last executing test programs: 1m15.634983906s ago: executing program 0 (id=258): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xe0, 0x7a, 0xcb, 0x20, 0xa5c, 0xbdc, 0x3cca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x3, 0x80, 0x7, [{{0x9, 0x4, 0x3, 0x3, 0x1, 0x60, 0xad, 0xfd, 0x48, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x7, 0xb5}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0a}}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) 1m13.137178488s ago: executing program 0 (id=278): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x9c36, 0x1, [{0x1, 0x1}]}) 1m12.022963697s ago: executing program 0 (id=284): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad5600008100000800"/24, 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007c80)=[{0xf0ff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="18521f340928382642", 0x9}], 0x1, 0x0, 0x0, 0x10014}], 0x1, 0x80) 1m10.513073409s ago: executing program 0 (id=288): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000680), 0x3e, 0x51b, &(0x7f0000000700)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x10000) 1m8.576963795s ago: executing program 0 (id=296): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m7.918372998s ago: executing program 0 (id=306): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) clock_adjtime(0x2, &(0x7f0000000480)={0x2, 0x2, 0x9, 0x2, 0x0, 0xfffffffffffffffb, 0x4, 0x4, 0xe5, 0xffffffff, 0x2, 0x81, 0x0, 0x4, 0xfffffffffffffff7, 0xffffffff00000001, 0x1b1, 0x4, 0x7, 0x7, 0x26eb, 0xd136, 0x3, 0x10000, 0x9, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @random="8de44a7622e1"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) close(0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) 1m6.78065392s ago: executing program 32 (id=306): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) clock_adjtime(0x2, &(0x7f0000000480)={0x2, 0x2, 0x9, 0x2, 0x0, 0xfffffffffffffffb, 0x4, 0x4, 0xe5, 0xffffffff, 0x2, 0x81, 0x0, 0x4, 0xfffffffffffffff7, 0xffffffff00000001, 0x1b1, 0x4, 0x7, 0x7, 0x26eb, 0xd136, 0x3, 0x10000, 0x9, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @random="8de44a7622e1"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) close(0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) 18.133202559s ago: executing program 3 (id=585): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 16.290948957s ago: executing program 3 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.163513027s ago: executing program 3 (id=588): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x20000019, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x38) sendfile(r3, r3, 0x0, 0x40008) 13.884224221s ago: executing program 3 (id=598): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="cf00"]) 13.820070737s ago: executing program 1 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.715105275s ago: executing program 3 (id=603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) getrlimit(0x5, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="fe800000"], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800"], 0x104}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) 12.696921877s ago: executing program 1 (id=604): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @short}, 0xa, &(0x7f0000000080)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.027343191s ago: executing program 3 (id=606): syz_io_uring_setup(0x10d, &(0x7f00000201c0)={0x0, 0xac21, 0x10000, 0x2}, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 7.755235085s ago: executing program 1 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.915125873s ago: executing program 1 (id=624): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@sr0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='nilfs2\x00', 0x1a0c000, 0x0) 3.740107189s ago: executing program 5 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000340)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2051) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimes(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0x0, 0x0, {0x8000000, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000100)='./file0\x00', 0x146) 3.123217408s ago: executing program 1 (id=633): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{@fixed}, {@fixed}]}) 2.758728358s ago: executing program 5 (id=634): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x80000000) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x5, 0x0, 0xffffffff, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x6c, 0x7, 0x10020009, 0x1, 0x5, 0x1, 0x1000, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x100, 0x8, 0x1, 0x2]}) 2.507119108s ago: executing program 1 (id=636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x8) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000040)=""/46, 0x2e}], 0x2, 0x4b5, 0x1, 0x12) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setpriority(0x1, 0x0, 0x80000000) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) 2.159805776s ago: executing program 5 (id=637): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000002cc0)=[@in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.944784203s ago: executing program 5 (id=638): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) memfd_secret(0x80000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000d041) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.800543325s ago: executing program 4 (id=640): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x300000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x0, 0x80000) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x86000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x1}, 0xfffffffd}) 1.517050958s ago: executing program 4 (id=642): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x80000000, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x70f68}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.386710938s ago: executing program 4 (id=644): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 1.228525611s ago: executing program 2 (id=645): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0x401, 0x3}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @queue={0x2b, {0x7ff, 0x8009}}}], 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 1.11339805s ago: executing program 2 (id=646): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x200, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 915.068396ms ago: executing program 5 (id=647): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = io_uring_setup(0x1950, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002b40)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) 846.822622ms ago: executing program 2 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x10, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 583.420813ms ago: executing program 4 (id=649): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 491.35675ms ago: executing program 2 (id=650): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="0b031200e0ff64000200475400f6", 0xe, 0x4000, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 433.026565ms ago: executing program 2 (id=651): r0 = syz_open_dev$vcsu(&(0x7f00000015c0), 0xe1d6, 0x66cd02) read$FUSE(r0, &(0x7f0000004ec0)={0x2020}, 0x2020) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1080}], 0x1ffffffffffffdd1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952de000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x541b, 0x0) 318.044435ms ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 198.925374ms ago: executing program 2 (id=653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) socket(0x1d, 0xa, 0x2) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f00000001c0)={0xff, 0xfffffffb, 0x2, 0x6, 0x1101, 0x1}) ioctl$UI_DEV_CREATE(r6, 0x5501) close(r6) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="263a4e371907b073da658783afa2bafc9f9514498fd298e5e35e851ea1daff94d066aa89408a5e7c127cce432127c9f8cf6ad054bc007a0c7e4cc0350fdbcde23142a48be1", 0x45}, {&(0x7f0000000980)="5c502248583090765c90f764a855f3b2951df43c3791a67bdde91785b99f4550e80514c039d006e7d5bc95a186f440fe0d3edb613348983366fdf918a3ee6f165f364468731f69bb7bc35f6ddcb7e2ff8651e8ebb1efa6f961a86e9d70d85336eea7d77059babbc69008d305be88ccf6bb567565b7a772139c767cecf90673a925b401bca25806d6e45635a256a09c94d11a8083851ab6436c5fc3f32a06c23157832ba1457e6e5e795363cd68070f41b560b75f124ada1b2c3873f82a0a33059053c73d47f7d7eb5c0d820286ee", 0x17}, {&(0x7f0000000640)="7aff0154d3469f2ec3d7a94a605a401b461692747cbd217ad601383f156fe31f516064a460ed01a7b232e0d0d3dbde7469a5fbcd0166dd8495fa12f00f89372c499a2f797806dcad176e16b70a8100b6e1f32554514624dec3635f966a807fdf8fe8832b6b7b0d5c17f48568ee783d17809224cb25705a13a14ebcbbbc36a2798681818cec44f27c67cd490bd8ee540ca8d1e5eab02199ea8f904f8046d2ea7802c8a3ea6c9fe5c416c5fb2d7c8b6fe59256f979d0f53159e178ed898fd9697f8d0483ddb36954b4c7201b9c4ac53740ccdceb034e", 0xd5}, {&(0x7f0000000740)="3ea18d33b59f751e4826e00c53464befb63c9b7ca2afd87ba7a03d4a4d53f9e3d7c04d03008ed6704c1882dc8b8f06377c8d159d2e2fa7f5eed160dd78b1da69337d8c54a9eaddaa25e4ca38541714637badef0025f1fa4d7be4acc9db0454dc9cfaece638b343e0b867741e1dc38b312dc7186ec9b8e4ff5776e35217077917c56b22a30effff02de7eb872b7f3809a6727f14a1df2592d830ab5009c55351948de317a63d5e46680b06b5e4a6e3d57d11b8e8b39fdc04c17fe69464fb5a5005efdcd5f6d5d5fca1cdec472070836f62c8353178d34535fc7d91061dcba6ec41adc6170c8fd40a6ac3bc265618200", 0xef}, {&(0x7f0000000840)="41d79b62dab2c70c46210b7cb1d6a4643ec98df2de7f020000ce0c0ed1171f1d290669beebde3386ec1ad5027a42d8d742fd5d1029ff7bebe7b140babbfe8e62692d0a2a98b07edeefeeb2221c3619050bda6554053d9580370fa9542ebd35bf74664d130e5c4b95f238236fc217c751c65736c60ec07a15c4f7e038557725f42a7c5c9544", 0x85}, {&(0x7f0000000900)="bc68d0b3e0806d6458bf8b928e5ffe58cbb798b6353dee6fb682fe4f1a461870f23530d96e569ca06607ba0112aa8ee8af15ed9efde84c29af0455414a4d0c7b7d6dc427f3d251e40b9e15712909e64777e24c2c62bd6f74b4d7e06e1440be4232", 0xffffffffffffff33}], 0x6}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="99e2380fe7b8982202b481999b305058209a6a52d457fa708180ca998ee9c64328299218c3d7e070f2bf77b5ea0939c64e204bd638b1f13a97edfc4ba1d113035f64ea19a925cc6c9571a52e5055121367bc157f7afbcd8af35f9d8fe8e80cfe5716714ddd7416ad1c65155af2b9259c26e4fb852aa42cb2fdc8b7"}, {&(0x7f0000000500)="297fe06d6943cdbbc973a2f618dac739a7aa4b"}], 0x0, &(0x7f0000000bc0)=[@timestamping={{0x0, 0x1, 0x25, 0x8001}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x0, 0x1, 0x3d, 