last executing test programs: 2m56.801234454s ago: executing program 4 (id=71): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES64], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 2m53.71218789s ago: executing program 4 (id=79): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m45.196109706s ago: executing program 4 (id=91): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) inotify_init() socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffd, 0x3}, 0x0, 0x0) syz_usb_disconnect(r0) 2m41.95504011s ago: executing program 4 (id=98): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000280)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c636f6465706167653d63703835302c63726561746f723d40ff7f5c2c706172743d3078303030303030303030303030303030332c706172743d3078303030303030303030303030303030342c00e48ab395178be648515dde7dbbd8402d28d36cb164d46745a4cf24ce5284b400e3a8d9c404132f55024df3f9f2b9508b765f1578fb6a141c302cf307330a"], 0x11, 0x2e1, &(0x7f0000003280)="$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") mount$overlay(0x0, 0x0, 0x0, 0x10, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x1261, 0x0) 2m40.63944907s ago: executing program 4 (id=103): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000001380), 0x1ff, 0xa8b01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, 0x0, r5}) 2m37.834639561s ago: executing program 4 (id=106): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m37.511618148s ago: executing program 32 (id=106): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.997728222s ago: executing program 3 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x3, 0x300, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) lseek(0xffffffffffffffff, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 41.993538139s ago: executing program 3 (id=392): r0 = syz_io_uring_complete(0x0, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) 34.067576994s ago: executing program 3 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d14", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x15}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x4, 0x97, &(0x7f00000000c0)=""/151, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x4}, 0x10, 0x2fc47, 0xffffffffffffffff, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x5, 0x1, 0x0, 0x5}, {0x1, 0x4, 0x5, 0x3}, {0x3, 0x1, 0x0, 0x5}], 0x10, 0xf9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x82, &(0x7f0000000300), &(0x7f0000000400)=""/130, 0xfffffffd, 0x0, 0x0, 0x73, 0x0, &(0x7f0000000500)="8cc97e5be971acb474b7d9d607fa2a8010a89b9753227645fc0089c2b2522de2b0382285b8f9b9f0a006c7e37691224a85d2bcbc3eb71525e79026cdd3f40d66543f4600f6e9785fb21cdae0188e434581894e5db37f7bb7133b57e44bbb55d12b751bf46d62af0dd19b1409ae0b206d5a7efc", 0x2, 0x0, 0xffff}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x100010, r3, 0x8167b000) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000600)={0x0, 0x9, 0x0, 0x3dbba7f0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'pim6reg\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x5}, {0x8, 0x0, 0x6, 0x1}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x29, 0x1, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @remote}}}}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000786f35decfdb14e6510c57cd862db50000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25700000000c009900001000003e000000"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 33.125040845s ago: executing program 3 (id=421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) 30.634685938s ago: executing program 3 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 30.402902211s ago: executing program 3 (id=427): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xe9, 0x0, 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a001f00000000006c970000200000001100000095"], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014011a80400002803c00018018002100"], 0x134}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xe8, 0x44, 0x9, 0x0, 0x4000, {0x3}, [@generic="e57b287e6d0f44d4c84328b90f62d4a2dd4f8def45bc4e5be1b0781c5a47510651c5e8a2b6527bafaf771b443f0d155201c6f05a8a7933744f5897b60a235a67e7cd38e3eb8687211ddd3cdabf7660516515fa7f47622cd7036d2b1125f88cf51809aac9a47cea79b6f601cc54ca7f8d70b3c54fc288971efd140bc0fdfd76ee5224cdcda45c25357988a4071b6d9a8c70b117852932e1f960ac9874d5f4328b8492bed9fd86716ab31bf6e173a5e4ef9f6ddc2c1668d8d5462b33fe3872c3ec930485bea98f4cb50fd1bc21000715b34c6d"]}, 0xe8}}, 0x24004044) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_team\x00', {0x3}, 0x3ff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 14.013382279s ago: executing program 33 (id=427): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xe9, 0x0, 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a001f00000000006c970000200000001100000095"], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014011a80400002803c00018018002100"], 0x134}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xe8, 0x44, 0x9, 0x0, 0x4000, {0x3}, [@generic="e57b287e6d0f44d4c84328b90f62d4a2dd4f8def45bc4e5be1b0781c5a47510651c5e8a2b6527bafaf771b443f0d155201c6f05a8a7933744f5897b60a235a67e7cd38e3eb8687211ddd3cdabf7660516515fa7f47622cd7036d2b1125f88cf51809aac9a47cea79b6f601cc54ca7f8d70b3c54fc288971efd140bc0fdfd76ee5224cdcda45c25357988a4071b6d9a8c70b117852932e1f960ac9874d5f4328b8492bed9fd86716ab31bf6e173a5e4ef9f6ddc2c1668d8d5462b33fe3872c3ec930485bea98f4cb50fd1bc21000715b34c6d"]}, 0xe8}}, 0x24004044) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_team\x00', {0x3}, 0x3ff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 11.451331196s ago: executing program 5 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000200)={{0xf272, 0x401, 0x934, 0x3}, 'syz0\x00', 0x4c}) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r6, &(0x7f0000001f80)=""/4094, 0xffe) getsockopt$inet_buf(r6, 0x0, 0x23, &(0x7f0000000440)=""/31, &(0x7f0000000480)=0x1f) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) socket(0x5, 0x4, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0xc18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.626947421s ago: executing program 5 (id=490): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="0500000001e100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000200000000000000"], 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @loopback}], 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200005f3323f8e50333f228e3360c7c16108fe74002e9270f825d19653d59dc198630e99c14f49ca80ffcfb781aecb680f726bd8be6ddb0ea58465a62b1bb3846d960a8dcba9126b7d753"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 9.948005637s ago: executing program 5 (id=494): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES64], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 9.379443758s ago: executing program 0 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000950000000000000091843bd6ce083d7fa4605c3545be2f83dcb924ae9629aa693c4aa466f0116901804f621ea1866bea8370ecdbc20a4cd735b564f5d2974dd7266eb5628832a9b23541b3b8b0f3bcb09c55c62d06c4640653bb6acb8b5cb37611b337f6bf59c776207f713fc138c71135fed63284f08dcdb85cc83d4c44a8cc3fb19971d6e10e7a426c511f5d60b3c1c76b9d00000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x17, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x48000) 9.372178698s ago: executing program 1 (id=497): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x458, 0xffffffff, 0x110, 0x2f0, 0x2f0, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x8, 0x40, 0xd}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wg1\x00', 'macvlan0\x00', {0xff}, {}, 0x8, 0x0, 0x4}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], [0x2d7b, 0x7, 0x4, 0x4, 0xdf4, 0x6, 0xfffffffd, 0xff, 0x6, 0x8, 0x1, 0x8, 0x3, 0xa, 0x1000, 0x6, 0xe, 0xb289, 0x1e, 0x401, 0x2, 0x3, 0x6, 0x60000000, 0x4, 0x0, 0x400, 0x1, 0xfffffff9, 0x10001, 0x0, 0x617, 0x4, 0x7, 0x2, 0x1, 0x7, 0x2, 0x7, 0x1, 0x5, 0x9, 0xd, 0x6, 0x3, 0x0, 0x826, 0x7, 0x2, 0x5, 0x1616, 0x42212, 0x0, 0x2, 0x401, 0x7fff, 0x1266, 0x12, 0x438d46f9, 0x2, 0x3, 0xfff, 0x1c54, 0x32e4], 0x2, [{0x6, 0x9, 0x41}, {0x1, 0x9, 0x65}, {0xfc, 0x8, 0x40}, {0x81, 0x0, 0x48}], 0x0, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x0, [0x3, 0x1, 0x3a, 0x8, 0x12, 0x9, 0x2d, 0x3b, 0x15, 0x2a, 0x31, 0x3b, 0xc, 0x1, 0x1f, 0x28], 0x1, 0x9, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) write$UHID_CREATE2(r4, &(0x7f0000000300)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x5b, 0x6, 0x4, 0x4a2, 0x1ff, 0x75d, "96974a0e8ba87dbb82b5446de53023f081fe4cb742c74dcc5ffdd9cd8326ffb2414748c65482de45f236c5da9a7eb22b09f7139b365701eb3e5f78fa7d2f1ed403f11e8a4cc0731e15e20d9e8340b6b6817a8118cd2f74e0602342"}}, 0x173) futex(&(0x7f0000000500)=0x1, 0x7, 0x2, &(0x7f0000000540)={0x0, 0x3938700}, 0x0, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 9.036518666s ago: executing program 0 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000200)={{0xf272, 0x401, 0x934, 0x3}, 'syz0\x00', 0x4c}) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r6, &(0x7f0000001f80)=""/4094, 0xffe) getsockopt$inet_buf(r6, 0x0, 0x23, &(0x7f0000000440)=""/31, &(0x7f0000000480)=0x1f) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) socket(0x5, 0x4, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0xc18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.815061361s ago: executing program 0 (id=501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d14", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x15}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x4, 0x97, &(0x7f00000000c0)=""/151, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x4}, 0x10, 0x2fc47, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xf9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x82, &(0x7f0000000300), &(0x7f0000000400)=""/130, 0xfffffffd, 0x0, 0x0, 0x73, 0x0, &(0x7f0000000500)="8cc97e5be971acb474b7d9d607fa2a8010a89b9753227645fc0089c2b2522de2b0382285b8f9b9f0a006c7e37691224a85d2bcbc3eb71525e79026cdd3f40d66543f4600f6e9785fb21cdae0188e434581894e5db37f7bb7133b57e44bbb55d12b751bf46d62af0dd19b1409ae0b206d5a7efc", 0x2, 0x0, 0xffff}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x100010, r3, 0x8167b000) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000600)={0x0, 0x9, 0x0, 0x3dbba7f0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'pim6reg\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x5}, {0x8, 0x0, 0x6, 0x1}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x29, 0x1, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @remote}}}}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000786f35decfdb14e6510c57cd862db50000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25700000000c009900001000003e000000"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 7.023386904s ago: executing program 2 (id=502): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x8054) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 6.968986687s ago: executing program 5 (id=503): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="0500000001e100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000200000000000000"], 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @loopback}], 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200005f3323f8e50333f228e3360c7c16108fe74002e9270f825d19653d59dc198630e99c14f49ca80ffcfb781aecb680f726bd8be6ddb0ea58465a62b1bb3846d960a8dcba9126b7d753"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 6.887230151s ago: executing program 2 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 6.188377359s ago: executing program 5 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.552131976s ago: executing program 2 (id=506): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 4.503046959s ago: executing program 5 (id=507): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.351087687s ago: executing program 2 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000950000000000000091843bd6ce083d7fa4605c3545be2f83dcb924ae9629aa693c4aa466f0116901804f621ea1866bea8370ecdbc20a4cd735b564f5d2974dd7266eb5628832a9b23541b3b8b0f3bcb09c55c62d06c4640653bb6acb8b5cb37611b337f6bf59c776207f713fc138c71135fed63284f08dcdb85cc83d4c44a8cc3fb19971d6e10e7a426c511f5d60b3c1c76b9d00000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x17, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x48000) 4.208810295s ago: executing program 1 (id=509): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x80000000, 0x20}) 4.157672987s ago: executing program 1 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0xf272, 0x401, 0x934, 0x3}, 'syz0\x00', 0x4c}) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r4, &(0x7f0000001f80)=""/4094, 0xffe) getsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000000440)=""/31, &(0x7f0000000480)=0x1f) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) socket(0x5, 0x4, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0xc18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.618737446s ago: executing program 0 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100a1"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.509641012s ago: executing program 1 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.489746083s ago: executing program 2 (id=513): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x8054) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 1.083164252s ago: executing program 0 (id=514): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="0500000001e100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000200000000000000"], 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @loopback}], 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200005f3323f8e50333f228e3360c7c16108fe74002e9270f825d19653d59dc198630e99c14f49ca80ffcfb781aecb680f726bd8be6ddb0ea58465a62b1bb3846d960a8dcba9126b7d753"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 1.082589122s ago: executing program 1 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000540)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x40c0080) socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000140), 0x0) io_uring_enter(r6, 0xeed, 0xeed, 0x1, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) 1.040941584s ago: executing program 2 (id=516): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$usbmon(&(0x7f000066f000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 76.293976ms ago: executing program 0 (id=517): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x3, 