last executing test programs: 6.927258273s ago: executing program 1 (id=310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0xff14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x40e2) 5.732212031s ago: executing program 1 (id=313): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x244046, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x2, 0x7c2, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000018c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xabf, 0x8}, 0xc) 4.778384819s ago: executing program 1 (id=316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001340)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30ef06f3aed14d4a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d862b9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e0000000000000000ffffffff00002000002090666159e3ef5f7244cf4ec3d7814c0c934f44e200219e6dd7bc10397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac1b3fca19fc0a9e346a78c12e5c3c6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027ec3d1d5b4b013c503b863b560688d94de886d4c83a3498142d124bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af16aa9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e314f57d9507dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28ed5009fe1a7c569ce740078bf1c7389a6ba0f89257f06ac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdce943f895dd45045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bda8847e37f3c3d49018ecb97ce1a4a6cbd7c3ec5029d938b18a206f7f9bf678dfef1758d6a1ec0000000000000000000000000000003454686fbafb46bef43449725b85cfd3547fa97111e037819af7a0c21b15f4c3e3e4b64e130528d055cfc5fe1fe26307ea8e352cd098d8eac5d0ba0514556a9ca4534518f51bd41f43f21afe183a6233650514ca340a899a28d7784b747af027e7c986b1e66d0ea260b9a4bc4e6da64d984dc79646555d58c88ee5bebb86c6c61c4cd5458a0b8e14001871c6f8e87058fa03b94978e178f378a9df1598cde396dee051a2db4c5021a004cf7e0e7f6f83f79260f0c6f472db7223120c981aa71de8bae8a063fa4f6a253b3d63d1f8852f223cabe0c7450988ed51b1f974569f5e583048920c4fe754fec68bf9254dbfbcfbc748970d1dcaf0f2877ec7a217eb59145f09032286e79bb0c6b776c39567511e799415446861164d3c74f151fde94826b9a44628d8bcb3655dd676bedfca221da21c53a9e3f7ddb0397be04826b3d8fd1ba2152bcb9cce2886507a5e050f012fe2c0288660509b94fea538d713849010f71dc48db8e5c4d1db83286a9bddcd6c537c243fc707900c42f453a0965e0e788840f304df6a54024fce85669fb41800"/1141, 0x54e676f5, 0x2404c81d, 0x0, 0xfffffffffffffdca) r1 = dup(r0) write$P9_RRENAME(r1, 0x0, 0x0) 4.702098126s ago: executing program 1 (id=318): mlockall(0x1) socket$inet6(0xa, 0xa, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) fcntl$getown(r0, 0x9) 3.092477677s ago: executing program 0 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=@newspdinfo={0x1c, 0x24, 0x321, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 2.971082337s ago: executing program 0 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 2.827595899s ago: executing program 0 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa}, 0x48) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.723043008s ago: executing program 0 (id=338): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0x6, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.20547791s ago: executing program 4 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa28adf83435000000000000004d22435cb9f1ed00000000000000000000000000000000000000000000000000000000000000000004000000000000000000"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff01000000000000000000000000ff"], 0xb8}}, 0x0) 2.055094732s ago: executing program 4 (id=347): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x7709, &(0x7f0000001b80)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x00\x00\x00\x00\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x17Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\x01\x00\x00\x00\x01\x00\x00\x00\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xed\x01\x01\x00\x00\x00\x00\x00\x00\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3;\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a&Df8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x00\xff\x7f\x00') r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8979) sendfile(r3, r4, 0x0, 0x103e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000580), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="d29110cafb694c342792377d4fc0e14db4", 0x11, 0xfffffffffffffffd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff91, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000001800010a00000000000000000400000008000c"], 0x98}}, 0x0) 1.828136781s ago: executing program 0 (id=349): quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) 1.780129485s ago: executing program 2 (id=350): mount$fuse(0x0, 0x0, 0x0, 0x884400, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3a) 1.747859377s ago: executing program 4 (id=352): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 1.696015732s ago: executing program 2 (id=353): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 1.646987366s ago: executing program 0 (id=354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x4, 0x40, 0x10, 0xf3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0x72, &(0x7f0000000200)=@string={0x72, 0x3, "75ac59c9c9c68dee0b24241fb8c476de680381246ac06307aa08ed85bec43f1ce4037ba75c0e785fdeb2aa393312860101aad01d4d04f270b4dfe94af8e6854527985a2ee022551aa710ed3e2a8ce819199c608dfb635ecc1ef89c84fb24b6d7a1a8e76b5cc3900aa5e9a85dc7686227"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0a}}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000800)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x20, 0x5, 0x26, {0x26, 0xc, "0e98be246ffac8cadef7ecb87cd90ea2489be8d9567cfc548a5410a64a86e69e53d9c89e"}}, 0x0, &(0x7f0000000dc0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "996695b2484a719bb479a6098bc11d67"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x46, 0x1f, 0x7, 0x2, 0xd}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x2, 0x6, 0xbd, "765b24ec", "da97633b"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x4b, 0x2b, 0xb8, 0x10, 0x675, 0x1688, 0xe193, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe8, 0xba, 0x5c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) 1.629375997s ago: executing program 2 (id=355): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d099010203010902360001000000000904"], 0x0) 1.239226149s ago: executing program 1 (id=356): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) 1.239107369s ago: executing program 1 (id=357): mlockall(0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_buf(r2, 0x29, 0x2f, 0x0, 0x0) close(0xffffffffffffffff) 1.139923707s ago: executing program 3 (id=358): timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) write$tcp_mem(r1, &(0x7f0000000280), 0x48) close(r1) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.064770703s ago: executing program 2 (id=359): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0x6, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 728.073551ms ago: executing program 3 (id=360): mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) fchown(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) connect$netlink(r1, &(0x7f0000000000)=@kern={0xa}, 0x2f) 699.127403ms ago: executing program 3 (id=361): llistxattr(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 650.426907ms ago: executing program 3 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34029, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 