0x7}}]}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c00)="4e8f94eccd628989c95ce8f1a065dd6f467748f8b1375195602b"}, {&(0x7f0000000c40)="bca14869a0cc06d8aa8fa2a00255a3"}, {&(0x7f0000000c80)="43b6ef69140d0562195d68daf3711dfc676fdf98973155282fe110727c3845d51d1bccb60f5c043acbe3d7510775c9a2543292c36fbaa08e0db46c7dfcd4676370e96a4f11d0c585f22ade67e5596fd94c8132451e033197df141613f1268863b1ace5c3779063ef87529039c39b"}, {&(0x7f0000000d00)="12393fcefb4f8913ee6fea6f1a7910ef12f37848e5654bc7b395eb25d7713ad67fdc154ac96ecccb492d4b89576b5f982c141fa01ff6b2ffba1d37b80ffa48cd3316362aaf3880b3b92cd3d08aac72fdffaf83cf48314062b661c5374259b9ca2e89c418228168b8abb61248056d7fbccc3e358e4d75d026faa2af1fe0483c4dc800320e89b90a5754e9f76fec653107001012e0a34f267b9ca776ff"}, {&(0x7f0000000dc0)="2be50ff640f8643a056ffd056fc48b9e80ed8995db0490191b5ae7d2a4d3bc707763993a1488b0680834eae793bcd58102667d6cde9cf2138638bf9f828c282fa1b8e0413b6ede4888781812ef6289cf1090e9a66587bfac5a3f82f20c32516c0cf8f82a006095ee8f134c4588502b0330272d7cba67de8799fba7080c71cefaa98b4344d069"}, {&(0x7f0000000e80)="9c0a8f5ca6573bd46568a25972f200e48e200ebb7b16e21482354de5ef404188376b0e714ffcf7946e0429398a13229a5cdef94065fc51a14e54c197370446bfddb12f502ba1f649b31695c37039f2b69520ccc0656a83daaf8664d2b4317156519fce621da800759adc29b2eff7224e2510b36a11e37e0bce3ab7bd2cc5077a03f8889b70fa93a9f20519d3bb41f93935b87c210796a6ed108275633e8d"}, {&(0x7f0000000f40)="42d9730ab02cb6efab92eb4cda46c933ad1bf74f5e1eeaa3338345892c95b3898d628307fb6be69122f44f40d1f7a5f0530c830d5ff13ef02881d7bbb0ef8e6ab1fe2b52086f87d8ae0787059b60d2676553ba51f37f35c3ea9d365bf6eb3c0678a3dc74d53fe314da551496ee71fa7c03f0e8cb80a4bd"}, {&(0x7f0000001580)="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"}, {&(0x7f00000011c0)="8e8653722b4610c3d90fb414852761babb46fef5b722ba1ba456319ab32b1c085c81651efab5142794b0a8315aff8c2a1b8d2650f68762edb37bd667a3f5c3d10fabdfdfc785048568d4cb49763d56d2e7c280d22112c390376ea495bd4ef81090d2f5e6b32fc93a296e7c23fba6fb3004a376f7c45515c3f3de76ea138ef35272"}], 0x0, &(0x7f0000000fc0)=[@txtime={{0x0, 0x1, 0x3d, 0x8e68}}, @timestamping, @timestamping={{0x0, 0x1, 0x25, 0x8000}}]}}, {{&(0x7f0000001280)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x0, &(0x7f0000001440)=[{&(0x7f0000001300)="e4257d5efe"}, {&(0x7f0000001340)="c722d3513121925cf19c253b0ed986e43cb416c40aef689783f9a7da55f9e438b40a90ec0d0b06bb7439473a68262ed27de94104352c056f0b1a5b6beb7379d7c97a8e7547da8ec5bc0866ec126103f89018c5f54b6606b3548a7f63bbbc98d1e1d4aa12c7a556ab67962eebdb8d3458b17340ec9c2aac29e29afc25af3719560f5b1d2eadb50b1f1f16ca67b598ef613de9431382b7438c50b0608214796f7eb3fd0f6b7d38d842d946486eaebd981937745267be2205b05d29032c6f890819b9a55694ea84663e1f1201b263d9805d2885cbbe54c6cec29618004df637"}], 0x0, &(0x7f0000001480)=[@mark={{0x0, 0x1, 0x24, 0xd}}, @txtime={{0x0, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x0, 0x1, 0x24, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x2}}]}}], 0x1, 0x20000000) 177.153836ms ago: executing program 4 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 0s ago: executing program 5 (id=655): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40905}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 62.138900][ T4173] cgroup: Unknown subsys name 'net' [ 62.248304][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.805886][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.204490][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 65.238369][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.288133][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.347561][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.382270][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.389637][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.398883][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.421968][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.429549][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.437475][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.480416][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.487769][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.495910][ T4183] device bridge_slave_0 entered promiscuous mode [ 65.517573][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.530883][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.551363][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.558675][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.567147][ T4183] device bridge_slave_1 entered promiscuous mode [ 65.622137][ T4194] team0: Port device team_slave_0 added [ 65.647614][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.665310][ T4194] team0: Port device team_slave_1 added [ 65.677370][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.684853][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.693538][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.703037][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.723790][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.731865][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.745433][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.756399][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.764797][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.774111][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.803403][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810673][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.818707][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.835403][ T4183] team0: Port device team_slave_0 added [ 65.852469][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.863403][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.870594][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.899223][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.919999][ T4183] team0: Port device team_slave_1 added [ 65.926282][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.938230][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.957418][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.964893][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.992524][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.035503][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.055606][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.063060][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.090441][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.107666][ T4189] team0: Port device team_slave_0 added [ 66.116376][ T4189] team0: Port device team_slave_1 added [ 66.125112][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.136247][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.143952][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.172861][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.255277][ T4184] team0: Port device team_slave_0 added [ 66.265913][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.273437][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.300133][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.314777][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.322280][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.338484][ T4184] team0: Port device team_slave_1 added [ 66.360393][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.372756][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.400517][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.451176][ T4183] device hsr_slave_0 entered promiscuous mode [ 66.459440][ T4183] device hsr_slave_1 entered promiscuous mode [ 66.466867][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.475327][ T4183] Cannot create hsr debugfs directory [ 66.481678][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.489141][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.517962][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.529701][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.537639][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.547236][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.583412][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.590921][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.618708][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.630724][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.638782][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.647911][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.664988][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.672372][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.679982][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.687907][ T4189] Cannot create hsr debugfs directory [ 66.786014][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.794210][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.801137][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.809312][ T4184] Cannot create hsr debugfs directory [ 66.816926][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.830530][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.917442][ T4196] team0: Port device team_slave_0 added [ 66.934104][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 66.942312][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 66.950203][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 66.957362][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 66.974811][ T4196] team0: Port device team_slave_1 added [ 67.012871][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 67.041825][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.049266][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.076714][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.091725][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.098938][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.126888][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.201977][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.208960][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.215961][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.223885][ T4196] Cannot create hsr debugfs directory [ 67.288187][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.308793][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.333996][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.348097][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.411757][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.429422][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.452787][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.468094][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.502453][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.536602][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.547894][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.569338][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.629125][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.642363][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.653664][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.669165][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.682246][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.734267][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.752717][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.771516][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.796330][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.806861][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.817056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.829038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.838977][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.846567][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.856035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.865982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