0x300, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) lseek(0xffffffffffffffff, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x1) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.179012][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.197752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.214869][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.242668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.254318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.283022][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.307269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.316006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.331581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.343158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.352788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.367231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.374917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.395988][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.420223][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.430169][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.439351][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.448858][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.457797][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.465772][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.475367][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.493060][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.502847][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.515621][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.522823][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.531117][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.545069][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.555748][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.564669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.575948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.589863][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.624443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.652600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.669007][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.676125][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.692674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.704156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.714972][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.722467][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.730657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.740319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.749273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.759441][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.766576][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.775129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.784842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.826719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.836000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.868989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.878823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.905234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.915765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.927220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.937111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.945924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.954559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.963765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.972538][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 68.977947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.980257][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 68.997020][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.012534][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 69.018701][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.031736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.032898][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 69.043420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.053389][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 69.057774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.074360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.083315][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.090454][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.101119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.110266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.118893][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.126833][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.135184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.143961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.151543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.180770][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.193424][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.212484][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.223933][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.239424][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.250220][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.263502][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.273564][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.308439][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.319244][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.331324][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.368360][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.394352][ T4187] device veth0_vlan entered promiscuous mode [ 69.402925][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.418942][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.428891][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.440851][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.451111][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.473808][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.494728][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.532651][ T4187] device veth1_vlan entered promiscuous mode [ 69.550170][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.564058][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.573978][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.582758][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.591681][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.600933][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.611073][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.619998][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.629847][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.639528][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.649782][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.674813][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.695215][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.716113][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.725965][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.750507][ T4186] device veth0_vlan entered promiscuous mode [ 69.783128][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.795809][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.807453][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.819127][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.830907][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.839143][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.850810][ T4187] device veth0_macvtap entered promiscuous mode [ 69.875321][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.898461][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.907700][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.915338][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.924656][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.934323][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.945069][ T4187] device veth1_macvtap entered promiscuous mode [ 69.989824][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.001047][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.010775][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.022999][ T4186] device veth1_vlan entered promiscuous mode [ 70.042771][ T4184] device veth0_vlan entered promiscuous mode [ 70.056166][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.064540][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.075485][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.084132][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.093619][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.102325][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.112067][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.120848][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.133363][ T4185] device veth0_vlan entered promiscuous mode [ 70.149227][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.158854][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.172654][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.181380][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.192221][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.201326][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.209597][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.219331][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.232033][ T4184] device veth1_vlan entered promiscuous mode [ 70.241990][ T4185] device veth1_vlan entered promiscuous mode [ 70.253309][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.262502][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.272773][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.282019][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.302295][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.311607][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.320310][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.330669][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.359393][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.376253][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.386160][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.434638][ T4186] device veth0_macvtap entered promiscuous mode [ 70.446035][ T4184] device veth0_macvtap entered promiscuous mode [ 70.457246][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.467447][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.476878][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.485775][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.495604][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.507658][ T4185] device veth0_macvtap entered promiscuous mode [ 70.515742][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.526704][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.535926][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.547852][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.559758][ T4186] device veth1_macvtap entered promiscuous mode [ 70.570874][ T4184] device veth1_macvtap entered promiscuous mode [ 70.587332][ T4185] device veth1_macvtap entered promiscuous mode [ 70.662663][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.674239][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.688015][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.704846][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.717260][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.722898][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.725347][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.746878][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.760668][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.773561][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.791939][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.803682][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.814507][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.826122][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.836641][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.847554][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.859730][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.868582][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.877073][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.885091][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.893752][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.903244][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.913532][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.921930][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.932156][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.940938][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.949628][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.959171][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.969389][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.979610][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.989919][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.006047][ T4188] device veth0_vlan entered promiscuous mode [ 71.019506][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.031733][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.043069][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.051447][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.058983][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.070173][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.070789][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.086565][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.087226][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.105069][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.117154][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.132152][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.142883][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.143565][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.149448][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 71.165374][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.178308][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.188392][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.202607][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.221368][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.233966][ T4188] device veth1_vlan entered promiscuous mode [ 71.242004][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.250326][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.260377][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.271822][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.280593][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.290666][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.299537][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.312685][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.322584][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.333232][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342337][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.359176][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.369540][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378681][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.387640][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.404516][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.404539][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.416797][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.426152][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.438854][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.453914][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468198][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.476756][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.529673][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.537856][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.606284][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.626269][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.732668][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.752045][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.790131][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.798841][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.839666][ T4188] device veth0_macvtap entered promiscuous mode [ 71.858771][ T4188] device veth1_macvtap entered promiscuous mode [ 71.910107][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.095659][ T4272] Zero length message leads to an empty skb [ 72.119707][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.336803][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.441125][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.760498][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.782483][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.793613][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.804722][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.822578][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.835944][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.853004][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.864790][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.885366][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.955935][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.965515][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.977388][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.015377][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.029745][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.175555][ T4281] loop2: detected capacity change from 0 to 40427 [ 74.207166][ T4281] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x1ffff [ 74.606357][ C0] sched: RT throttling activated [ 74.608703][ T1346] Bluetooth: hci0: command 0x0419 tx timeout [ 74.638311][ T1346] Bluetooth: hci2: command 0x0419 tx timeout [ 75.479624][ T1346] Bluetooth: hci4: command 0x0419 tx timeout [ 75.485870][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 75.493132][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.519631][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.539479][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.562528][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576516][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.591317][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.604561][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.618962][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.630318][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.642252][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.653258][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.664849][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.784417][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.802177][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.847808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.961319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.997610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.035876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.054691][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.071283][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.081778][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.262740][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849969][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.870335][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.982448][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.011689][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.063613][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.075100][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.602192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.613626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.625716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.646005][ T4292] batman_adv: Cannot find parent device [ 78.816563][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.856563][ T4319] input: syz1 as /devices/virtual/input/input5 [ 80.156953][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.281111][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.340370][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.605194][ T1107] cfg80211: failed to load regulatory.db [ 82.611663][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.635388][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.261548][ T13] usb 2-1: config 0 descriptor?? [ 84.322953][ T13] usb 2-1: can't set config #0, error -71 [ 84.382665][ T13] usb 2-1: USB disconnect, device number 2 [ 84.852419][ T4345] tipc: Started in network mode [ 84.857831][ T4345] tipc: Node identity ac14140f, cluster identity 4711 [ 84.867980][ T4345] tipc: New replicast peer: 255.255.255.255 [ 84.876117][ T4345] tipc: Enabled bearer , priority 10 [ 85.426457][ T4347] batman_adv: Cannot find parent device [ 86.034311][ T1107] tipc: Node number set to 2886997007 [ 88.104291][ T4367] loop0: detected capacity change from 0 to 128 [ 88.172183][ T4368] loop1: detected capacity change from 0 to 2048 [ 88.173045][ T4367] FAT-fs (loop0): bogus number of reserved sectors [ 88.247073][ T4367] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.283073][ T4367] FAT-fs (loop0): Can't find a valid FAT filesystem [ 88.468686][ T4368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.253004][ T4367] ======================================================= [ 89.253004][ T4367] WARNING: The mand mount option has been deprecated and [ 89.253004][ T4367] and is ignored by this kernel. Remove the mand [ 89.253004][ T4367] option from the mount to silence this warning. [ 89.253004][ T4367] ======================================================= [ 90.849842][ T4249] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 90.926549][ T4249] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.000142][ T4249] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.000142][ T4249] [ 91.086421][ T4249] EXT4-fs (loop1): Total free blocks count 0 [ 91.136556][ T4249] EXT4-fs (loop1): Free/Dirty block details [ 91.142737][ T4249] EXT4-fs (loop1): free_blocks=2415919504 [ 91.231026][ T4249] EXT4-fs (loop1): dirty_blocks=32 [ 91.236257][ T4249] EXT4-fs (loop1): Block reservation details [ 91.272238][ T4249] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 92.624243][ T4356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 92.866985][ T4356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.866985][ T4356] [ 93.346015][ T4395] loop4: detected capacity change from 0 to 64 [ 93.820245][ T4405] batman_adv: Cannot find parent device [ 94.386388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.396368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.406363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.416364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.426363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.436364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.446360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.456383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.466372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.476365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 97.196413][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.013037][ T4420] capability: warning: `syz.3.41' uses 32-bit capabilities (legacy support in use) [ 98.030964][ T4395] hfs: bad catalog namelength [ 98.036202][ T4395] hfs: get root inode failed [ 98.270179][ T4433] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 98.424707][ T4433] loop4: detected capacity change from 0 to 512 [ 99.910190][ T4433] EXT4-fs (loop4): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 102.157786][ T4458] process 'syz.4.48' launched '/dev/fd/5' with NULL argv: empty string added [ 103.613661][ T4465] loop3: detected capacity change from 0 to 512 [ 103.613966][ T4466] loop2: detected capacity change from 0 to 512 [ 104.060013][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.111084][ T4465] EXT4-fs (loop3): Ignoring removed oldalloc option [ 104.729196][ T4482] loop4: detected capacity change from 0 to 64 [ 104.739993][ T4465] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.51: inode has both inline data and extents flags [ 104.809742][ T4466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.821012][ T4465] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.51: couldn't read orphan inode 15 (err -117) [ 104.837124][ T4466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.857700][ T4465] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nodioread_nolock,grpid,oldalloc,init_itable=0x0000000000000000,noquota,dioread_lock,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 104.882785][ T4466] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,resuid=0x00. Quota mode: writeback. [ 105.076758][ T4466] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 105.103202][ T4466] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.49: Directory hole found for htree leaf block 0 [ 105.124502][ T4482] hfs: bad catalog namelength [ 105.130503][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.146574][ T4482] hfs: get root inode failed [ 105.155764][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.168414][ T4466] EXT4-fs (loop2): Remounting filesystem read-only [ 105.178381][ T4473] comedi comedi2: reset error (fatal) [ 105.236788][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.250504][ T4490] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.49: Directory hole found for htree leaf block 0 [ 105.273325][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.285574][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.297461][ T4234] usb 2-1: config 0 descriptor?? [ 105.315132][ T4490] EXT4-fs (loop2): Remounting filesystem read-only [ 105.401556][ T4495] loop0: detected capacity change from 0 to 164 [ 105.482814][ T4499] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 105.483902][ T4495] Unsupported NM flag settings (240) [ 105.511708][ T4501] loop3: detected capacity change from 0 to 512 [ 105.527255][ T4499] loop2: detected capacity change from 0 to 512 [ 105.534142][ T4495] Unsupported NM flag settings (240) [ 105.535236][ T4502] Unsupported NM flag settings (240) [ 105.568870][ T4502] Unsupported NM flag settings (240) [ 105.615711][ T4501] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.58: inode #1: comm syz.3.58: iget: illegal inode # [ 105.654328][ T4499] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 105.686170][ T4501] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.58: error while reading EA inode 1 err=-117 [ 105.733187][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.740379][ T4501] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.828162][ T4234] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 105.881240][ T4234] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.966064][ T4501] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.58: inode #1: comm syz.3.58: iget: illegal inode # [ 105.994750][ T4501] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.58: error while reading EA inode 1 err=-117 [ 106.047847][ T4501] EXT4-fs (loop3): 1 orphan inode deleted [ 106.686631][ T4501] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,noblock_validity,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005a,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 106.777737][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.106413][ T4229] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.118602][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.129418][ T4229] usb 5-1: config 0 descriptor?? [ 107.178998][ T4229] pwc: Askey VC010 type 2 USB webcam detected. [ 108.264322][ T13] usb 2-1: USB disconnect, device number 3 [ 108.278317][ T26] audit: type=1326 audit(1777011312.142:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.62" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86ab1d5dd9 code=0x0 [ 108.364357][ T4515] fido_id[4515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 108.502755][ T4229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.566517][ T4229] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.645629][ T4531] batman_adv: Cannot find parent device [ 109.656812][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.674595][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.698787][ T4538] loop0: detected capacity change from 0 to 2048 [ 109.712487][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.740592][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.832032][ T4538] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 110.019846][ T4538] (syz.0.66,4538,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 110.179539][ T4185] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 110.209258][ T4544] loop3: detected capacity change from 0 to 16 [ 110.244382][ T4544] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 110.606429][ T4229] pwc: recv_control_msg error -32 req 02 val 2c00 [ 111.155260][ T4555] device vlan2 entered promiscuous mode [ 111.161096][ T4555] device bridge0 entered promiscuous mode [ 111.616559][ T4229] pwc: recv_control_msg error -71 req 04 val 1000 [ 111.636592][ T4229] pwc: recv_control_msg error -71 req 04 val 1300 [ 111.980818][ T4560] input: syz1 as /devices/virtual/input/input6 [ 112.066808][ T4229] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.101452][ T4229] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.266530][ T4229] pwc: recv_control_msg error -71 req 02 val 2100 [ 113.140937][ T4229] pwc: recv_control_msg error -71 req 04 val 1500 [ 113.216629][ T4229] pwc: recv_control_msg error -71 req 02 val 2500 [ 113.701408][ T4229] pwc: recv_control_msg error -71 req 02 val 2400 [ 113.957576][ T4229] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.076705][ T4229] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.527989][ T4229] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.566992][ T4229] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.187785][ T4229] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.240329][ T4229] pwc: Registered as video103. [ 116.257856][ T4229] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 116.283834][ T4596] loop0: detected capacity change from 0 to 1024 [ 116.391131][ T4229] usb 5-1: USB disconnect, device number 2 [ 117.379894][ T4596] EXT4-fs (loop0): Ignoring removed orlov option [ 119.005577][ T4596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 119.195384][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.208610][ T4620] loop3: detected capacity change from 0 to 512 [ 119.228902][ T4596] System zones: 0-1, 3-12 [ 119.245424][ T4596] EXT4-fs: error -4 creating inode table initialization thread [ 121.567152][ T4596] EXT4-fs (loop0): mount failed [ 121.606472][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.196543][ T1107] usb 2-1: device descriptor read/all, error -71 [ 122.676753][ T1107] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 122.921791][ T4637] loop0: detected capacity change from 0 to 2048 [ 123.036732][ T1107] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 123.064786][ T1107] usb 2-1: config 0 has no interface number 0 [ 123.095809][ T1107] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 123.238578][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.275774][ T4643] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.486653][ T4322] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.020743][ T1107] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 125.030457][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 125.038697][ T1107] usb 2-1: Product: syz [ 125.042898][ T1107] usb 2-1: SerialNumber: syz [ 125.052398][ T1107] usb 2-1: config 0 descriptor?? [ 125.068739][ T4322] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.116573][ T4322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.118587][ T1107] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 125.136485][ T4322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 125.166667][ T4322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 125.233614][ T1107] usb 2-1: USB disconnect, device number 5 [ 125.338541][ T4322] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.355147][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.366577][ T4322] usb 5-1: Product: syz [ 125.371365][ T4322] usb 5-1: Manufacturer: syz [ 125.447263][ T4322] usb 5-1: can't set config #1, error -71 [ 125.471847][ T4322] usb 5-1: USB disconnect, device number 3 [ 125.508116][ T4653] loop4: detected capacity change from 0 to 64 [ 126.696214][ T4187] hfs: walked past end of dir [ 126.762470][ T4647] loop2: detected capacity change from 0 to 32768 [ 126.959493][ T2285] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.506722][ T4647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.95 (4647) [ 127.578886][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.755461][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.875123][ T2285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.975286][ T2285] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.991697][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.147155][ T2285] usb 2-1: config 0 descriptor?? [ 128.154442][ T4647] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 128.165968][ T4647] BTRFS info (device loop2): using free space tree [ 128.302147][ T4647] BTRFS info (device loop2): has skinny extents [ 128.920732][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 128.926599][ T4680] futex_wake_op: syz.0.105 tries to shift op by 144; fix this program [ 129.524337][ T4647] BTRFS error (device loop2): open_ctree failed: -12 [ 129.651992][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4174) [ 129.725327][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.802796][ T4701] loop3: detected capacity change from 0 to 16 [ 129.855178][ T4701] erofs: (device loop3): mounted with root inode @ nid 36. [ 129.890243][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.150176][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.554609][ T4706] netlink: 'syz.2.109': attribute type 12 has an invalid length. [ 131.056075][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.284694][ T4710] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 131.346518][ T2285] usbhid 2-1:0.0: can't add hid device: -71 [ 131.352955][ T4710] loop0: detected capacity change from 0 to 512 [ 131.353053][ T2285] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.507690][ T4710] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 132.556533][ T2285] usb 2-1: USB disconnect, device number 6 [ 132.969821][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980681][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.456541][ T4232] Bluetooth: hci2: command 0x0409 tx timeout [ 133.955978][ T4731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.015355][ T4731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.175830][ T4731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.410105][ T4731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.364194][ T4712] chnl_net:caif_netlink_parms(): no params data found [ 135.537366][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 136.511619][ T4748] loop3: detected capacity change from 0 to 8192 [ 136.681359][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.754582][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.815879][ T4712] device bridge_slave_0 entered promiscuous mode [ 136.843336][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.855482][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.866834][ T4712] device bridge_slave_1 entered promiscuous mode [ 136.901568][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.919272][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.964042][ T4712] team0: Port device team_slave_0 added [ 136.985177][ T4712] team0: Port device team_slave_1 added [ 137.606519][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 137.653032][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.690503][ T4761] ODEBUG: Out of memory. ODEBUG disabled [ 137.714919][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.784279][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.996502][ T4191] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.004946][ T4761] syz.0.119 (4761): drop_caches: 2 [ 138.023114][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.031079][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.075670][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.408406][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.862788][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.872892][ T4191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.888531][ T4712] device hsr_slave_0 entered promiscuous mode [ 138.969627][ T4191] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.983002][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.993642][ T4191] usb 2-1: config 0 descriptor?? [ 139.002272][ T4712] device hsr_slave_1 entered promiscuous mode [ 139.015062][ T4712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.026169][ T4712] Cannot create hsr debugfs directory [ 139.287684][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 139.327464][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.760283][ T1161] device hsr_slave_0 left promiscuous mode [ 139.776660][ T1161] device hsr_slave_1 left promiscuous mode [ 139.788795][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.808285][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.826943][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.850861][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.872309][ T1161] device bridge_slave_1 left promiscuous mode [ 139.879923][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.980985][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 140.015326][ T1161] device bridge_slave_0 left promiscuous mode [ 140.021753][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.131345][ T1161] device veth1_macvtap left promiscuous mode [ 140.142738][ T4796] syz.2.127 sent an empty control message without MSG_MORE. [ 140.152749][ T1161] device veth0_macvtap left promiscuous mode [ 140.159932][ T1161] device veth1_vlan left promiscuous mode [ 140.182783][ T1161] device veth0_vlan left promiscuous mode [ 140.749578][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 140.891693][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 140.912386][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 140.928682][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.948578][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.957951][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.047833][ T1161] bond0 (unregistering): Released all slaves [ 141.058854][ T4232] usb 4-1: config 9 has an invalid interface number: 142 but max is 0 [ 141.067177][ T4232] usb 4-1: config 9 has no interface number 0 [ 141.088066][ T4232] usb 4-1: config 9 interface 142 altsetting 209 bulk endpoint 0xF has invalid maxpacket 32 [ 141.098552][ T4232] usb 4-1: config 9 interface 142 altsetting 209 endpoint 0xD has an invalid bInterval 241, changing to 11 [ 141.114597][ T4232] usb 4-1: config 9 interface 142 has no altsetting 0 [ 141.167057][ T4191] usbhid 2-1:0.0: can't add hid device: -71 [ 141.173269][ T4191] usbhid: probe of 2-1:0.0 failed with error -71 [ 141.236839][ T4191] usb 2-1: USB disconnect, device number 7 [ 141.302792][ T4712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.330364][ T4712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.351720][ T4232] usb 4-1: New USB device found, idVendor=06e0, idProduct=f110, bcdDevice=66.44 [ 141.375185][ T4823] device syzkaller0 entered promiscuous mode [ 141.387795][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.408211][ T4712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.415439][ T4232] usb 4-1: Product: syz [ 141.430547][ T4232] usb 4-1: Manufacturer: syz [ 141.440722][ T4232] usb 4-1: SerialNumber: syz [ 141.504274][ T4776] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.678493][ T4712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.851869][ T4232] ti_usb_3410_5052 4-1:9.142: TI USB 3410 1 port adapter converter detected [ 141.898613][ T4232] ti_usb_3410_5052 4-1:9.142: missing endpoints [ 141.928163][ T4232] usb 4-1: USB disconnect, device number 2 [ 141.953429][ T4817] loop0: detected capacity change from 0 to 32768 [ 141.968266][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.015440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.032551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.074195][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.116672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.152121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.161326][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.168498][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.177600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.208163][ T4817] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.793962][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.025256][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.058436][ T4817] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 143.077233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.121331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.170977][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.178142][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.198388][ T4817] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 143.232314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.244466][ T4234] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 143.255095][ T4234] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 143.263041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.285582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.329248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.375610][ T4234] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 112ms [ 143.394999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.414419][ T4234] gfs2: fsid=syz:syz.0: jid=0: Done [ 143.435702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.445051][ T4817] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.485494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.535322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.569192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.869500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.057955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.130783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.440597][ T4817] gfs2: fsid=syz:syz.0: found 1 quota changes [ 144.505213][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.518064][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.556859][ T4185] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 144.556859][ T4185] inode = 11 2339 [ 144.556859][ T4185] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 144.558108][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.648472][ T4185] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 144.726126][ T4185] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 144.789089][ T4185] CPU: 1 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 144.796970][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.807063][ T4185] Call Trace: [ 144.810382][ T4185] [ 144.813344][ T4185] dump_stack_lvl+0x188/0x250 [ 144.818215][ T4185] ? show_regs_print_info+0x20/0x20 [ 144.823468][ T4185] ? load_image+0x400/0x400 [ 144.828020][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 144.833268][ T4185] gfs2_assert_warn_i+0x18f/0x2c0 [ 144.838344][ T4185] gfs2_quota_cleanup+0x4b4/0x6a0 [ 144.843603][ T4185] gfs2_make_fs_ro+0x440/0x620 [ 144.848589][ T4185] ? __might_sleep+0xf0/0xf0 [ 144.853303][ T4185] ? gfs2_dinode_out+0xb00/0xb00 [ 144.858274][ T4185] ? _raw_spin_unlock+0x24/0x40 [ 144.863163][ T4185] ? gfs2_glock_nq+0xcb0/0x1550 [ 144.868078][ T4185] gfs2_withdraw+0x610/0x1490 [ 144.872954][ T4185] ? gfs2_lm+0x240/0x240 [ 144.877238][ T4185] ? __schedule+0x11f7/0x43c0 [ 144.881952][ T4185] ? gfs2_freeze_lock+0x52/0xc0 [ 144.886839][ T4185] ? gfs2_consist_inode_i+0xc0/0xe0 [ 144.892075][ T4185] gfs2_inode_refresh+0xb64/0xff0 [ 144.897270][ T4185] ? do_promote+0x71a/0xab0 [ 144.901950][ T4185] ? gfs2_inode_metasync+0xf0/0xf0 [ 144.907096][ T4185] ? __lock_acquire+0x7d10/0x7d10 [ 144.912219][ T4185] inode_go_lock+0x127/0x470 [ 144.916845][ T4185] do_promote+0x741/0xab0 [ 144.921227][ T4185] finish_xmote+0x4df/0xb00 [ 144.925770][ T4185] do_xmote+0x7b6/0x1120 [ 144.930156][ T4185] gfs2_glock_nq+0xc7a/0x1550 [ 144.935029][ T4185] do_sync+0x4ab/0xc40 [ 144.939154][ T4185] ? slot_put+0x1e0/0x1e0 [ 144.943518][ T4185] ? __lock_acquire+0x7d10/0x7d10 [ 144.948578][ T4185] ? do_raw_spin_lock+0x128/0x2f0 [ 144.953643][ T4185] ? do_sync+0x4a3/0xc40 [ 144.957920][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 144.963241][ T4185] gfs2_quota_sync+0x32c/0x700 [ 144.968138][ T4185] gfs2_sync_fs+0x48/0xb0 [ 144.972500][ T4185] sync_filesystem+0xe6/0x220 [ 144.977307][ T4185] generic_shutdown_super+0x6b/0x300 [ 144.982722][ T4185] kill_block_super+0x7c/0xe0 [ 144.987552][ T4185] deactivate_locked_super+0x93/0xf0 [ 144.993003][ T4185] cleanup_mnt+0x42d/0x4e0 [ 144.997474][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 145.002726][ T4185] task_work_run+0x125/0x1a0 [ 145.007551][ T4185] exit_to_user_mode_loop+0x10f/0x130 [ 145.012955][ T4185] exit_to_user_mode_prepare+0xee/0x180 [ 145.018547][ T4185] syscall_exit_to_user_mode+0x16/0x40 [ 145.024148][ T4185] do_syscall_64+0x58/0xa0 [ 145.028624][ T4185] ? clear_bhb_loop+0x30/0x80 [ 145.033344][ T4185] ? clear_bhb_loop+0x30/0x80 [ 145.038154][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.044262][ T4185] RIP: 0033:0x7f86ab1d7017 [ 145.048886][ T4185] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 145.069079][ T4185] RSP: 002b:00007ffe94472798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 145.077732][ T4185] RAX: 0000000000000000 RBX: 00007f86ab26b120 RCX: 00007f86ab1d7017 [ 145.086017][ T4185] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe94472850 [ 145.094027][ T4185] RBP: 00007ffe94472850 R08: 00007ffe94473850 R09: 00000000ffffffff [ 145.102132][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe944738e0 [ 145.110311][ T4185] R13: 00007f86ab26b120 R14: 0000000000022655 R15: 00007ffe94473920 [ 145.118351][ T4185] [ 145.119169][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.174969][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.273532][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.312247][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.344435][ T4712] device veth0_vlan entered promiscuous mode [ 145.351794][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.365516][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.403949][ T4712] device veth1_vlan entered promiscuous mode [ 145.421490][ T4859] loop3: detected capacity change from 0 to 32768 [ 145.476146][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.494177][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.514559][ T2285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.518546][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.588407][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.607646][ T4859] XFS (loop3): Mounting V5 Filesystem [ 145.652955][ T4712] device veth0_macvtap entered promiscuous mode [ 145.692202][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.742607][ T4712] device veth1_macvtap entered promiscuous mode [ 145.809729][ T4859] XFS (loop3): Ending clean mount [ 145.839149][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.860935][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.885035][ T26] audit: type=1800 audit(1777011349.241:3): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.139" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 145.902744][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.906118][ T2285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.953293][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.960076][ T2285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.986364][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.003674][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.012411][ T4900] XFS (loop3): User initiated shutdown received. [ 146.025215][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.029041][ T4900] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 146.035562][ T2285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.080719][ T4900] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 146.113707][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.125214][ T4185] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 146.134032][ T4185] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 146.144945][ T2285] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.158185][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.167702][ T2285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.176851][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.196175][ T2285] usb 3-1: config 0 descriptor?? [ 146.197278][ T4185] gfs2: fsid=syz:syz.0: File system withdrawn [ 146.211546][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.218839][ T4185] CPU: 0 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 146.227499][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.228946][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.246431][ T4185] Call Trace: [ 146.249737][ T4185] [ 146.252921][ T4185] dump_stack_lvl+0x188/0x250 [ 146.257992][ T4185] ? kobject_uevent_env+0x371/0x890 [ 146.263408][ T4185] ? show_regs_print_info+0x20/0x20 [ 146.268649][ T4185] ? load_image+0x400/0x400 [ 146.273184][ T4185] ? kobject_uevent_env+0x371/0x890 [ 146.278417][ T4185] ? lockref_put_or_lock+0x6e/0xb0 [ 146.283570][ T4185] gfs2_withdraw+0x1149/0x1490 [ 146.288480][ T4185] ? gfs2_lm+0x240/0x240 [ 146.292845][ T4185] ? __schedule+0x11f7/0x43c0 [ 146.297663][ T4185] ? gfs2_consist_inode_i+0xc0/0xe0 [ 146.302999][ T4185] gfs2_inode_refresh+0xb64/0xff0 [ 146.308059][ T4185] ? do_promote+0x71a/0xab0 [ 146.312594][ T4185] ? gfs2_inode_metasync+0xf0/0xf0 [ 146.317726][ T4185] ? __lock_acquire+0x7d10/0x7d10 [ 146.322794][ T4185] inode_go_lock+0x127/0x470 [ 146.327674][ T4185] do_promote+0x741/0xab0 [ 146.332346][ T4185] finish_xmote+0x4df/0xb00 [ 146.337170][ T4185] do_xmote+0x7b6/0x1120 [ 146.341562][ T4185] gfs2_glock_nq+0xc7a/0x1550 [ 146.346470][ T4185] do_sync+0x4ab/0xc40 [ 146.350770][ T4185] ? slot_put+0x1e0/0x1e0 [ 146.355154][ T4185] ? __lock_acquire+0x7d10/0x7d10 [ 146.360198][ T4185] ? do_raw_spin_lock+0x128/0x2f0 [ 146.365262][ T4185] ? do_sync+0x4a3/0xc40 [ 146.369530][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 146.374768][ T4185] gfs2_quota_sync+0x32c/0x700 [ 146.379694][ T4185] gfs2_sync_fs+0x48/0xb0 [ 146.384053][ T4185] sync_filesystem+0xe6/0x220 [ 146.388774][ T4185] generic_shutdown_super+0x6b/0x300 [ 146.394084][ T4185] kill_block_super+0x7c/0xe0 [ 146.398786][ T4185] deactivate_locked_super+0x93/0xf0 [ 146.404095][ T4185] cleanup_mnt+0x42d/0x4e0 [ 146.408633][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 146.413940][ T4185] task_work_run+0x125/0x1a0 [ 146.418644][ T4185] exit_to_user_mode_loop+0x10f/0x130 [ 146.424226][ T4185] exit_to_user_mode_prepare+0xee/0x180 [ 146.429885][ T4185] syscall_exit_to_user_mode+0x16/0x40 [ 146.435460][ T4185] do_syscall_64+0x58/0xa0 [ 146.439902][ T4185] ? clear_bhb_loop+0x30/0x80 [ 146.444604][ T4185] ? clear_bhb_loop+0x30/0x80 [ 146.449581][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.455510][ T4185] RIP: 0033:0x7f86ab1d7017 [ 146.459960][ T4185] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 146.461133][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 146.479686][ T4185] RSP: 002b:00007ffe94472798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 146.479723][ T4185] RAX: 0000000000000000 RBX: 00007f86ab26b120 RCX: 00007f86ab1d7017 [ 146.479737][ T4185] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe94472850 [ 146.479750][ T4185] RBP: 00007ffe94472850 R08: 00007ffe94473850 R09: 00000000ffffffff [ 146.479764][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe944738e0 [ 146.479776][ T4185] R13: 00007f86ab26b120 R14: 0000000000022655 R15: 00007ffe94473920 [ 146.479806][ T4185] [ 146.546695][ T4191] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.557226][ T4188] XFS (loop3): Unmounting Filesystem [ 146.565277][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.601393][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.626348][ T4712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.666409][ T4712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.676438][ T4712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.689724][ T4712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.850158][ T4191] usb 2-1: Using ep0 maxpacket: 32 [ 146.955980][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.979138][ T4191] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.995617][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.003931][ T4191] usb 2-1: config 0 has no interface number 0 [ 147.060065][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.094919][ T4911] device syzkaller0 entered promiscuous mode [ 147.123888][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.135299][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.196131][ T4191] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 147.224154][ T4191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.265020][ T4191] usb 2-1: Product: syz [ 147.269815][ T4191] usb 2-1: Manufacturer: syz [ 147.274454][ T4191] usb 2-1: SerialNumber: syz [ 147.306473][ T4191] usb 2-1: config 0 descriptor?? [ 147.364546][ T4191] smsc95xx v2.0.0 [ 147.458711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.040962][ T4929] loop3: detected capacity change from 0 to 8192 [ 148.143145][ T4940] 9pnet: Could not find request transport: fd0x0000000000000007 [ 148.305033][ T4191] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 148.551304][ T4191] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 149.062833][ T4191] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 149.090824][ T4191] usb 2-1: USB disconnect, device number 8 [ 149.188010][ T4948] tipc: Started in network mode [ 149.193560][ T4948] tipc: Node identity ac14140f, cluster identity 4711 [ 149.201907][ T4948] tipc: New replicast peer: 255.255.255.255 [ 149.208880][ T4948] tipc: Enabled bearer , priority 10 [ 149.887623][ T4947] loop0: detected capacity change from 0 to 512 [ 150.019395][ T4947] EXT4-fs (loop0): Ignoring removed orlov option [ 150.088012][ T4947] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.098853][ T2285] usbhid 3-1:0.0: can't add hid device: -71 [ 150.108587][ T2285] usbhid: probe of 3-1:0.0 failed with error -71 [ 150.128010][ T4947] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 150.132080][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 150.167071][ T2285] usb 3-1: USB disconnect, device number 2 [ 150.221377][ T4947] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.293022][ T4191] tipc: Node number set to 2886997007 [ 150.338069][ T4947] EXT4-fs (loop0): 1 truncate cleaned up [ 150.343905][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 150.401519][ T4965] loop1: detected capacity change from 0 to 256 [ 150.528164][ T4965] FAT-fs (loop1): Directory bread(block 64) failed [ 150.572349][ T4965] FAT-fs (loop1): Directory bread(block 65) failed [ 150.579229][ T4965] FAT-fs (loop1): Directory bread(block 66) failed [ 150.622717][ T4974] EXT4-fs (loop0): shut down requested (0) [ 150.654929][ T4965] FAT-fs (loop1): Directory bread(block 67) failed [ 150.661609][ T4965] FAT-fs (loop1): Directory bread(block 68) failed [ 150.728076][ T4965] FAT-fs (loop1): Directory bread(block 69) failed [ 150.742078][ T4978] device syzkaller0 entered promiscuous mode [ 150.765148][ T4965] FAT-fs (loop1): Directory bread(block 70) failed [ 150.805814][ T4965] FAT-fs (loop1): Directory bread(block 71) failed [ 150.878205][ T4965] FAT-fs (loop1): Directory bread(block 72) failed [ 150.899685][ T4965] FAT-fs (loop1): Directory bread(block 73) failed [ 151.018151][ T4965] attempt to access beyond end of device [ 151.018151][ T4965] loop1: rw=524288, want=1196, limit=256 [ 151.063995][ T4965] attempt to access beyond end of device [ 151.063995][ T4965] loop1: rw=0, want=1196, limit=256 [ 151.149627][ T26] audit: type=1800 audit(1777011354.172:4): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 152.348514][ T5006] 9pnet: Could not find request transport: fd0x0000000000000007 [ 153.256935][ T5013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 154.355841][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.672383][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 154.808322][ T5030] tipc: Started in network mode [ 154.813474][ T5030] tipc: Node identity ac14140f, cluster identity 4711 [ 154.820468][ T5030] tipc: New replicast peer: 255.255.255.255 [ 154.827124][ T5030] tipc: Enabled bearer , priority 10 [ 155.306824][ T5007] loop2: detected capacity change from 0 to 32768 [ 155.406210][ T7] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.417628][ T7] usb 4-1: config 0 has no interface number 0 [ 155.623530][ T7] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.660498][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.588314][ T4322] tipc: Node number set to 2886997007 [ 156.619062][ T7] usb 4-1: config 0 descriptor?? [ 156.724536][ T7] usb 4-1: can't set config #0, error -71 [ 156.774807][ T5057] device syzkaller0 entered promiscuous mode [ 156.803905][ T7] usb 4-1: USB disconnect, device number 3 [ 156.941024][ T5051] sctp: failed to load transform for md5: -2 [ 157.059982][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 157.811421][ T5109] tipc: Started in network mode [ 157.816618][ T5109] tipc: Node identity ac14140f, cluster identity 4711 [ 157.824701][ T5109] tipc: New replicast peer: 255.255.255.255 [ 157.832001][ T5109] tipc: Enabled bearer , priority 10 [ 158.466508][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 158.715637][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 158.835729][ T5116] device team1 entered promiscuous mode [ 158.914821][ T4694] tipc: Node number set to 2886997007 [ 159.238075][ T4694] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 159.438377][ T4322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.802065][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 159.941424][ T4322] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.137890][ T4322] usb 3-1: config 0 has no interface number 0 [ 160.532198][ T4322] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 160.564114][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.577508][ T5152] device vlan2 entered promiscuous mode [ 160.583403][ T5152] device bridge0 entered promiscuous mode [ 160.618062][ T4322] usb 3-1: Product: syz [ 160.641269][ T4322] usb 3-1: Manufacturer: syz [ 160.662763][ T4322] usb 3-1: SerialNumber: syz [ 160.730574][ T4322] usb 3-1: config 0 descriptor?? [ 160.825549][ T4322] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 160.945110][ T4694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.987890][ T4694] usb 2-1: not running at top speed; connect to a high speed hub [ 161.084119][ T4694] usb 2-1: config 64 has an invalid interface number: 72 but max is 0 [ 161.092532][ T4694] usb 2-1: config 64 has no interface number 0 [ 161.116054][ T4694] usb 2-1: config 64 interface 72 altsetting 2 has an invalid endpoint with address 0xF6, skipping [ 161.153594][ T4694] usb 2-1: config 64 interface 72 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 161.385320][ T4694] usb 2-1: config 64 interface 72 has no altsetting 0 [ 161.703189][ T5171] tipc: Enabling of bearer rejected, already enabled [ 162.293041][ T4322] gspca_spca1528: reg_w err -110 [ 162.334899][ T4322] spca1528: probe of 3-1:0.1 failed with error -110 [ 162.564975][ T5183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 162.590772][ T4694] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=fc.11 [ 162.626290][ T4694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.653371][ T4191] usb 3-1: USB disconnect, device number 3 [ 163.670248][ T4694] usb 2-1: can't set config #64, error -71 [ 163.680775][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.691729][ T4694] usb 2-1: USB disconnect, device number 9 [ 164.010415][ T5210] delete_channel: no stack [ 165.127376][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 165.146113][ T4322] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 165.155360][ T4694] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.159486][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.181454][ T4322] usb 4-1: config 0 descriptor?? [ 165.209065][ T5186] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 