571.945714ms ago: executing program 3 (id=363): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000180)}, 0x10) 571.669104ms ago: executing program 3 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x4, &(0x7f00000007c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0xa00}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)={@id={0x2, 0x8, @b}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) 559.816314ms ago: executing program 4 (id=365): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 490.85048ms ago: executing program 4 (id=366): socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 171.083397ms ago: executing program 4 (id=367): userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce2208"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 169.934577ms ago: executing program 2 (id=368): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) 0s ago: executing program 2 (id=369): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x6008004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x702}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.65' (ED25519) to the list of known hosts. syzkaller login: [ 36.536859][ T4010] cgroup: Unknown subsys name 'net' [ 36.812316][ T4010] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.128241][ T4010] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.580424][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 38.585161][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 38.624181][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 38.689175][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.691255][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.693879][ T4022] device bridge_slave_0 entered promiscuous mode [ 38.718456][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.720341][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.722843][ T4022] device bridge_slave_1 entered promiscuous mode [ 38.758742][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.760634][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.763289][ T4027] device bridge_slave_0 entered promiscuous mode [ 38.775304][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.777469][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.780112][ T4028] device bridge_slave_0 entered promiscuous mode [ 38.791132][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.793163][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.798455][ T4027] device bridge_slave_1 entered promiscuous mode [ 38.802904][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.804847][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.807806][ T4028] device bridge_slave_1 entered promiscuous mode [ 38.820522][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.844176][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 38.853018][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.869094][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.873142][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.891461][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.896226][ T4022] team0: Port device team_slave_0 added [ 38.901403][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.904773][ T4022] team0: Port device team_slave_1 added [ 38.942465][ T4028] team0: Port device team_slave_0 added [ 38.946850][ T4021] chnl_net:caif_netlink_parms(): no params data found [ 38.969566][ T4028] team0: Port device team_slave_1 added [ 38.988066][ T4027] team0: Port device team_slave_0 added [ 38.990398][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.992237][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.000518][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.015601][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.017596][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.024497][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.029049][ T4027] team0: Port device team_slave_1 added [ 39.031165][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.033031][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.040173][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.044009][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.045952][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.052753][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.064480][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.066802][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.069347][ T4032] device bridge_slave_0 entered promiscuous mode [ 39.098564][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.100616][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.103279][ T4032] device bridge_slave_1 entered promiscuous mode [ 39.112027][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.113921][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.120986][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.153392][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.155122][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.162307][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.217609][ T4028] device hsr_slave_0 entered promiscuous mode [ 39.277061][ T4028] device hsr_slave_1 entered promiscuous mode [ 39.343312][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.348117][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.350114][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.352789][ T4021] device bridge_slave_0 entered promiscuous mode [ 39.409901][ T4022] device hsr_slave_0 entered promiscuous mode [ 39.445799][ T4022] device hsr_slave_1 entered promiscuous mode [ 39.505540][ T4022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.507840][ T4022] Cannot create hsr debugfs directory [ 39.527670][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.530297][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.532192][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.534961][ T4021] device bridge_slave_1 entered promiscuous mode [ 39.637469][ T4027] device hsr_slave_0 entered promiscuous mode [ 39.675822][ T4027] device hsr_slave_1 entered promiscuous mode [ 39.715563][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.717756][ T4027] Cannot create hsr debugfs directory [ 39.720759][ T4032] team0: Port device team_slave_0 added [ 39.740772][ T4021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.744110][ T4032] team0: Port device team_slave_1 added [ 39.760324][ T4021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.796937][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.798917][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.806124][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.812149][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.813991][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.821331][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.869922][ T4021] team0: Port device team_slave_0 added [ 39.886711][ T4021] team0: Port device team_slave_1 added [ 39.977481][ T4032] device hsr_slave_0 entered promiscuous mode [ 40.015802][ T4032] device hsr_slave_1 entered promiscuous mode [ 40.065549][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.067730][ T4032] Cannot create hsr debugfs directory [ 40.105102][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.107498][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.114265][ T4021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.125221][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.127427][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.133950][ T4021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.177029][ T4022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.238668][ T4022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.327303][ T4021] device hsr_slave_0 entered promiscuous mode [ 40.346209][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 40.355544][ T3605] Bluetooth: hci2: command 0x0409 tx timeout [ 40.357629][ T3605] Bluetooth: hci0: command 0x0409 tx timeout [ 40.365771][ T4021] device hsr_slave_1 entered promiscuous mode [ 40.415508][ T4021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.417606][ T4021] Cannot create hsr debugfs directory [ 40.419593][ T4022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.425534][ T1960] Bluetooth: hci4: command 0x0409 tx timeout [ 40.425541][ T3605] Bluetooth: hci3: command 0x0409 tx timeout [ 40.457291][ T4022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.560881][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.597377][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.650449][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.699393][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.829157][ T4027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.869764][ T4027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.927947][ T4027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.957939][ T4027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.008759][ T4032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.067522][ T4032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.117420][ T4032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.157700][ T4032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.268707][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.313850][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.319438][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.322904][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.334283][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.340790][ T4021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.377783][ T4021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.417630][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.420413][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.423229][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.425381][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.428683][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.437163][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.446754][ T4021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.478427][ T4021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.540513][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.551266][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.553856][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.556975][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.559609][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.562126][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.563976][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.566442][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.568942][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.571871][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.573820][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.576867][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.579617][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.582025][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.583857][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.586842][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.607414][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.610379][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.612808][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.616009][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.618960][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.621869][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.625075][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.642020][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.656977][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.659654][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.662592][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.665846][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.668915][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.671520][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.674450][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.677312][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.679803][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.682380][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.684938][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.686986][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.699304][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.713936][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.716824][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.719996][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.723157][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.726713][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.729322][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.731186][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.757709][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.776874][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.780500][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.783155][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.788091][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.790695][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.793258][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.803638][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.807195][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.810107][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.813238][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.816360][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.818998][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.821413][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.824270][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.828295][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.840601][ T4028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.843892][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.859998][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.862728][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.865303][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.869107][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.871630][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.874183][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.878374][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.880237][ T4072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.882558][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.885128][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.888383][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.890971][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.893332][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.895180][ T4072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.898065][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.908759][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.928084][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.930456][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.933173][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.937627][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.939964][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.956614][ T4021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.974585][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.980239][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.983107][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.999545][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.006004][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.028633][ T4032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.031507][ T4032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.042808][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.050895][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.053817][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.057360][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.060168][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.072080][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.077544][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.080264][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.082996][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.113043][ T4022] device veth0_vlan entered promiscuous mode [ 42.116216][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.118877][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.122898][ T4021] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.149184][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.151682][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.154170][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.159434][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.162006][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.163946][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.166967][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.169196][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.171328][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.174047][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.178106][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.179965][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.182243][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.185268][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.189180][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.194805][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.212578][ T4022] device veth1_vlan entered promiscuous mode [ 42.221008][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.223757][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.227145][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.230084][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.233088][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.236909][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.240747][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.243459][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.246578][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.254732][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.272165][ T4021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.276872][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.282666][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.285171][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.289224][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.291801][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.301238][ T4022] device veth0_macvtap entered promiscuous mode [ 42.306589][ T4022] device veth1_macvtap entered promiscuous mode [ 42.336567][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.339270][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.341953][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.344496][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.348856][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.351512][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.354113][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.379965][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.383835][ T4027] device veth0_vlan entered promiscuous mode [ 42.388601][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.391344][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.393570][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.399544][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.402625][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.405238][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.409773][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.418526][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.425757][ T4070] Bluetooth: hci0: command 0x041b tx timeout [ 42.427409][ T4070] Bluetooth: hci2: command 0x041b tx timeout [ 42.427559][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.429013][ T4070] Bluetooth: hci1: command 0x041b tx timeout [ 42.432619][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.435194][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.439151][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.442057][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.448251][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.450698][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.453124][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.455275][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.472039][ T4027] device veth1_vlan entered promiscuous mode [ 42.491787][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.494453][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.498953][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.501504][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.504187][ T4028] device veth0_vlan entered promiscuous mode [ 42.516881][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 42.518554][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 42.541497][ T4021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.549214][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.551700][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.554040][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.567280][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.569963][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.572013][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.577548][ T4028] device veth1_vlan entered promiscuous mode [ 42.619678][ T4032] device veth0_vlan entered promiscuous mode [ 42.621943][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.624397][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.634680][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.637628][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.640391][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.643012][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.646415][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.648684][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.652093][ T4027] device veth0_macvtap entered promiscuous mode [ 42.669394][ T4032] device veth1_vlan entered promiscuous mode [ 