 237.086204][ T6016] netlink: 'syz.2.439': attribute type 13 has an invalid length. [ 237.870419][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.878897][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.328240][ T4226] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.578180][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 238.708294][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.724898][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.746304][ T4226] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 238.755594][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.775365][ T4226] usb 2-1: config 0 descriptor?? [ 239.010912][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.062125][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.391876][ T4226] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 239.405323][ T6042] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 239.707152][ T21] usb 2-1: USB disconnect, device number 13 [ 239.758723][ T6016] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.772248][ T6016] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.782519][ T6016] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.791989][ T6016] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.816921][ T6045] fido_id[6045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 240.267995][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 241.342159][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 241.438077][ T6062] device syzkaller0 entered promiscuous mode [ 241.563902][ T6070] overlayfs: overlapping lowerdir path [ 243.146031][ T6085] loop0: detected capacity change from 0 to 256 [ 243.589440][ T6087] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 245.945070][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 246.420229][ T6108] device syzkaller0 entered promiscuous mode [ 247.812418][ T6119] tipc: Started in network mode [ 247.827660][ T6119] tipc: Node identity fe9ed1b8715c, cluster identity 4711 [ 247.883221][ T6119] tipc: Enabled bearer , priority 0 [ 247.937655][ T6119] tipc: Resetting bearer [ 247.999113][ T6123] device syzkaller0 entered promiscuous mode [ 248.014065][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 248.054733][ T6118] tipc: Resetting bearer [ 248.068336][ T6121] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 248.104405][ T6118] tipc: Disabling bearer [ 248.288246][ T4247] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.479276][ T6117] loop3: detected capacity change from 0 to 32768 [ 248.519764][ T6117] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 248.531275][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 248.562382][ T6117] BTRFS info (device loop3): using free space tree [ 248.569464][ T4247] usb 2-1: Using ep0 maxpacket: 32 [ 248.601199][ T6117] BTRFS info (device loop3): has skinny extents [ 248.699701][ T4247] usb 2-1: config 7 has an invalid interface number: 150 but max is 0 [ 248.726980][ T4247] usb 2-1: config 7 has no interface number 0 [ 248.753659][ T4247] usb 2-1: config 7 interface 150 has no altsetting 0 [ 249.004328][ T6117] BTRFS info (device loop3): enabling ssd optimizations [ 249.800847][ T4247] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=d3.ae [ 249.810817][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.823098][ T4247] usb 2-1: Product: syz [ 249.827405][ T4247] usb 2-1: Manufacturer: syz [ 249.832470][ T4247] usb 2-1: SerialNumber: syz [ 249.859045][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 249.921572][ T6117] BTRFS error (device loop3): target device is invalid! [ 250.105706][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 250.205044][ T4247] usb 2-1: USB disconnect, device number 14 [ 250.297132][ T4247] ================================================================== [ 250.305725][ T4247] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0 [ 250.312977][ T4247] Read of size 8 at addr ffff888058815960 by task kworker/0:6/4247 [ 250.320889][ T4247] [ 250.323243][ T4247] CPU: 0 PID: 4247 Comm: kworker/0:6 Not tainted syzkaller #0 [ 250.330739][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.340824][ T4247] Workqueue: usb_hub_wq hub_event [ 250.345901][ T4247] Call Trace: [ 250.349216][ T4247] [ 250.352166][ T4247] dump_stack_lvl+0x168/0x230 [ 250.356882][ T4247] ? show_regs_print_info+0x20/0x20 [ 250.362129][ T4247] ? load_image+0x3b0/0x3b0 [ 250.366684][ T4247] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 250.372098][ T4247] print_address_description+0x60/0x2d0 [ 250.377688][ T4247] ? hdm_disconnect+0x109/0x1c0 [ 250.382576][ T4247] kasan_report+0xdf/0x130 [ 250.387025][ T4247] ? hdm_disconnect+0x109/0x1c0 [ 250.391900][ T4247] hdm_disconnect+0x109/0x1c0 [ 250.396584][ T4247] usb_unbind_interface+0x1ee/0x860 [ 250.401788][ T4247] ? usb_driver_release_interface+0x1b0/0x1b0 [ 250.407854][ T4247] device_release_driver_internal+0x4b4/0x750 [ 250.413942][ T4247] bus_remove_device+0x2e2/0x400 [ 250.418902][ T4247] device_del+0x628/0xa70 [ 250.423240][ T4247] ? kill_device+0x160/0x160 [ 250.427828][ T4247] ? lock_chain_count+0x20/0x20 [ 250.432689][ T4247] ? mutex_lock_io_nested+0x60/0x60 [ 250.437889][ T4247] ? _raw_spin_lock_irq+0xab/0xe0 [ 250.442917][ T4247] usb_disable_device+0x3e2/0x890 [ 250.447951][ T4247] usb_disconnect+0x348/0x8a0 [ 250.452639][ T4247] hub_event+0x1e9f/0x5560 [ 250.457097][ T4247] ? hub_post_resume+0x120/0x120 [ 250.462036][ T4247] ? read_lock_is_recursive+0x10/0x10 [ 250.467449][ T4247] ? _raw_spin_unlock_irq+0x1f/0x40 [ 250.472739][ T4247] process_one_work+0x863/0x1000 [ 250.477713][ T4247] ? worker_detach_from_pool+0x240/0x240 [ 250.483518][ T4247] ? lockdep_hardirqs_off+0x70/0x100 [ 250.488822][ T4247] ? _raw_spin_lock_irq+0xab/0xe0 [ 250.493869][ T4247] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 250.499244][ T4247] ? wq_worker_running+0x97/0x170 [ 250.504274][ T4247] worker_thread+0xdca/0x12a0 [ 250.509099][ T4247] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 250.515004][ T4247] ? lockdep_hardirqs_on+0x94/0x140 [ 250.520221][ T4247] ? lockdep_hardirqs_on+0x94/0x140 [ 250.525426][ T4247] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 250.531553][ T4247] kthread+0x436/0x520 [ 250.535634][ T4247] ? rcu_lock_release+0x20/0x20 [ 250.540481][ T4247] ? kthread_blkcg+0xd0/0xd0 [ 250.545076][ T4247] ret_from_fork+0x1f/0x30 [ 250.549509][ T4247] [ 250.552528][ T4247] [ 250.554856][ T4247] Allocated by task 4247: [ 250.559197][ T4247] __kasan_kmalloc+0xb5/0xf0 [ 250.563913][ T4247] hdm_probe+0x8f/0x13d0 [ 250.568162][ T4247] usb_probe_interface+0x5a0/0xaf0 [ 250.573298][ T4247] really_probe+0x284/0xc80 [ 250.577809][ T4247] __driver_probe_device+0x18c/0x330 [ 250.583114][ T4247] driver_probe_device+0x4f/0x420 [ 250.588141][ T4247] __device_attach_driver+0x2b0/0x500 [ 250.593516][ T4247] bus_for_each_drv+0x175/0x200 [ 250.598363][ T4247] __device_attach+0x29b/0x460 [ 250.603126][ T4247] bus_probe_device+0xbc/0x1e0 [ 250.608004][ T4247] device_add+0xa00/0xfb0 [ 250.612365][ T4247] usb_set_configuration+0x1991/0x1fd0 [ 250.617922][ T4247] usb_generic_driver_probe+0x89/0x150 [ 250.623386][ T4247] usb_probe_device+0x139/0x270 [ 250.628257][ T4247] really_probe+0x284/0xc80 [ 250.632813][ T4247] __driver_probe_device+0x18c/0x330 [ 250.638111][ T4247] driver_probe_device+0x4f/0x420 [ 250.643154][ T4247] __device_attach_driver+0x2b0/0x500 [ 250.648524][ T4247] bus_for_each_drv+0x175/0x200 [ 250.653373][ T4247] __device_attach+0x29b/0x460 [ 250.658134][ T4247] bus_probe_device+0xbc/0x1e0 [ 250.662890][ T4247] device_add+0xa00/0xfb0 [ 250.667213][ T4247] usb_new_device+0xd53/0x1640 [ 250.671971][ T4247] hub_event+0x2dd9/0x5560 [ 250.676404][ T4247] process_one_work+0x863/0x1000 [ 250.681445][ T4247] worker_thread+0xaa8/0x12a0 [ 250.686128][ T4247] kthread+0x436/0x520 [ 250.690204][ T4247] ret_from_fork+0x1f/0x30 [ 250.694612][ T4247] [ 250.697011][ T4247] Freed by task 4247: [ 250.700976][ T4247] kasan_set_track+0x4b/0x70 [ 250.705558][ T4247] kasan_set_free_info+0x1f/0x40 [ 250.710507][ T4247] ____kasan_slab_free+0xd5/0x110 [ 250.715524][ T4247] slab_free_freelist_hook+0xea/0x170 [ 250.720896][ T4247] kfree+0xef/0x2a0 [ 250.724694][ T4247] device_release+0x92/0x1c0 [ 250.729278][ T4247] kobject_put+0x21d/0x460 [ 250.733690][ T4247] hdm_disconnect+0xef/0x1c0 [ 250.738273][ T4247] usb_unbind_interface+0x1ee/0x860 [ 250.743464][ T4247] device_release_driver_internal+0x4b4/0x750 [ 250.749554][ T4247] bus_remove_device+0x2e2/0x400 [ 250.754480][ T4247] device_del+0x628/0xa70 [ 250.758815][ T4247] usb_disable_device+0x3e2/0x890 [ 250.763870][ T4247] usb_disconnect+0x348/0x8a0 [ 250.768556][ T4247] hub_event+0x1e9f/0x5560 [ 250.772980][ T4247] process_one_work+0x863/0x1000 [ 250.777918][ T4247] worker_thread+0xdca/0x12a0 [ 250.782585][ T4247] kthread+0x436/0x520 [ 250.786658][ T4247] ret_from_fork+0x1f/0x30 [ 250.791088][ T4247] [ 250.793416][ T4247] The buggy address belongs to the object at ffff888058814000 [ 250.793416][ T4247] which belongs to the cache kmalloc-8k of size 8192 [ 250.807457][ T4247] The buggy address is located 6496 bytes inside of [ 250.807457][ T4247] 8192-byte region [ffff888058814000, ffff888058816000) [ 250.820914][ T4247] The buggy address belongs to the page: [ 250.826536][ T4247] page:ffffea0001620400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58810 [ 250.836699][ T4247] head:ffffea0001620400 order:3 compound_mapcount:0 compound_pincount:0 [ 250.845015][ T4247] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 250.852991][ T4247] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842280 [ 250.861572][ T4247] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 250.870146][ T4247] page dumped because: kasan: bad access detected [ 250.876553][ T4247] page_owner tracks the page as allocated [ 250.882258][ T4247] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6132, ts 248341444703, free_ts 248319177612 [ 250.902929][ T4247] get_page_from_freelist+0x1b77/0x1c60 [ 250.908482][ T4247] __alloc_pages+0x1e1/0x470 [ 250.913064][ T4247] new_slab+0xc0/0x4b0 [ 250.917142][ T4247] ___slab_alloc+0x81e/0xdf0 [ 250.921724][ T4247] __kmalloc_node+0x200/0x3b0 [ 250.926406][ T4247] kvmalloc_node+0x84/0x130 [ 250.930903][ T4247] bpf_check+0x147/0xf090 [ 250.935226][ T4247] bpf_prog_load+0x1043/0x1550 [ 250.939983][ T4247] __sys_bpf+0x4c2/0x670 [ 250.944233][ T4247] __x64_sys_bpf+0x78/0x90 [ 250.948643][ T4247] do_syscall_64+0x4c/0xa0 [ 250.953060][ T4247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.958950][ T4247] page last free stack trace: [ 250.963644][ T4247] free_unref_page_prepare+0x637/0x6c0 [ 250.969129][ T4247] free_unref_page+0x94/0x280 [ 250.973800][ T4247] __unfreeze_partials+0x1a5/0x200 [ 250.978901][ T4247] put_cpu_partial+0x12d/0x190 [ 250.983662][ T4247] qlist_free_all+0x35/0x90 [ 250.988160][ T4247] kasan_quarantine_reduce+0x150/0x160 [ 250.993612][ T4247] __kasan_slab_alloc+0x2f/0xd0 [ 250.998459][ T4247] slab_post_alloc_hook+0x4c/0x380 [ 251.003567][ T4247] kmem_cache_alloc+0x100/0x290 [ 251.008430][ T4247] getname_flags+0xb5/0x500 [ 251.012927][ T4247] do_sys_openat2+0xcf/0x4a0 [ 251.017512][ T4247] __x64_sys_openat+0x135/0x160 [ 251.022377][ T4247] do_syscall_64+0x4c/0xa0 [ 251.026787][ T4247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.032679][ T4247] [ 251.034993][ T4247] Memory state around the buggy address: [ 251.040611][ T4247] ffff888058815800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.048673][ T4247] ffff888058815880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.056749][ T4247] >ffff888058815900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.064803][ T4247] ^ [ 251.071990][ T4247] ffff888058815980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.080047][ T4247] ffff888058815a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.088101][ T4247] ================================================================== [ 251.096170][ T4247] Disabling lock debugging due to kernel taint [ 251.466133][ T4247] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.473393][ T4247] CPU: 0 PID: 4247 Comm: kworker/0:6 Tainted: G B syzkaller #0 [ 251.482262][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.492584][ T4247] Workqueue: usb_hub_wq hub_event [ 251.497626][ T4247] Call Trace: [ 251.500914][ T4247] [ 251.503865][ T4247] dump_stack_lvl+0x168/0x230 [ 251.508735][ T4247] ? show_regs_print_info+0x20/0x20 [ 251.514871][ T4247] ? load_image+0x3b0/0x3b0 [ 251.519969][ T4247] panic+0x2c9/0x7f0 [ 251.523914][ T4247] ? bpf_jit_dump+0xd0/0xd0 [ 251.528464][ T4247] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 251.534392][ T4247] ? _raw_spin_unlock+0x40/0x40 [ 251.539267][ T4247] ? hdm_disconnect+0x109/0x1c0 [ 251.544123][ T4247] check_panic_on_warn+0x80/0xa0 [ 251.549068][ T4247] ? hdm_disconnect+0x109/0x1c0 [ 251.553975][ T4247] end_report+0x6d/0xf0 [ 251.558157][ T4247] kasan_report+0x102/0x130 [ 251.562762][ T4247] ? hdm_disconnect+0x109/0x1c0 [ 251.567630][ T4247] hdm_disconnect+0x109/0x1c0 [ 251.572324][ T4247] usb_unbind_interface+0x1ee/0x860 [ 251.577552][ T4247] ? usb_driver_release_interface+0x1b0/0x1b0 [ 251.583635][ T4247] device_release_driver_internal+0x4b4/0x750 [ 251.589732][ T4247] bus_remove_device+0x2e2/0x400 [ 251.594673][ T4247] device_del+0x628/0xa70 [ 251.599007][ T4247] ? kill_device+0x160/0x160 [ 251.603628][ T4247] ? lock_chain_count+0x20/0x20 [ 251.608571][ T4247] ? mutex_lock_io_nested+0x60/0x60 [ 251.613804][ T4247] ? _raw_spin_lock_irq+0xab/0xe0 [ 251.618834][ T4247] usb_disable_device+0x3e2/0x890 [ 251.623866][ T4247] usb_disconnect+0x348/0x8a0 [ 251.628551][ T4247] hub_event+0x1e9f/0x5560 [ 251.633009][ T4247] ? hub_post_resume+0x120/0x120 [ 251.637956][ T4247] ? read_lock_is_recursive+0x10/0x10 [ 251.643341][ T4247] ? _raw_spin_unlock_irq+0x1f/0x40 [ 251.648548][ T4247] process_one_work+0x863/0x1000 [ 251.653500][ T4247] ? worker_detach_from_pool+0x240/0x240 [ 251.659165][ T4247] ? lockdep_hardirqs_off+0x70/0x100 [ 251.664462][ T4247] ? _raw_spin_lock_irq+0xab/0xe0 [ 251.669490][ T4247] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 251.674895][ T4247] ? wq_worker_running+0x97/0x170 [ 251.679931][ T4247] worker_thread+0xdca/0x12a0 [ 251.684643][ T4247] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 251.690656][ T4247] ? lockdep_hardirqs_on+0x94/0x140 [ 251.695886][ T4247] ? lockdep_hardirqs_on+0x94/0x140 [ 251.701101][ T4247] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 251.708054][ T4247] kthread+0x436/0x520 [ 251.712136][ T4247] ? rcu_lock_release+0x20/0x20 [ 251.716985][ T4247] ? kthread_blkcg+0xd0/0xd0 [ 251.721586][ T4247] ret_from_fork+0x1f/0x30 [ 251.726039][ T4247] [ 251.729339][ T4247] Kernel Offset: disabled [ 251.733688][ T4247] Rebooting in 86400 seconds..