.876084][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.883403][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.899217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.911208][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.920205][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.943548][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.955033][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.971664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.980937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.004480][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.021812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.047335][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.058496][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.093091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.102900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.111854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.122032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.132442][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.140008][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.148703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.158534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.167419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.176672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.185773][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.192993][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.201229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.210464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.220016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.230490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.241695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.251037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.261252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.271657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.280579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.295326][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.308135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.328004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.346627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.385718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.396451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.405672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.416487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.425479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.435027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.449221][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.465085][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.483813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.493386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.501385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.512082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.524296][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.536404][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.583505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.595584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.605812][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.613476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.629164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.640111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.649732][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.657489][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.666358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.674252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.681849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.692434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.701340][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.708764][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.717891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.741651][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.757321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.770165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.786496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.800700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.817377][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.824495][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.833311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.842215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.851767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.872495][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.897005][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.910275][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.932697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.942232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.954665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.963753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.973277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.981724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.990779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.000266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.009104][ T2289] Bluetooth: hci0: command 0x041b tx timeout [ 69.015457][ T2289] Bluetooth: hci1: command 0x041b tx timeout [ 69.016241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.021967][ T2289] Bluetooth: hci2: command 0x041b tx timeout [ 69.037075][ T2289] Bluetooth: hci3: command 0x041b tx timeout [ 69.038207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.058455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.067454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.075880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.084694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.093590][ T2289] Bluetooth: hci4: command 0x041b tx timeout [ 69.102194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.110298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.141348][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.152473][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.167366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.184915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.200411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.211109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.225952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.234876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.245535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.254699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.265129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.275780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.286378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.295395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.303807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.311769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.323334][ T4183] device veth0_vlan entered promiscuous mode [ 69.336018][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.347903][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.357251][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.367634][ T3054] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.375573][ T3054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.391094][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.413303][ T4183] device veth1_vlan entered promiscuous mode [ 69.443176][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.452468][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.474338][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.492632][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.500647][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.536037][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.547043][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.558868][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.569015][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.616978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.628553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.638840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.652956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.661166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.675188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.685194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.709278][ T4183] device veth0_macvtap entered promiscuous mode [ 69.723005][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.731587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.741092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.750358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.761833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.770875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.780027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.789670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.798779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.808556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.817668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.825855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.838749][ T4183] device veth1_macvtap entered promiscuous mode [ 69.847229][ T4194] device veth0_vlan entered promiscuous mode [ 69.860307][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.869830][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.879373][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.903683][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.917093][ T4194] device veth1_vlan entered promiscuous mode [ 69.935068][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.950300][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.994584][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.010135][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.021111][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.032098][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.041329][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.050447][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.066636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.078322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.098475][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.114257][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129784][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.150530][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.160184][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.176451][ T4194] device veth0_macvtap entered promiscuous mode [ 70.187932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.197993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.216952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.231533][ T4189] device veth0_vlan entered promiscuous mode [ 70.249919][ T4194] device veth1_macvtap entered promiscuous