165.673053][ T5219] device vlan2 entered promiscuous mode [ 165.678671][ T5219] device bridge0 entered promiscuous mode [ 166.341738][ T4322] hid (null): global environment stack underflow [ 166.348139][ T4322] hid (null): unknown global tag 0xe [ 166.354975][ T4322] hid (null): report_id 2029225129 is invalid [ 166.362087][ T4322] hid (null): bogus close delimiter [ 166.373626][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.380635][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.387748][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.395201][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.403891][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.411113][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.418393][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.425901][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.433326][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.485173][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.532351][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.768928][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.776058][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.828578][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.871107][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 166.953804][ T5232] tipc: Started in network mode [ 166.958919][ T5232] tipc: Node identity ac14140f, cluster identity 4711 [ 166.966957][ T5232] tipc: New replicast peer: 255.255.255.255 [ 166.973776][ T5232] tipc: Enabled bearer , priority 10 [ 167.506244][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.513332][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.520306][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.527471][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.534528][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.541806][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.548806][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.555944][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.583074][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.648942][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 167.760685][ T5249] batman_adv: Cannot find parent device [ 167.874006][ T5247] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 168.170298][ T2285] tipc: Node number set to 2886997007 [ 168.426306][ T5251] loop2: detected capacity change from 0 to 512 [ 168.502763][ T5251] EXT4-fs (loop2): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 169.344288][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.351250][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.376302][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.383579][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.419156][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.426101][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 169.451113][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.435968][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.443010][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.484625][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.492758][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.856804][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.864129][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.871483][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.879067][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.903442][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.919926][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.933708][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.949498][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.964287][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998641][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998702][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998727][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998752][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998775][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998799][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998822][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998845][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998868][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998891][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.998915][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x4 [ 170.999734][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.999761][ T4322] wacom 0003:056A:0084.0002: unknown main item tag 0x0 [ 170.999786][ T4322] wacom 0003:056A:0084.0002: global environment stack underflow [ 170.999802][ T4322] wacom 0003:056A:0084.0002: item 0 4 1 11 parsing failed [ 171.003220][ T4322] wacom 0003:056A:0084.0002: parse failed [ 171.003256][ T4322] wacom: probe of 0003:056A:0084.0002 failed with error -22 [ 171.058966][ T4322] usb 4-1: USB disconnect, device number 4 [ 171.438871][ T5275] loop1: detected capacity change from 0 to 32768 [ 171.490055][ T5275] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.218 (5275) [ 172.023168][ T5280] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 172.057972][ T5280] loop0: detected capacity change from 0 to 512 [ 172.114734][ T5275] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 172.114802][ T5275] BTRFS info (device loop1): enabling disk space caching [ 172.114821][ T5275] BTRFS info (device loop1): force clearing of disk cache [ 172.115088][ T5275] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.115176][ T5275] BTRFS info (device loop1): use zstd compression, level 3 [ 172.115198][ T5275] BTRFS info (device loop1): disk space caching is enabled [ 172.115214][ T5275] BTRFS info (device loop1): has skinny extents [ 172.184720][ T5286] syz.3.222 uses obsolete (PF_INET,SOCK_PACKET) [ 172.258397][ T5280] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 172.511971][ T5275] BTRFS info (device loop1): enabling ssd optimizations [ 172.517443][ T5275] BTRFS info (device loop1): clearing free space tree [ 172.517875][ T5275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.518103][ T5275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.329065][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.329105][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.332848][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.332879][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.815103][ T5335] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 173.932335][ T5338] loop3: detected capacity change from 0 to 512 [ 174.363062][ T5338] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 177.668889][ T5360] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.303698][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.328599][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 179.368192][ T5360] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 179.379948][ T5406] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.399097][ T5406] loop0: detected capacity change from 0 to 512 [ 179.405817][ T5360] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 179.422639][ T5360] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.432761][ T5360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.444002][ T5360] usb 2-1: config 0 descriptor?? [ 179.468436][ T5406] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 179.498678][ T5360] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 179.691092][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.712253][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.740935][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.800467][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.844643][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.894310][ T23] usb 3-1: config 0 descriptor?? [ 179.898417][ T5360] usb 2-1: USB disconnect, device number 11 [ 180.163808][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 181.572041][ T5435] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 181.618409][ T5435] loop1: detected capacity change from 0 to 512 [ 181.677208][ T5435] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 181.880041][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.244'. [ 181.935720][ T4694] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.488542][ T4694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 182.724084][ T4694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.176754][ T4694] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 183.230538][ T4694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.334618][ T4694] usb 1-1: config 0 descriptor?? [ 183.558094][ T2285] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 183.621044][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 183.627093][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 183.672721][ T23] usb 3-1: USB disconnect, device number 4 [ 184.019312][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 184.052110][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 184.882623][ T5468] loop2: detected capacity change from 0 to 32768 [ 185.171322][ T2285] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 185.186596][ T2285] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 185.199536][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.209888][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.219609][ T2285] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 185.233830][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.243290][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.253981][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.383183][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.390702][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.398338][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.406300][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.413443][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.420964][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.428439][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.435574][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.443581][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.451030][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.458172][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.465648][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.473129][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.497853][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.517339][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.525088][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.532354][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.543020][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.551824][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.575578][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.694737][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.714439][ T5468] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.248 (5468) [ 185.754696][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.823231][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.830726][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.838683][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.903177][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 185.959451][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.243788][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.423129][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.625732][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.633025][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.895487][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.903499][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.911350][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.920481][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.943125][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.950879][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.958670][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 186.976456][ T5364] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.998717][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.006587][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.036816][ T5503] tipc: Enabling of bearer rejected, already enabled [ 187.077994][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.090164][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.097935][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.105510][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.221195][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.228909][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.236766][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.244376][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.252294][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.260430][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x7 [ 187.268673][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.479327][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.492091][ T2285] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 187.506554][ T2285] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input8 [ 187.520089][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.582998][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.593517][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 187.603103][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.324543][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.352785][ T5510] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 188.373673][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.397321][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.423288][ T5510] loop0: detected capacity change from 0 to 512 [ 188.431202][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.438456][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.478072][ T5510] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 188.539426][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.756880][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.765514][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.773752][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.781120][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.788703][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.793313][ T5364] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 188.796286][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 188.832461][ T5364] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 188.859854][ T5364] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.881620][ T5364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.010441][ T5364] usb 6-1: config 0 descriptor?? [ 189.055917][ T5364] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 189.700878][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.709056][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.716554][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.723743][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.730999][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.738399][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.745723][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 