42.685121][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.687875][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.690345][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.692868][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.699411][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.702657][ T4027] device veth1_macvtap entered promiscuous mode [ 42.707054][ T4028] device veth0_macvtap entered promiscuous mode [ 42.711390][ T4028] device veth1_macvtap entered promiscuous mode [ 42.729696][ T585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.732018][ T585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.743714][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.750871][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.754846][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.771605][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.774502][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.778226][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.780834][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.784684][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.788908][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.791455][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.794009][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.797747][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.800210][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.802793][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.806387][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.809043][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.812447][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.815279][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.821131][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.830970][ T4032] device veth0_macvtap entered promiscuous mode [ 42.835019][ T585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.837008][ T4032] device veth1_macvtap entered promiscuous mode [ 42.839776][ T585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.841336][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.844726][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.849407][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.852239][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.856895][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.866169][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.868890][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.871484][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.874225][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.877701][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.880181][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.882738][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.890673][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.895927][ T4027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.898511][ T4027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.900660][ T4027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.902850][ T4027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.924485][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.929146][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.931753][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.936005][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.938745][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.941457][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.945291][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.973100][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.976654][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.979338][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.982039][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.984688][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.004090][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.011460][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.014006][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.019144][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.021866][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.024524][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.029574][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.033534][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.040875][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.043176][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.046206][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.066498][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.069403][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.078131][ T4021] device veth0_vlan entered promiscuous mode [ 43.084960][ T4021] device veth1_vlan entered promiscuous mode [ 43.091339][ T4032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.093603][ T4032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.097005][ T4032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.099178][ T4032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.125509][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.128199][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.130913][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.186021][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.188598][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.191061][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.211677][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.211749][ T4021] device veth0_macvtap entered promiscuous mode [ 43.213895][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.259984][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.262407][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.265068][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.288657][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.291966][ T4021] device veth1_macvtap entered promiscuous mode [ 43.334790][ T338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.337793][ T338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.363751][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.366719][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.382489][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.385235][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.397753][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.400668][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.403144][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.421013][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.423805][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.447580][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.452582][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.458403][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.460594][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.479478][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.497349][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.500251][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.517220][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.519351][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.521408][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.524146][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.533213][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.536570][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.539323][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.542030][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.545113][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.550608][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.554807][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.558095][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.560809][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.563627][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.599525][ T4021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.601829][ T4021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.604114][ T4021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.607263][ T4021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616677][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.628839][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.646219][ T585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.649320][ T585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.662216][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.664786][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.741348][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.743546][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.794168][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.809104][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.821949][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.825075][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.516405][ T4104] Bluetooth: hci1: command 0x040f tx timeout [ 44.518277][ T4104] Bluetooth: hci2: command 0x040f tx timeout [ 44.520645][ T4104] Bluetooth: hci0: command 0x040f tx timeout [ 44.595737][ T4104] Bluetooth: hci4: command 0x040f tx timeout [ 44.597528][ T4104] Bluetooth: hci3: command 0x040f tx timeout [ 45.365922][ T4130] ======================================================= [ 45.365922][ T4130] WARNING: The mand mount option has been deprecated and [ 45.365922][ T4130] and is ignored by this kernel. Remove the mand [ 45.365922][ T4130] option from the mount to silence this warning. [ 45.365922][ T4130] ======================================================= [ 46.586181][ T4104] Bluetooth: hci0: command 0x0419 tx timeout [ 46.588351][ T4104] Bluetooth: hci2: command 0x0419 tx timeout [ 46.590289][ T4104] Bluetooth: hci1: command 0x0419 tx timeout [ 46.665650][ T4104] Bluetooth: hci3: command 0x0419 tx timeout [ 46.667545][ T4104] Bluetooth: hci4: command 0x0419 tx timeout [ 46.743180][ T4132] loop0: detected capacity change from 0 to 32768 [ 46.914862][ T4132] XFS (loop0): Mounting V5 Filesystem [ 47.011856][ T4132] XFS (loop0): Ending clean mount [ 47.159394][ T4028] XFS (loop0): Unmounting Filesystem [ 49.243414][ T4206] tmpfs: Unknown parameter 'trans' [ 50.767213][ T4230] loop0: detected capacity change from 0 to 32768 [ 50.878340][ T4230] XFS (loop0): Mounting V5 Filesystem [ 50.967253][ T4230] XFS (loop0): Ending clean mount [ 51.046113][ T4028] XFS (loop0): Unmounting Filesystem [ 54.152659][ T4282] loop0: detected capacity change from 0 to 32768 [ 54.297197][ T4282] XFS (loop0): Mounting V5 Filesystem [ 54.414090][ T4282] XFS (loop0): Ending clean mount [ 54.568239][ T4028] XFS (loop0): Unmounting Filesystem [ 55.164881][ T3605] kernel write not supported for file 55/task/56/clear_refs (pid: 3605 comm: kworker/0:3) [ 56.478293][ T4360] 9pnet: Insufficient options for proto=fd [ 57.288052][ T4339] loop4: detected capacity change from 0 to 32768 [ 57.361402][ T4395] netlink: 9 bytes leftover after parsing attributes in process `syz.0.111'. [ 57.431112][ T4339] XFS (loop4): Mounting V5 Filesystem [ 57.860652][ T4339] XFS (loop4): Ending clean mount [ 58.071793][ T4021] XFS (loop4): Unmounting Filesystem [ 58.155721][ T4067] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.395520][ T4067] usb 1-1: Using ep0 maxpacket: 16 [ 58.516229][ T4067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.526274][ T4067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.532384][ T4067] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.544578][ T4067] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 58.551203][ T4067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.571739][ T4067] usb 1-1: config 0 descriptor?? [ 58.772066][ T4434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.878948][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 58.901349][ T4437] MPTCP: addr_signal error, rm_addr=1 [ 59.059280][ T4067] nti 0003:0757:0A00.0001: item fetching failed at offset 2/5 [ 59.063299][ T4067] nti: probe of 0003:0757:0A00.0001 failed with error -22 [ 59.144828][ T4447] loop2: detected capacity change from 0 to 1024 [ 60.058605][ T1960] usb 1-1: USB disconnect, device number 2 [ 60.264522][ T4463] udc-core: couldn't find an available UDC or it's busy [ 60.280018][ T4463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.316667][ T4467] process 'syz.3.137' launched './file0/file0' with NULL argv: empty string added [ 60.493037][ T4463] udc-core: couldn't find an available UDC or it's busy [ 60.494973][ T4463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.595279][ T4458] udc-core: couldn't find an available UDC or it's busy [ 60.598076][ T4458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.892867][ T4484] binder: 4483:4484 Acquire 1 refcount change on invalid ref 0 ret -22 [ 60.903325][ T4484] binder: 4483:4484 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 61.194414][ T26] audit: type=1326 audit(61.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.147" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2075de8 code=0x0 [ 62.217343][ T4499] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 62.627441][ T4499] capability: warning: `syz.2.147' uses deprecated v2 capabilities in a way that may be insecure [ 62.816667][ T4518] binder: 4517:4518 Acquire 1 refcount change on invalid ref 0 ret -22 [ 62.835836][ T4518] binder: 4517:4518 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 62.859666][ T4522] udc-core: couldn't find an available UDC or it's busy [ 62.861559][ T4522] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.932812][ T4528] loop2: detected capacity change from 0 to 512 [ 63.110423][ T4528] EXT4-fs (loop2): 1 orphan inode deleted [ 63.112403][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 65.819411][ T4608] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.191'. [ 65.991451][ T4614] loop2: detected capacity change from 0 to 2048 [ 66.200824][ T4614] EXT4-fs (loop2): failed to initialize system zone (-117) [ 66.202932][ T4614] EXT4-fs (loop2): mount failed [ 67.125067][ T4624] udc-core: couldn't find an available UDC or it's busy [ 67.135532][ T4624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.219571][ T4614] loop2: detected capacity change from 0 to 1764 [ 67.444738][ T4635] netlink: 'syz.2.201': attribute type 29 has an invalid length. [ 67.460003][ T4635] netlink: 'syz.2.201': attribute type 29 has an invalid length. [ 67.473720][ T4635] netlink: 'syz.2.201': attribute type 29 has an invalid length. [ 67.484063][ T4635] netlink: 'syz.2.201': attribute type 29 has an invalid length. [ 67.484565][ T4636] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.200'. [ 67.493252][ T4635] netlink: 'syz.2.201': attribute type 29 has an invalid length. [ 67.794223][ T4650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.055478][ T4666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 69.289613][ T4699] loop0: detected capacity change from 0 to 512 [ 69.328825][ T4699] EXT4-fs (loop0): Ignoring removed nobh option [ 69.366058][ T4699] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 69.368328][ T4699] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 69.375871][ T4699] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.230: casefold flag without casefold feature [ 69.384159][ T4699] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.230: unexpected EA_INODE flag [ 69.403872][ T4699] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.230: couldn't read orphan inode 13 (err -117) [ 69.422476][ T4699] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 69.507343][ T4711] loop4: detected capacity change from 0 to 128 [ 69.542090][ T4715] udc-core: couldn't find an available UDC or it's busy [ 69.543939][ T4715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.561534][ T4711] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.588578][ T4711] syz.4.234 (pid 4711) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 69.630465][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632347][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.764635][ T4721] loop0: detected capacity change from 0 to 512 [ 69.833585][ T4728] loop4: detected capacity change from 0 to 8 [ 69.918970][ T4721] EXT4-fs (loop0): Ignoring removed orlov option [ 69.928472][ T4721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e01c, mo2=0002] [ 69.930605][ T4721] System zones: 1-12 [ 69.941274][ T4721] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.238: casefold flag without casefold feature [ 69.991050][ T4721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.238: missing EA_INODE flag [ 70.037906][ T4721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.238: error while reading EA inode 12 err=-117 [ 70.062481][ T4721] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.121865][ T4104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.124058][ T4104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.136988][ T4721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.238: missing EA_INODE flag [ 70.143659][ T4721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.238: error while reading EA inode 12 err=-117 [ 70.166817][ T4104] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.173204][ T4721] EXT4-fs (loop0): 1 orphan inode deleted [ 70.174981][ T4721] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,discard,debug_want_extra_isize=0x000000000000004c,debug,noinit_itable,errors=continue,usrjquota=,orlov,min_batch_time=0x000000000000018d,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 71.277113][ T4771] loop2: detected capacity change from 0 to 16 [ 71.343126][ T4773] loop1: detected capacity change from 0 to 16 [ 71.382544][ T4771] erofs: (device loop2): mounted with root inode @ nid 36. [ 71.382551][ T4773] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.511813][ T4775] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 71.558913][ T4775] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 71.607772][ T4776] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 71.621016][ T4776] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 71.664450][ T4775] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 71.677268][ T4776] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 71.862112][ T4776] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 72.294424][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 74.216094][ T26] audit: type=1326 audit(73.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.289213][ T26] audit: type=1326 audit(74.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.771684][ T3321] cfg80211: failed to load regulatory.db [ 74.793649][ T4808] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 74.838938][ T26] audit: type=1326 audit(74.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.844400][ T26] audit: type=1326 audit(74.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.881157][ T4808] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 74.883271][ T4808] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.270'. [ 74.895429][ T26] audit: type=1326 audit(74.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.900940][ T26] audit: type=1326 audit(74.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.945501][ T26] audit: type=1326 audit(74.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.950857][ T26] audit: type=1326 audit(74.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 74.991552][ T4810] loop3: detected capacity change from 0 to 16 [ 74.993433][ T26] audit: type=1326 audit(74.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 75.015406][ T26] audit: type=1326 audit(74.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a99bde8 code=0x7ff00000 [ 75.194903][ T4810] erofs: (device loop3): mounted with root inode @ nid 36. [ 75.341042][ T4817] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 75.346482][ T4817] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 75.386077][ T4817] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 75.398023][ T4816] 9pnet: Insufficient options for proto=fd [ 75.554296][ T4817] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 76.076665][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 76.448019][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 76.463399][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 76.486354][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 76.755673][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 76.872751][ T4876] loop1: detected capacity change from 0 to 1024 [ 76.952112][ T4879] loop0: detected capacity change from 0 to 512 [ 77.050025][ T4892] loop2: detected capacity change from 0 to 16 [ 77.056868][ T4879] EXT4-fs (loop0): 1 truncate cleaned up [ 77.058397][ T4879] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.249620][ T4892] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.326900][ T4876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.379118][ T4915] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.389382][ T4915] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 78.395079][ T4915] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 78.429030][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,barrier=0x0000000000000080,noload,barrier=0x0000000000000005,nombcache,grpquota,data=ordered,,errors=continue. Quota mode: writeback. [ 78.519917][ T4915] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.564645][ T4915] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 78.619188][ T4915] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 78.829346][ T4876] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 78.849046][ T4921] loop0: detected capacity change from 0 to 2048 [ 78.913670][ T4921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.890755][ T4954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.303'. [ 81.456860][ T4988] loop1: detected capacity change from 0 to 764 [ 82.149224][ T5002] binder: 5001:5002 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 83.566723][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 83.615788][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 83.640284][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 83.865447][ T3321] Bluetooth: hci4: command 0x0407 