mode [ 70.263616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.280023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.290266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.315274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.323571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.370270][ T4189] device veth1_vlan entered promiscuous mode [ 70.408820][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.430582][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.444508][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.472467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.482716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.491835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.500098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.528311][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.565858][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.576858][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.588663][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.598634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.609513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.619297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.629208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.654381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.664140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.679587][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.691153][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.700911][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.711727][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.725074][ T4189] device veth0_macvtap entered promiscuous mode [ 70.734583][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.744385][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.754301][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.786210][ T4189] device veth1_macvtap entered promiscuous mode [ 70.805213][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.814285][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.822231][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.830327][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.840015][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.856812][ T4196] device veth0_vlan entered promiscuous mode [ 70.858493][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.869348][ T4184] device veth0_vlan entered promiscuous mode [ 70.871148][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.899402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.909658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.918802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.927481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.936475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.950101][ T4196] device veth1_vlan entered promiscuous mode [ 70.990597][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.998136][ T4184] device veth1_vlan entered promiscuous mode [ 71.007539][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.018457][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.031310][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.040369][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.054970][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.066152][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.076762][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.087891][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.099079][ T2289] Bluetooth: hci3: command 0x040f tx timeout [ 71.105732][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.110425][ T2289] Bluetooth: hci2: command 0x040f tx timeout [ 71.122386][ T2289] Bluetooth: hci1: command 0x040f tx timeout [ 71.128975][ T2289] Bluetooth: hci0: command 0x040f tx timeout [ 71.140685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.155722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.168471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.172993][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 71.179245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.194558][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.207343][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.218538][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.230232][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.241905][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.266367][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.278121][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287953][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.297338][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.319052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.335265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.375488][ T4184] device veth0_macvtap entered promiscuous mode [ 71.385527][ T4196] device veth0_macvtap entered promiscuous mode [ 71.397691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.408051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.417669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.427071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.436120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.445074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.467207][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.481560][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.483983][ T4184] device veth1_macvtap entered promiscuous mode [ 71.523713][ T4196] device veth1_macvtap entered promiscuous mode [ 71.554380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.563943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.576205][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.583777][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.591100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.631922][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.643987][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.659989][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.671146][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.681270][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.692688][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.704258][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.723672][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.731987][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.736533][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.752139][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.763507][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.775866][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.786824][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.806484][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.817283][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.828353][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.840512][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.849867][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.859682][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.868916][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.877583][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.887613][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.905716][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.917152][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.928327][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.929313][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.945387][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.948649][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.967802][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.978630][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.989959][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.024224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.056948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.069915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.084563][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.093992][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.103961][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.114699][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128785][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.140949][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.151007][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.162188][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.172503][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.183596][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.193878][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.205869][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.218320][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.241931][ T433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.250948][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.273989][ T433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.284334][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.304039][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.326092][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.340617][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.357123][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.366885][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396831][ T4306] bridge0: port 3(syz_tun) entered blocking state [ 72.408076][ T4306] bridge0: port 3(syz_tun) entered disabled state [ 72.418022][ T4306] device syz_tun entered promiscuous mode [ 72.425609][ T4306] bridge0: port 3(syz_tun) entered blocking state [ 72.432420][ T4306] bridge0: port 3(syz_tun) entered forwarding state [ 72.622822][ T4315] bridge0: port 3(syz_tun) entered blocking state [ 72.629585][ T4315] bridge0: port 3(syz_tun) entered disabled state [ 72.637072][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.646653][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.693103][ T4321] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 72.695326][ T4318] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 72.721044][ T4315] device syz_tun entered promiscuous mode [ 72.744047][ T4315] bridge0: port 3(syz_tun) entered blocking state [ 72.750940][ T4315] bridge0: port 3(syz_tun) entered forwarding state [ 72.790272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.871252][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.882305][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.896540][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 72.983510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.994721][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.007979][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.009600][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.019448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.035562][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.081798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.163623][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 