189.752958][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.727726][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.735099][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.742400][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.749982][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.757189][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.764392][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.771566][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.778919][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.786541][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.793838][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.801637][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.809345][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.816734][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 190.824227][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.114813][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.122497][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.130267][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.142206][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.149877][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.157375][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.165182][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.172634][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.179898][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.187217][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.199515][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.357786][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.365838][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.708511][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.718264][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.725910][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.735911][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.743431][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 191.750948][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.858444][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.866005][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.873589][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.881853][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.890262][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.897722][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.904901][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.912500][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.919840][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.926984][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.934290][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.941553][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.948840][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.956022][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 192.963489][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.169660][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.298586][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.310286][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.320699][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.330568][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.338938][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.348948][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.356770][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.364147][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.374688][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.382635][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.392766][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.401333][ T4694] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 193.408942][ T4694] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 167/235 [ 193.420884][ T4694] kovaplus 0003:1E7D:2D50.0003: parse failed [ 193.427799][ T4694] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -22 [ 193.449178][ T4694] usb 1-1: USB disconnect, device number 2 [ 193.658008][ T5468] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.663875][ T4191] usb 6-1: USB disconnect, device number 2 [ 193.669047][ T5468] BTRFS info (device loop2): enabling disk space caching [ 193.681587][ T5468] BTRFS info (device loop2): force clearing of disk cache [ 193.688771][ T5468] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.699433][ T5468] BTRFS info (device loop2): use zstd compression, level 3 [ 193.706981][ T5468] BTRFS info (device loop2): disk space caching is enabled [ 193.714452][ T5468] BTRFS info (device loop2): has skinny extents [ 193.730582][ T2285] input: failed to attach handler kbd to device input8, error: -5 [ 195.075981][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 195.082018][ T5468] BTRFS error (device loop2): open_ctree failed: -12 [ 195.092857][ T4174] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4174) [ 195.112476][ T5360] Bluetooth: hci4: command 0x0406 tx timeout [ 195.118901][ T5360] Bluetooth: hci3: command 0x0406 tx timeout [ 195.125362][ T5360] Bluetooth: hci0: command 0x0406 tx timeout [ 195.925958][ T2285] usb 2-1: USB disconnect, device number 12 [ 196.213572][ T5613] input: syz1 as /devices/virtual/input/input9 [ 198.721569][ T5633] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 198.781247][ T5633] loop3: detected capacity change from 0 to 512 [ 198.861202][ T5633] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 199.302191][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.309461][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.634349][ T2285] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.479583][ T5650] tipc: Enabling of bearer rejected, already enabled [ 206.008909][ T5690] loop3: detected capacity change from 0 to 512 [ 206.053087][ T5690] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 206.471234][ T5707] tipc: Enabling of bearer rejected, already enabled [ 208.209670][ T5600] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.036929][ T5600] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 210.063767][ T5600] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 210.080475][ T5751] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 210.117801][ T5751] loop0: detected capacity change from 0 to 512 [ 210.126960][ T5600] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.143866][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.199159][ T5600] usb 4-1: config 0 descriptor?? [ 210.226293][ T5751] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 210.253224][ T5600] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 210.340719][ T5756] tipc: Enabling of bearer rejected, already enabled [ 211.581579][ T4229] usb 4-1: USB disconnect, device number 5 [ 214.300453][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 214.308078][ T5600] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.848536][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.954641][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.965463][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.979058][ T13] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.356748][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.408197][ T13] usb 6-1: config 0 descriptor?? [ 215.465800][ T5600] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.477897][ T13] usb 6-1: can't set config #0, error -71 [ 215.487400][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.522708][ T13] usb 6-1: USB disconnect, device number 3 [ 215.592300][ T5600] usb 1-1: Product: syz [ 215.961625][ T5600] usb 1-1: can't set config #1, error -71 [ 215.971329][ T5600] usb 1-1: USB disconnect, device number 3 [ 216.072187][ T5803] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 216.166744][ T5803] loop1: detected capacity change from 0 to 512 [ 216.248460][ T5803] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 217.132294][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 218.396747][ T4229] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 218.408556][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 218.425370][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.435356][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.494597][ T4229] usb 1-1: config 0 descriptor?? [ 218.730157][ T4229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 220.694240][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.128261][ T4229] usb 1-1: USB disconnect, device number 4 [ 221.941085][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.059737][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.107937][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.257391][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.271058][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.302085][ T23] usb 2-1: config 0 descriptor?? [ 223.672555][ T23] usb 2-1: can't set config #0, error -71 [ 223.747377][ T5877] tipc: Enabling of bearer rejected, already enabled [ 225.866160][ T23] usb 2-1: USB disconnect, device number 14 [ 228.619957][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 229.293596][ T13] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 229.335462][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 229.366225][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.384145][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.476924][ T5904] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 229.548741][ T13] usb 3-1: config 0 descriptor?? [ 229.599768][ T5904] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 229.786018][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.088327][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.268875][ T4694] usb 3-1: USB disconnect, device number 5 [ 231.494579][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.529091][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.577229][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.602185][ T5918] tipc: Enabling of bearer rejected, already enabled [ 231.610382][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.635552][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.677759][ T13] usb 2-1: config 0 descriptor?? [ 231.931529][ T5915] loop0: detected capacity change from 0 to 40427 [ 231.946515][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 232.061952][ T5915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.192957][ T5915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.170936][ T5936] attempt to access beyond end of device [ 234.170936][ T5936] loop0: rw=2049, want=78272, limit=40427 [ 235.068467][ T4185] attempt to access beyond end of device [ 235.068467][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 235.391560][ T5922] loop3: detected capacity change from 0 to 32768 [ 235.491105][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 235.497230][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 235.551982][ T13] usb 2-1: USB disconnect, device number 15 [ 237.019258][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 237.074167][ T5971] tipc: Enabling of bearer rejected, already enabled [ 237.641304][ T13] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 237.665702][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 237.836266][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.870107][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.891935][ T13] usb 2-1: config 0 descriptor?? [ 237.947017][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 238.333441][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.601346][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 238.652788][ T2285] usb 2-1: USB disconnect, device number 16 [ 238.682389][ T5987] loop5: detected capacity change from 0 to 256 [ 238.700560][ T5987] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 238.714604][ T5987] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 238.732832][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.751819][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.762751][ T5987] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 238.770696][ T5987] UDF-fs: Scanning with blocksize 512 failed [ 238.787000][ T5987] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 238.820746][ T5987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.853573][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 238.875355][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.896306][ T13] usb 1-1: SerialNumber: syz [ 238.979896][ T13] usb 1-1: 0:2 : does not exist [ 239.045732][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 239.265486][ T4232] usb 1-1: USB disconnect, device number 5 [ 240.665733][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.702808][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.924761][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.980266][ T6008] loop1: detected capacity change from 0 to 512 [ 240.987235][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.997965][ T6010] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 240.999417][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.018724][ T6010] loop0: detected capacity change from 0 to 512 [ 241.029085][ T23] usb 4-1: config 0 descriptor?? [ 242.040927][ T6010] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 242.052524][ T6008] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 242.108595][ T23] usb 4-1: can't set config #0, error -71 [ 242.119189][ T23] usb 4-1: USB disconnect, device number 6 [ 245.191810][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 247.351032][ T6083] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 247.444712][ T6083] loop1: detected capacity change from 0 to 512 [ 247.508183][ T6083] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 247.943070][ T6094] loop0: detected capacity change from 0 to 512 [ 248.021724][ T6094] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 249.508413][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 249.896033][ T6108] tipc: Enabling of bearer rejected, already enabled [ 252.452789][ T6131] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 252.547137][ T6131] loop0: detected capacity change from 0 to 512 [ 252.616494][ T6131] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 252.934762][ T6143] loop5: detected capacity change from 0 to 512 [ 252.990104][ T6143] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 253.123069][ T4423] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.401570][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 253.700796][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.712479][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.726139][ T4423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.749091][ T4423] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.761852][ T4423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.039334][ T4423] usb 3-1: config 0 descriptor?? [ 