tx timeout [ 83.934492][ T5038] binder: 5037:5038 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 84.543983][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 84.658850][ T5074] binder: 5071:5074 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 84.959107][ T5084] loop3: detected capacity change from 0 to 128 [ 85.294456][ T5094] netlink: 380 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.363915][ T5100] udc-core: couldn't find an available UDC or it's busy [ 85.380047][ T5100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.389544][ T5103] udc-core: couldn't find an available UDC or it's busy [ 85.395995][ T5103] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.401080][ T5102] binder: 5101:5102 Acquire 1 refcount change on invalid ref 0 ret -22 [ 85.411324][ T5102] binder: 5101:5102 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 85.494556][ T5107] udc-core: couldn't find an available UDC or it's busy [ 85.496813][ T5107] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.592540][ T5100] udc-core: couldn't find an available UDC or it's busy [ 85.594583][ T5100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.755460][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.015578][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 86.145540][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.148939][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.151453][ T25] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 86.153763][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.159584][ T25] usb 1-1: config 0 descriptor?? [ 86.560190][ T5129] loop3: detected capacity change from 0 to 512 [ 86.567564][ T5130] binder: 5128:5130 Acquire 1 refcount change on invalid ref 0 ret -22 [ 86.570929][ T5130] binder: 5128:5130 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 86.602603][ T5134] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 86.660120][ T25] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 86.672424][ T25] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 86.676921][ T5129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.364: bg 0: block 393: padding at end of block bitmap is not set [ 86.686080][ T5129] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 86.696105][ T5129] EXT4-fs (loop3): 2 truncates cleaned up [ 86.700537][ T5129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.721220][ T5134] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.879202][ T5106] udc-core: couldn't find an available UDC or it's busy [ 86.881436][ T5106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.895767][ T25] ft260 0003:0403:6030.0003: chip code: 5e81 abf2 [ 87.176720][ T25] Unable to handle kernel paging request at virtual address dfff8000000000fa [ 87.193200][ T25] Mem abort info: [ 87.200805][ T25] ESR = 0x0000000096000006 [ 87.208542][ T25] EC = 0x25: DABT (current EL), IL = 32 bits [ 87.217912][ T25] SET = 0, FnV = 0 [ 87.223854][ T25] EA = 0, S1PTW = 0 [ 87.240448][ T25] FSC = 0x06: level 2 translation fault [ 87.253827][ T25] Data abort info: [ 87.261036][ T25] ISV = 0, ISS = 0x00000006 [ 87.275013][ T25] CM = 0, WnR = 0 [ 87.280814][ T25] [dfff8000000000fa] address between user and kernel address ranges [ 87.293986][ T25] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 87.295996][ T25] Modules linked in: [ 87.297061][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.15.164-syzkaller #0 [ 87.299208][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.301971][ T25] Workqueue: usb_hub_wq hub_event [ 87.303334][ T25] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 87.305417][ T25] pc : ft260_smbus_xfer+0x6c/0x126c [ 87.306824][ T25] lr : ft260_smbus_xfer+0x48/0x126c [ 87.308265][ T25] sp : ffff800018c35ea0 [ 87.309340][ T25] x29: ffff800018c35ec0 x28: 0000000000000000 x27: 0000000000000000 [ 87.311491][ T25] x26: 1fffe0001cba0835 x25: 0000000000000000 x24: ffff0000e5d041a8 [ 87.313626][ T25] x23: dfff800000000000 x22: 0000000000000000 x21: 00000000ffffacdb [ 87.315776][ T25] x20: 1ffff00002947e30 x19: 00000000000007d0 x18: ffff800018c35ca0 [ 87.317986][ T25] x17: 1fffe000368fab8e x16: ffff800011ab8a28 x15: 000000000002358d [ 87.320125][ T25] x14: 00000000324e762d x13: dfff800000000000 x12: 0000000000100000 [ 87.322411][ T25] x11: 00000000000fffff x10: ffff8000252ec000 x9 : 0000000000100000 [ 87.324527][ T25] x8 : 00000000000000fa x7 : 0000000000000000 x6 : 0000000000000000 [ 87.326842][ T25] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 87.328979][ T25] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000e5d04080 [ 87.331176][ T25] Call trace: [ 87.332035][ T25] ft260_smbus_xfer+0x6c/0x126c [ 87.333334][ T25] __i2c_smbus_xfer+0x570/0x2b70 [ 87.334689][ T25] i2c_smbus_xfer+0x210/0x31c [ 87.336044][ T25] i2c_default_probe+0x1c0/0x248 [ 87.337431][ T25] i2c_do_add_adapter+0x3c4/0x8d4 [ 87.338909][ T25] __process_new_adapter+0x28/0x3c [ 87.340370][ T25] bus_for_each_drv+0x158/0x1e0 [ 87.341716][ T25] i2c_register_adapter+0xcc8/0xf8c [ 87.343148][ T25] i2c_add_adapter+0x170/0x250 [ 87.344630][ T25] ft260_probe+0x3f0/0x570 [ 87.345824][ T25] hid_device_probe+0x23c/0x338 [ 87.347237][ T25] really_probe+0x26c/0xaec [ 87.348506][ T25] __driver_probe_device+0x194/0x3b4 [ 87.349970][ T25] driver_probe_device+0x78/0x34c [ 87.351325][ T25] __device_attach_driver+0x28c/0x4d8 [ 87.352841][ T25] bus_for_each_drv+0x158/0x1e0 [ 87.354152][ T25] __device_attach+0x2f0/0x480 [ 87.355450][ T25] device_initial_probe+0x24/0x34 [ 87.356894][ T25] bus_probe_device+0xbc/0x1c8 [ 87.358212][ T25] device_add+0xae0/0xef4 [ 87.359408][ T25] hid_add_device+0x318/0x4b4 [ 87.360762][ T25] usbhid_probe+0x868/0xba8 [ 87.362048][ T25] usb_probe_interface+0x500/0x984 [ 87.363528][ T25] really_probe+0x26c/0xaec [ 87.364819][ T25] __driver_probe_device+0x194/0x3b4 [ 87.366261][ T25] driver_probe_device+0x78/0x34c [ 87.367724][ T25] __device_attach_driver+0x28c/0x4d8 [ 87.369280][ T25] bus_for_each_drv+0x158/0x1e0 [ 87.370696][ T25] __device_attach+0x2f0/0x480 [ 87.372006][ T25] device_initial_probe+0x24/0x34 [ 87.373450][ T25] bus_probe_device+0xbc/0x1c8 [ 87.374840][ T25] device_add+0xae0/0xef4 [ 87.376085][ T25] usb_set_configuration+0x15e0/0x1b60 [ 87.377639][ T25] usb_generic_driver_probe+0x8c/0x148 [ 87.379115][ T25] usb_probe_device+0x120/0x25c [ 87.380564][ T25] really_probe+0x26c/0xaec [ 87.381827][ T25] __driver_probe_device+0x194/0x3b4 [ 87.383295][ T25] driver_probe_device+0x78/0x34c [ 87.384680][ T25] __device_attach_driver+0x28c/0x4d8 [ 87.386136][ T25] bus_for_each_drv+0x158/0x1e0 [ 87.387525][ T25] __device_attach+0x2f0/0x480 [ 87.388878][ T25] device_initial_probe+0x24/0x34 [ 87.390226][ T25] bus_probe_device+0xbc/0x1c8 [ 87.391591][ T25] device_add+0xae0/0xef4 [ 87.392826][ T25] usb_new_device+0x900/0x145c [ 87.394091][ T25] hub_event+0x236c/0x46b8 [ 87.395286][ T25] process_one_work+0x790/0x11b8 [ 87.396720][ T25] worker_thread+0x910/0x1034 [ 87.398014][ T25] kthread+0x37c/0x45c [ 87.399163][ T25] ret_from_fork+0x10/0x20 [ 87.400448][ T25] Code: 96513479 f9400276 911f42d3 d343fe68 (38776908) [ 87.402398][ T25] ---[ end trace e5136da2ea80760e ]--- [ 88.478421][ T25] Kernel panic - not syncing: Oops: Fatal exception [ 88.480221][ T25] SMP: stopping secondary CPUs [ 88.481554][ T25] Kernel Offset: disabled [ 88.482715][ T25] CPU features: 0x0,000081c1,21302e40 [ 88.484138][ T25] Memory Limit: none [ 89.486674][ T25] Rebooting in 86400 seconds..