73.172968][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 73.190009][ T4307] Bluetooth: hci2: command 0x0419 tx timeout [ 73.216476][ T4307] Bluetooth: hci3: command 0x0419 tx timeout [ 73.257930][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 73.275400][ T4336] device syzkaller1 entered promiscuous mode [ 73.424485][ T4346] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.565130][ T4354] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.579078][ T4351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21'. [ 73.759446][ T4364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26'. [ 73.782870][ T4368] ksmbd: Unknown IPC event: 6, ignore. [ 73.814340][ T4365] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.823633][ T4365] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.832549][ T4365] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.841555][ T4365] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.899422][ T4365] Zero length message leads to an empty skb [ 74.470682][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'. [ 74.961773][ T4408] 8021q: VLANs not supported on hsr0 [ 75.275882][ T4425] tipc: Started in network mode [ 75.281210][ T4425] tipc: Node identity 52c2de06a29f, cluster identity 4711 [ 75.350370][ T4425] tipc: Enabled bearer , priority 0 [ 75.368261][ T4246] Bluetooth: hci4: command 0x0405 tx timeout [ 75.416114][ T4435] tipc: Disabling bearer [ 75.437138][ T4437] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 75.527930][ T4437] device syzkaller0 entered promiscuous mode [ 75.787179][ T4445] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.815805][ T4449] device syzkaller1 entered promiscuous mode [ 75.837132][ T4445] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.416424][ T4491] tipc: Started in network mode [ 76.437596][ T4491] tipc: Node identity 26d89ea4c959, cluster identity 4711 [ 76.460033][ T4491] tipc: Enabled bearer , priority 0 [ 76.516997][ T4497] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.562735][ T4491] tipc: Resetting bearer [ 76.655027][ T4490] tipc: Disabling bearer [ 77.020323][ T4533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.028064][ T4533] IPv6: NLM_F_CREATE should be set when creating new route [ 77.631559][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.812049][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 78.119915][ T4603] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 78.152261][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ecfd000: rx timeout, send abort [ 78.162493][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ecfd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.319575][ T4612] loop4: detected capacity change from 0 to 1024 [ 78.321931][ T4614] loop2: detected capacity change from 0 to 256 [ 78.463429][ T4614] ======================================================= [ 78.463429][ T4614] WARNING: The mand mount option has been deprecated and [ 78.463429][ T4614] and is ignored by this kernel. Remove the mand [ 78.463429][ T4614] option from the mount to silence this warning. [ 78.463429][ T4614] ======================================================= [ 78.497077][ T4624] loop1: detected capacity change from 0 to 1024 [ 78.642686][ T4614] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.657519][ T4636] loop0: detected capacity change from 0 to 512 [ 78.663717][ T4624] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.714530][ T4614] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 78.783253][ T4614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.817880][ T4636] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.945531][ T4636] EXT4-fs (loop0): mount failed [ 79.027956][ T4652] loop4: detected capacity change from 0 to 1024 [ 79.273376][ T4652] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 79.286368][ T4656] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.362347][ T4656] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 79.375240][ T4652] EXT4-fs error (device loop4): __ext4_iget:4894: inode #3: block 1803188595: comm syz.4.118: invalid block [ 79.606287][ T4652] EXT4-fs (loop4): no journal found [ 80.466962][ T4674] input: syz1 as /devices/virtual/input/input5 [ 80.583921][ T4676] device syzkaller0 entered promiscuous mode [ 80.663381][ T4680] loop2: detected capacity change from 0 to 2048 [ 80.807758][ T4691] loop3: detected capacity change from 0 to 512 [ 80.822046][ T4680] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.873082][ T4680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.927662][ T4691] EXT4-fs (loop3): inline encryption not supported [ 80.945620][ T4691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.000228][ T4691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.125554][ T4691] EXT4-fs (loop3): 1 truncate cleaned up [ 81.139705][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 81.253732][ T4691] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.130: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 81.824454][ T7] cfg80211: failed to load regulatory.db [ 81.855762][ T4735] loop0: detected capacity change from 0 to 256 [ 81.933534][ T4735] exfat: Deprecated parameter 'namecase' [ 81.952651][ T4735] exfat: Deprecated parameter 'namecase' [ 82.053842][ T4735] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 82.142002][ T4748] loop2: detected capacity change from 0 to 764 [ 82.213936][ T4735] attempt to access beyond end of device [ 82.213936][ T4735] loop0: rw=524288, want=34225520825, limit=256 [ 82.304815][ T4735] attempt to access beyond end of device [ 82.304815][ T4735] loop0: rw=0, want=34225520825, limit=256 [ 82.311270][ T4751] loop1: detected capacity change from 0 to 1024 [ 82.344382][ T26] audit: type=1800 audit(1756385506.383:2): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.146" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 82.409421][ T4735] syz.0.146 (4735) used greatest stack depth: 21120 bytes left [ 82.630248][ T4756] loop0: detected capacity change from 0 to 256 [ 82.696950][ T4751] hfsplus: xattr searching failed [ 82.732461][ T4756] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.799887][ T4759] hfsplus: xattr searching failed [ 82.998645][ T433] hfsplus: b-tree write err: -5, ino 3 [ 83.184923][ T4770] netlink: 200 bytes leftover after parsing attributes in process `syz.1.158'. [ 84.316034][ T4795] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.341384][ T4795] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.963972][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.252963][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 85.414689][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.543892][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.619411][ T1111] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 85.687057][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.747190][ T4828] loop1: detected capacity change from 0 to 512 [ 85.787722][ T1111] usb 1-1: config 0 descriptor?? [ 85.830037][ T4828] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 85.830037][ T4828] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.830037][ T4828] [ 85.873985][ T4831] loop4: detected capacity change from 0 to 256 [ 85.931456][ T4828] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 85.931456][ T4828] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.931456][ T4828] [ 85.953406][ T4828] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.001521][ T4828] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 86.004550][ T4831] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 86.050195][ T4831] binfmt_misc: register: failed to install interpreter file ./file0 [ 86.077070][ T4836] loop3: detected capacity change from 0 to 1024 [ 86.140783][ T4828] EXT4-fs (loop1): 1 truncate cleaned up [ 86.159821][ T433] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 86.177296][ T433] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:3: Failed to release dquot type 1 [ 86.192999][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 86.331006][ T4836] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.354439][ T4836] EXT4-fs (loop3): Ignoring removed orlov option [ 86.359141][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x6 [ 86.376687][ T1111] apple 0003:05AC:024B.0001: ignoring exceeding usage max [ 86.382224][ T4836] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nolazytime,stripe=0x0000000000000007,nodelalloc,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,i_version,,errors=continue. Quota mode: writeback. [ 86.385739][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.475395][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.498034][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.500563][ T4850] loop1: detected capacity change from 0 to 2048 [ 86.513276][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.529769][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.561377][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.579074][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.587032][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.594425][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.602469][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.602776][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.610346][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.625324][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.632435][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.640809][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.649099][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.656568][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.664077][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.671159][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.678655][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.686278][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.699875][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.707294][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.714621][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.721817][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.736841][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.750441][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.771979][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 86.779298][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.816644][ T4856] loop1: detected capacity change from 0 to 256 [ 86.819462][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.836453][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.846720][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.858140][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.872088][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 86.888160][ T1111] apple 0003:05AC:024B.0001: unknown main item tag 0x0 [ 87.007512][ T4237] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.012131][ T1111] apple 0003:05AC:024B.0001: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 87.053602][ T4237] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.066364][ T4862] loop2: detected capacity change from 0 to 1024 [ 87.124895][ T1111] usb 1-1: USB disconnect, device number 2 [ 87.144401][ T4862] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.156057][ T4237] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.192775][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.242722][ T4237] usb 5-1: SerialNumber: syz [ 87.333952][ T4863] fido_id[4863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 87.560854][ T4237] usb 5-1: 0:2 : does not exist [ 87.580814][ T4878] loop3: detected capacity change from 0 to 1024 [ 87.622879][ T4237] usb 5-1: USB disconnect, device number 2 [ 87.644684][ T4878] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 87.687438][ T4878] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 87.798137][ T4889] IPv6: Can't replace route, no match found [ 88.019859][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.222510][ T4896] loop0: detected capacity change from 0 to 512 [ 88.239929][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.391679][ T4896] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 88.405918][ T4896] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.421559][ T4896] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 88.436971][ T4896] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 88.447039][ T4896] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 88.472852][ T4896] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.202: couldn't read orphan inode 13 (err -117) [ 88.489368][ T4896] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 88.945951][ T4901] loop4: detected capacity change from 0 to 128 [ 88.972902][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 89.014382][ T4901] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 89.017386][ T4901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.094116][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.094179][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.094220][ T1108] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.094244][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.111165][ T1108] usb 4-1: config 0 descriptor?? [ 89.205413][ T4914] loop2: detected capacity change from 0 to 1024 [ 89.317408][ T4920] loop0: detected capacity change from 0 to 256 [ 89.340568][ T4914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.351842][ T4914] EXT4-fs (loop2): Ignoring removed orlov option [ 89.408966][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nolazytime,stripe=0x0000000000000007,nodelalloc,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,i_version,,errors=continue. Quota mode: writeback. [ 89.445873][ T4922] netlink: 276 bytes leftover after parsing attributes in process `syz.1.214'. [ 90.275320][ T1108] HID 045e:07da: Invalid code 65791 type 1 [ 90.287966][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7 [ 90.307657][ T1108] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 90.370269][ T4935] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 90.435884][ T4935] loop0: detected capacity change from 0 to 1024 [ 90.645826][ T7] usb 4-1: USB disconnect, device number 2 [ 90.675268][ T4942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 90.684811][ T4942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 90.694754][ T4942] netlink: 5 bytes leftover after parsing attributes in process `syz.4.219'. [ 90.871604][ T4935] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.218: Invalid block bitmap block 0 in block_group 0 [ 91.367880][ T4935] Quota error (device loop0): write_blk: dquota write failed [ 91.375841][ T4935] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 91.385976][ T4935] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.218: Failed to acquire dquot type 0 [ 91.478779][ T4935] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.218: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.585519][ T4935] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.218: Invalid inode bitmap blk 0 in block_group 0 [ 91.588257][ T4946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.646728][ T4278] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 91.683765][ T4278] EXT4-fs error (device loop0): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 0 [ 91.705053][ T4935] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 91.859622][ T4935] EXT4-fs (loop0): 1 orphan inode deleted [ 91.959366][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 92.313545][ T4935] syz.0.218 (4935) used greatest stack depth: 21096 bytes left [ 92.433859][ T4956] netlink: 'syz.1.226': attribute type 9 has an invalid length. [ 92.487947][ T4956] netlink: 'syz.1.226': attribute type 6 has an invalid length. [ 92.532678][ T4956] netlink: 'syz.1.226': attribute type 7 has an invalid length. [ 92.559416][ T4966] loop0: detected capacity change from 0 to 2048 [ 92.574788][ T4956] netlink: 'syz.1.226': attribute type 8 has an invalid length. [ 92.645729][ T4975] loop1: detected capacity change from 0 to 512 [ 92.673085][ T4966] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.699061][ T4966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.712149][ T4975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 92.747128][ T4975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.774574][ T4975] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.233: Block bitmap for bg 0 marked uninitialized [ 92.930457][ T4975] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 92.960749][ T4975] EXT4-fs (loop1): 1 orphan inode deleted [ 92.984298][ T4975] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.039775][ T4989] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 93.124746][ T4989] loop0: detected capacity change from 0 to 512 [ 93.175659][ T4989] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.238: corrupted xattr block 255 [ 93.220250][ T4989] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 93.228821][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 93.254146][ T4989] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.238: corrupted xattr block 255 [ 93.625847][ T5008] loop1: detected capacity change from 0 to 128 [ 93.686425][ T5008] device sit0 entered promiscuous mode [ 93.736693][ T5008] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 93.815203][ T5017] loop0: detected capacity change from 0 to 128 [ 93.837735][ T5008] netlink: 1 bytes leftover after parsing attributes in process `syz.1.243'. [ 93.984695][ T5015] device sit0 entered promiscuous mode [ 93.990495][ T5015] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 94.042833][ T5015] netlink: 1 bytes leftover after parsing attributes in process `syz.0.247'. [ 94.192675][ T5032] loop0: detected capacity change from 0 to 512 [ 94.240188][ T5032] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.593412][ T5036] loop3: detected capacity change from 0 to 2048 [ 94.650879][ T5041] xt_hashlimit: max too large, truncated to 1048576 [ 94.724201][ T4197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.153349][ T4197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.322219][ T4197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.390036][ T4197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.519881][ T4197] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.560335][ T4197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.612188][ T4197] usb 3-1: config 0 descriptor?? [ 95.738375][ T5052] MD5 Hash mismatch for [fe80::bb]:20004->[fe80::aa]:20002 L3 index 0 [ 95.838330][ T5056] loop1: detected capacity change from 0 to 512 [ 95.874533][ T5056] EXT4-fs (loop1): Unrecognized mount option "fsuuid=d 6fef [ 95.874533][ T5056] c-153b-9U9a-ec i-50e3f538" or missing value [ 95.902193][ T4295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.124620][ T4197] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 96.162124][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 96.204543][ T4197] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.322643][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.478958][ T4197] usb 3-1: USB disconnect, device number 2 [ 96.542869][ T4295] usb 1-1: config 2 has an invalid interface number: 3 but max is 0 [ 96.639694][ T4295] usb 1-1: config 2 has no interface number 0 [ 96.729079][ T4295] usb 1-1: config 2 interface 3 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 96.804421][ T4295] usb 1-1: config 2 interface 3 has no altsetting 0 [ 96.878425][ T5069] fido_id[5069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.920932][ T5074] loop1: detected capacity change from 0 to 764 [ 97.010361][ T4295] usb 1-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=3c.ca [ 97.040904][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.049357][ T5074] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.056856][ T4295] usb 1-1: Product: syz [ 97.093881][ T4295] usb 1-1: SerialNumber: syz [ 97.173693][ T5074] loop1: detected capacity change from 764 to 0 [ 97.235866][ T5081] loop3: detected capacity change from 0 to 512 [ 97.254547][ C0] blk_update_request: I/O error, dev loop1, sector 112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.434630][ T4295] usb 1-1: USB disconnect, device number 3 [ 97.491388][ T4307] Bluetooth: hci4: command 0x0405 tx timeout [ 97.551258][ T5081] EXT4-fs (loop3): 1 orphan inode deleted [ 97.557569][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.575403][ T5086] loop4: detected capacity change from 0 to 1024 [ 97.731631][ T5081] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.028881][ T5103] usb usb1: usbfs: process 5103 (syz.0.278) did not claim interface 0 before use [ 98.516562][ T5111] loop1: detected capacity change from 0 to 256 [ 98.913352][ T5111] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.931866][ T5111] exFAT-fs (loop1): failed to load alloc-bitmap [ 98.939696][ T5111] exFAT-fs (loop1): failed to recognize exfat type [ 99.044017][ T4278] hfsplus: b-tree write err: -5, ino 4 [ 99.240488][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.250503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.260472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.270155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.279685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.288787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.298189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.307907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.317531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 99.326659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 100.729247][ T5141] loop0: detected capacity change from 0 to 512 [ 100.827512][ T5144] loop2: detected capacity change from 0 to 512 [ 100.919395][ T5144] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.289: corrupted xattr block 255 [ 100.991139][ T5144] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 101.003931][ T5144] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 101.028414][ T5144] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.289: corrupted xattr block 255 [ 101.091730][ T5141] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.288: corrupted inode contents [ 101.202292][ T5141] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.288: mark_inode_dirty error [ 101.235238][ T5141] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.288: corrupted inode contents [ 101.285879][ T5141] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.288: mark_inode_dirty error [ 101.317707][ T5141] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.288: corrupted inode contents [ 101.344206][ T5141] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 101.358567][ T5155] loop3: detected capacity change from 0 to 1024 [ 101.389686][ T5141] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.288: corrupted inode contents [ 101.421445][ T5141] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.288: mark_inode_dirty error [ 101.442089][ T5141] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 101.463736][ T5141] EXT4-fs (loop0): 1 truncate cleaned up [ 101.475843][ T5141] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.524097][ T5141] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.649136][ T5155] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.399319][ T5155] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.468568][ T5155] JBD2: no valid journal superblock found [ 102.533181][ T5155] EXT4-fs (loop3): error loading journal [ 102.747769][ T5172] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 102.831067][ T5171] loop3: detected capacity change from 0 to 2048 [ 102.922140][ T5171] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.121022][ T4189] syz-executor (4189) used greatest stack depth: 20928 bytes left [ 103.151432][ T26] audit: type=1800 audit(1756385533.195:3): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 103.211918][ T433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.284374][ T433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.151407][ T433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.203592][ T433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.479103][ T433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.518804][ T433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.581331][ T5207] loop2: detected capacity change from 0 to 256 [ 104.626591][ T433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.678422][ T433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.764539][ T5207] binder: 5205:5207 ioctl 40086607 2000000001c0 returned -22 [ 104.829224][ T5218] loop1: detected capacity change from 0 to 1024 [ 105.079184][ T5218] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.126296][ T5218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.213151][ T5227] loop3: detected capacity change from 0 to 1024 [ 105.257659][ T5227] hfsplus: umask requires a value [ 105.263341][ T5227] hfsplus: unable to parse mount options [ 105.284570][ T5218] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.317: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.726643][ T5218] EXT4-fs (loop1): 1 orphan inode deleted [ 105.798233][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.972880][ T433] tipc: Left network mode [ 106.026623][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 106.055464][ T5239] loop3: detected capacity change from 0 to 8 [ 106.092610][ T5235] loop2: detected capacity change from 0 to 4096 [ 106.125660][ T5242] loop1: detected capacity change from 0 to 512 [ 106.198300][ T5242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.213840][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.249408][ T5242] EXT4-fs (loop1): 1 truncate cleaned up [ 106.255449][ T5242] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x000000000000a8fc,quota,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 106.845611][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 107.470791][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.496565][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.508243][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.546032][ T5212] device bridge_slave_0 entered promiscuous mode [ 107.642077][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.656979][ T5269] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.657974][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.684431][ T5269] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.706357][ T5212] device bridge_slave_1 entered promiscuous mode [ 107.756306][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 107.830519][ T5284] loop2: detected capacity change from 0 to 764 [ 107.872508][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.886405][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.903019][ T21] usb 2-1: config 179 has no interface number 0 [ 107.913100][ T21] usb 2-1: config 179 interface 65 altsetting 45 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 107.929308][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.945371][ T21] usb 2-1: config 179 interface 65 altsetting 45 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 107.984116][ T5284] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 107.986102][ T21] usb 2-1: config 179 interface 65 altsetting 45 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.052233][ T21] usb 2-1: config 179 interface 65 altsetting 45 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.077058][ T5284] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 108.097735][ T21] usb 2-1: config 179 interface 65 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.158344][ T21] usb 2-1: config 179 interface 65 has no altsetting 0 [ 108.165413][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 108.186422][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.213953][ T5288] APIC base relocation is unsupported by KVM [ 108.264908][ T21] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 108.488222][ T5262] loop1: detected capacity change from 0 to 16 [ 108.520284][ T5212] team0: Port device team_slave_0 added [ 108.522235][ T5212] team0: Port device team_slave_1 added [ 108.696165][ T5262] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.110123][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 109.280420][ T4255] usb 2-1: USB disconnect, device number 2 [ 109.281815][ T4255] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 109.443042][ T5307] loop2: detected capacity change from 0 to 512 [ 109.463463][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.483064][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.554452][ T5307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.575661][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.632393][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.641025][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.641180][ T5307] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.669674][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.708326][ T5307] EXT4-fs (loop2): 1 truncate cleaned up [ 109.714042][ T5307] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 109.750323][ T5212] device hsr_slave_0 entered promiscuous mode [ 109.793608][ T5212] device hsr_slave_1 entered promiscuous mode [ 109.813204][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.834883][ T5212] Cannot create hsr debugfs directory [ 109.947834][ T26] audit: type=1800 audit(1756385539.988:4): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.338" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 110.707412][ T5212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.783557][ T5212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.825329][ T5212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.852575][ T5212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.990802][ T433] device hsr_slave_0 left promiscuous mode [ 111.021094][ T433] device hsr_slave_1 left promiscuous mode [ 111.040517][ T433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.068592][ T433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.098899][ T433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.128805][ T433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.146612][ T433] device bridge_slave_1 left promiscuous mode [ 111.154743][ T4307] Bluetooth: hci2: command 0x040f tx timeout [ 111.176249][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.260011][ T433] device bridge_slave_0 left promiscuous mode [ 111.277706][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.349967][ T433] device veth1_macvtap left promiscuous mode [ 111.360027][ T433] device veth0_macvtap left promiscuous mode [ 111.367501][ T433] device veth1_vlan left promiscuous mode [ 111.389962][ T433] device veth0_vlan left promiscuous mode [ 111.901299][ T433] team0 (unregistering): Port device team_slave_1 removed [ 111.923138][ T433] team0 (unregistering): Port device team_slave_0 removed [ 111.946259][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.965026][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.079271][ T433] bond0 (unregistering): Released all slaves [ 112.680700][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.750662][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.776283][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.827611][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.864293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.944353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.953713][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.960872][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.136773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.243602][ T5230] Bluetooth: hci2: command 0x0419 tx timeout [ 116.908428][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.931519][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.019090][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.026545][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.128344][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.149716][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.287231][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.331613][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.374444][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.440799][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.487372][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.522730][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.566264][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.595953][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.631984][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.660119][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.888536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.905940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.965641][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.432559][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.484593][ T5558] tap0: tun_chr_ioctl cmd 35108 [ 