254.857339][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 257.444323][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 257.555777][ T6183] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 257.597283][ T6183] loop0: detected capacity change from 0 to 512 [ 257.634171][ T6183] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 257.782262][ T4423] usbhid 3-1:0.0: can't add hid device: -71 [ 257.788887][ T4423] usbhid: probe of 3-1:0.0 failed with error -71 [ 257.820837][ T4423] usb 3-1: USB disconnect, device number 6 [ 257.845480][ T6187] loop1: detected capacity change from 0 to 512 [ 257.903193][ T6187] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 263.117088][ T6213] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 263.150138][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 263.177910][ T6213] loop1: detected capacity change from 0 to 512 [ 263.287291][ T6213] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 263.823598][ T6228] loop5: detected capacity change from 0 to 512 [ 263.845928][ T6228] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 263.939948][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.946632][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.460282][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 266.801732][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 266.864305][ T6253] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 266.968907][ T6253] loop1: detected capacity change from 0 to 512 [ 267.525217][ T6253] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 268.235998][ T6266] loop5: detected capacity change from 0 to 512 [ 268.287756][ T6266] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 269.562724][ T6280] device gre1 entered promiscuous mode [ 270.835975][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 272.272505][ T4267] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.846060][ T6325] tipc: Enabling of bearer rejected, already enabled [ 273.002418][ T6329] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 273.058373][ T6329] loop5: detected capacity change from 0 to 512 [ 273.114005][ T6329] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 273.341129][ T4267] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 273.362299][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 273.378787][ T4267] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.440882][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 273.551846][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.561988][ T4267] usb 3-1: config 0 descriptor?? [ 273.610343][ T4267] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 274.488233][ T23] usb 3-1: USB disconnect, device number 7 [ 274.753828][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 274.908082][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.926361][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.950914][ T6344] device bridge_slave_0 entered promiscuous mode [ 274.973353][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.992156][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.022584][ T6344] device bridge_slave_1 entered promiscuous mode [ 275.410107][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.604975][ T4415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.655512][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.757916][ T6344] team0: Port device team_slave_0 added [ 275.783656][ T6344] team0: Port device team_slave_1 added [ 275.834003][ T4415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.925076][ T4415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.985101][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.005839][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.048795][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.062830][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.070232][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.114387][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.150768][ T4415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.242816][ T6344] device hsr_slave_0 entered promiscuous mode [ 276.254458][ T6344] device hsr_slave_1 entered promiscuous mode [ 276.717285][ T5600] Bluetooth: hci4: command 0x0409 tx timeout [ 276.766532][ T4415] tipc: Disabling bearer [ 276.773082][ T4415] tipc: Left network mode [ 276.892907][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.490'. [ 277.016206][ T6344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.105658][ T6344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.144154][ T6344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.685730][ T6344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.848998][ T6344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.886881][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.900942][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.938411][ T6344] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.946772][ T2285] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 277.982557][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.003296][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.068348][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.075530][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.084800][ T6411] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 278.104650][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.129405][ T6411] loop1: detected capacity change from 0 to 512 [ 278.216062][ T6344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.227779][ T6344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.270852][ T6411] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 278.329981][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.350669][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.366753][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.374028][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.393896][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.395835][ T2285] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 278.402968][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.413905][ T2285] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 278.469763][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.496136][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.508423][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.552366][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.599688][ T2285] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.616002][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.618465][ T2285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.635455][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.640338][ T2285] usb 6-1: config 0 descriptor?? [ 278.650164][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.659643][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.697850][ T2285] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 278.699068][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.776870][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.885011][ T6344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.888366][ T5360] Bluetooth: hci4: command 0x041b tx timeout [ 278.915127][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.963552][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.578403][ T2285] usb 6-1: USB disconnect, device number 4 [ 280.342673][ T4415] device hsr_slave_0 left promiscuous mode [ 280.359844][ T4415] device hsr_slave_1 left promiscuous mode [ 280.437225][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.468866][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.485084][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.522011][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.538020][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.503'. [ 280.574333][ T4415] device bridge_slave_1 left promiscuous mode [ 280.583762][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.608957][ T4415] device bridge_slave_0 left promiscuous mode [ 280.615244][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.648479][ T4415] device veth1_macvtap left promiscuous mode [ 280.665575][ T4415] device veth0_macvtap left promiscuous mode [ 280.681856][ T4415] device veth1_vlan left promiscuous mode [ 280.700926][ T4415] device veth0_vlan left promiscuous mode [ 281.204861][ T5360] Bluetooth: hci4: command 0x040f tx timeout [ 283.251605][ T4415] team0 (unregistering): Port device team_slave_1 removed [ 283.417940][ T5360] Bluetooth: hci4: command 0x0419 tx timeout [ 283.467859][ T4415] team0 (unregistering): Port device team_slave_0 removed [ 283.491410][ T4415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.517178][ T4415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.694900][ T4415] bond0 (unregistering): Released all slaves [ 283.807077][ T6479] tipc: Enabling of bearer rejected, already enabled [ 285.930327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.392946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.452372][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 286.532402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.644867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.823697][ T6344] device veth0_vlan entered promiscuous mode [ 286.898455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.992670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.242211][ T6344] device veth1_vlan entered promiscuous mode [ 287.326105][ T6504] ------------[ cut here ]------------ [ 287.382660][ T6504] WARNING: CPU: 0 PID: 6504 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 287.391775][ T6504] Modules linked in: [ 287.396305][ T6504] CPU: 0 PID: 6504 Comm: syz.2.516 Not tainted syzkaller #0 [ 287.403643][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.413964][ T6504] RIP: 0010:hugetlb_split+0x237/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.419783][ T6504] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 04 24 8a 8d 80 e1 07 80 c1 03 38 c1 [ 287.517410][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.543465][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.587591][ T6517] loop0: detected capacity change from 0 to 512 [ 287.594218][ T6504] RSP: 0018:ffffc90005317b50 EFLAGS: 00010287 [ 287.610009][ T6504] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000 [ 287.703317][ T6504] RDX: ffffc90004455000 RSI: 0000000000000486 RDI: 0000000000000487 [ 287.711369][ T6504] RBP: 0000000000000000 R08: ffff88807dfe62bf R09: 1ffff1100fbfcc57 [ 287.823065][ T6504] R10: dffffc0000000000 R11: ffffed100fbfcc58 R12: ffff888079fee4c0 [ 287.896619][ T6504] R13: dffffc0000000000 R14: ffff888079fee420 R15: ffff8880233530c0 [ 287.904759][ T6504] FS: 00007f07c45546c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 288.018770][ T6504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.050948][ T6504] CR2: 00007ffb738b1000 CR3: 000000005533a000 CR4: 00000000003506f0 [ 288.087622][ T6504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.095669][ T6504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.151901][ T6504] Call Trace: [ 288.155252][ T6504] [ 288.158301][ T6504] __vma_adjust+0x2b6/0x1c10 [ 288.183969][ T6504] __split_vma+0x34b/0x410 [ 288.188474][ T6504] mbind_range+0x593/0x990 [ 288.193417][ T6504] __se_sys_mbind+0x51c/0x770 [ 288.247933][ T6504] ? __x64_sys_mbind+0xf0/0xf0 [ 288.252954][ T6504] ? lock_chain_count+0x20/0x20 [ 288.258103][ T6504] ? __x64_sys_mbind+0x1d/0xf0 [ 288.287414][ T6504] do_syscall_64+0x4c/0xa0 [ 288.295723][ T6504] ? clear_bhb_loop+0x30/0x80 [ 288.312146][ T6504] ? clear_bhb_loop+0x30/0x80 [ 288.318945][ T6504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.337683][ T6504] RIP: 0033:0x7f07c62fadd9 [ 288.342717][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.419438][ T6504] RSP: 002b:00007f07c4554028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 288.427942][ T6504] RAX: ffffffffffffffda RBX: 00007f07c6573fa0 RCX: 00007f07c62fadd9 [ 288.452159][ T6504] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 288.460203][ T6504] RBP: 00007f07c6390d69 R08: 0000000000000020 R09: 0000000000000003 [ 288.533798][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.558219][ T6504] R13: 00007f07c6574038 R14: 00007f07c6573fa0 R15: 00007ffefc6d79e8 [ 288.566406][ T6504] [ 288.578380][ T6504] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.585721][ T6504] CPU: 0 PID: 6504 Comm: syz.2.516 Not tainted syzkaller #0 [ 288.593655][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.603744][ T6504] Call Trace: [ 288.607050][ T6504] [ 288.610101][ T6504] dump_stack_lvl+0x188/0x250 [ 288.614804][ T6504] ? show_regs_print_info+0x20/0x20 [ 288.620023][ T6504] ? load_image+0x400/0x400 [ 288.624568][ T6504] panic+0x2e5/0x810 [ 288.628684][ T6504] ? bpf_jit_dump+0xd0/0xd0 [ 288.633230][ T6504] ? hugetlb_split+0x237/0x2a0 [ 288.638226][ T6504] __warn+0x248/0x2b0 [ 288.642240][ T6504] ? hugetlb_split+0x237/0x2a0 [ 288.647025][ T6504] report_bug+0x1b7/0x2e0 [ 288.651390][ T6504] handle_bug+0x3a/0x70 [ 288.655561][ T6504] exc_invalid_op+0x16/0x40 [ 288.660088][ T6504] asm_exc_invalid_op+0x16/0x20 [ 288.664961][ T6504] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 288.670359][ T6504] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 04 24 8a 8d 80 e1 07 80 c1 03 38 c1 [ 288.690249][ T6504] RSP: 0018:ffffc90005317b50 EFLAGS: 00010287 [ 288.696437][ T6504] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000 [ 288.704537][ T6504] RDX: ffffc90004455000 RSI: 0000000000000486 RDI: 0000000000000487 [ 288.712552][ T6504] RBP: 0000000000000000 R08: ffff88807dfe62bf R09: 1ffff1100fbfcc57 [ 288.720647][ T6504] R10: dffffc0000000000 R11: ffffed100fbfcc58 R12: ffff888079fee4c0 [ 288.728735][ T6504] R13: dffffc0000000000 R14: ffff888079fee420 R15: ffff8880233530c0 [ 288.736739][ T6504] ? hugetlb_split+0x237/0x2a0 [ 288.741549][ T6504] __vma_adjust+0x2b6/0x1c10 [ 288.746203][ T6504] __split_vma+0x34b/0x410 [ 288.750652][ T6504] mbind_range+0x593/0x990 [ 288.755105][ T6504] __se_sys_mbind+0x51c/0x770 [ 288.759807][ T6504] ? __x64_sys_mbind+0xf0/0xf0 [ 288.764589][ T6504] ? lock_chain_count+0x20/0x20 [ 288.769659][ T6504] ? __x64_sys_mbind+0x1d/0xf0 [ 288.774574][ T6504] do_syscall_64+0x4c/0xa0 [ 288.779029][ T6504] ? clear_bhb_loop+0x30/0x80 [ 288.783828][ T6504] ? clear_bhb_loop+0x30/0x80 [ 288.788529][ T6504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.794446][ T6504] RIP: 0033:0x7f07c62fadd9 [ 288.798895][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.818527][ T6504] RSP: 002b:00007f07c4554028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 288.826966][ T6504] RAX: ffffffffffffffda RBX: 00007f07c6573fa0 RCX: 00007f07c62fadd9 [ 288.834963][ T6504] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 288.842963][ T6504] RBP: 00007f07c6390d69 R08: 0000000000000020 R09: 0000000000000003 [ 288.851089][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.859116][ T6504] R13: 00007f07c6574038 R14: 00007f07c6573fa0 R15: 00007ffefc6d79e8 [ 288.867328][ T6504] [ 288.870786][ T6504] Kernel Offset: disabled [ 288.875422][ T6504] Rebooting in 86400 seconds..