120.838673][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.867472][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.998407][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.066378][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.135668][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.165967][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.189756][ T5212] device veth0_vlan entered promiscuous mode [ 121.285030][ T5212] device veth1_vlan entered promiscuous mode [ 121.390413][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.450092][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.468889][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.485723][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.543868][ T5212] device veth0_macvtap entered promiscuous mode [ 121.604013][ T5212] device veth1_macvtap entered promiscuous mode [ 121.689444][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.719250][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.743408][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.756511][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.781452][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.795603][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.818486][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.840080][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.869544][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.877100][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.906186][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.921171][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.943030][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.000352][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.071432][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.133266][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.143656][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 122.168999][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.206186][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.257326][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.269424][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.308928][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.323465][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.336157][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.357398][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.410349][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.448578][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.489214][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.565213][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.583751][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.623416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.651110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.752104][ T5212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.788762][ T5212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.846980][ T5212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.907289][ T5212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.989463][ T7] usb 5-1: GET_CAPABILITIES returned 0 [ 122.995802][ T7] usbtmc 5-1:16.0: can't read capabilities [ 123.224335][ T7] usb 5-1: USB disconnect, device number 3 [ 123.301348][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.326241][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.393546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.447704][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.482943][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.516722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.754714][ T26] audit: type=1326 audit(1756385553.805:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 123.896075][ T26] audit: type=1326 audit(1756385553.855:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 123.900828][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.952098][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 123.988494][ T26] audit: type=1326 audit(1756385553.855:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.188116][ T26] audit: type=1326 audit(1756385553.855:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.212508][ T26] audit: type=1326 audit(1756385553.855:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.237232][ T26] audit: type=1326 audit(1756385553.855:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.267223][ T26] audit: type=1326 audit(1756385553.855:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.292941][ T5659] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 124.315557][ T26] audit: type=1326 audit(1756385553.855:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.386334][ T26] audit: type=1326 audit(1756385553.855:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587f30dbe9 code=0x7ffc0000 [ 124.412242][ T21] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.430289][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.534767][ T26] audit: type=1326 audit(1756385554.525:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab93f98de9 code=0x7ffc0000 [ 124.588112][ T21] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.627989][ T21] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.661196][ T21] usb 2-1: Manufacturer: syz [ 124.666841][ T21] usb 2-1: config 0 descriptor?? [ 125.237727][ T21] rc_core: IR keymap rc-hauppauge not found [ 125.271897][ T21] Registered IR keymap rc-empty [ 125.307270][ T21] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 125.407872][ T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 125.577434][ T21] usb 2-1: USB disconnect, device number 3 [ 125.643343][ T5696] capability: warning: `syz.3.464' uses deprecated v2 capabilities in a way that may be insecure [ 125.802458][ T5689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.478492][ T5689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.889548][ T5689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.029310][ T5689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.476934][ T5689] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.646626][ T5689] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.691974][ T5689] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.814184][ T5689] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.995363][ T5760] sched: RT throttling activated [ 130.155425][ T5764] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.155425][ T5764] program syz.1.481 not setting count and/or reply_len properly [ 131.584418][ T4197] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.944473][ T4295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.964260][ T4197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.024294][ T4197] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.234375][ T4295] usb 3-1: Using ep0 maxpacket: 16 [ 132.240016][ T4197] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.278983][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.365321][ T4295] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.378390][ T4197] usb 2-1: Product: syz [ 132.428097][ T4197] usb 2-1: Manufacturer: syz [ 132.437143][ T4295] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.483021][ T4197] usb 2-1: SerialNumber: syz [ 132.524959][ T4295] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.597929][ T4197] usb 2-1: config 0 descriptor?? [ 132.673285][ T4295] usb 3-1: config 1 interface 0 has no altsetting 0 [ 132.914892][ T4295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.960189][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.985996][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997045][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.058101][ T4197] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 133.080282][ T4295] usb 3-1: Product: syz [ 133.103860][ T4295] usb 3-1: Manufacturer: syz [ 133.140905][ T4197] usb 2-1: USB disconnect, device number 4 [ 133.189243][ T4295] usb 3-1: SerialNumber: syz [ 133.195480][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.526670][ T4295] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 133.553489][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.656437][ T5815] binder: 5793:5815 ioctl c0306201 0 returned -14 [ 133.853384][ T1111] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 133.894463][ T5834] netlink: set zone limit has 8 unknown bytes [ 133.943409][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 133.972847][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.030980][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 134.113389][ T5841] usblp0:failed reading printer status (-32) [ 134.123321][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 134.136795][ T4255] usb 3-1: USB disconnect, device number 3 [ 134.148070][ T5839] device wg2 entered promiscuous mode [ 134.156813][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.169491][ T5835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.170275][ T4255] usblp0: removed [ 134.272192][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 134.376603][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 134.402248][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.422731][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 134.533064][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 134.542742][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.592007][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 134.693004][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 134.732059][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.745487][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 134.785835][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 134.892947][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 134.925312][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.062260][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 136.012197][ T1111] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 136.093798][ T1111] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.101923][ T5868] binder: 5867:5868 ioctl c0306201 200000000080 returned -14 [ 136.159661][ T1111] usb 4-1: config 64 interface 0 has no altsetting 0 [ 136.342649][ T1111] usb 4-1: unable to read config index 7 descriptor/all [ 136.350312][ T1111] usb 4-1: can't read configurations, error -71 [ 136.384012][ T5880] netlink: set zone limit has 8 unknown bytes [ 137.453133][ T4278] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.475976][ T5880] Bluetooth: hci5: Frame reassembly failed (-84) [ 138.570921][ T4255] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.950997][ T4255] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.967480][ T4255] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.020645][ T4255] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.050718][ T4255] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.103011][ T4255] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.251665][ T4255] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.275983][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.302360][ T4255] usb 4-1: Product: syz [ 139.307271][ T4255] usb 4-1: Manufacturer: syz [ 139.371941][ T4255] cdc_wdm 4-1:1.0: skipping garbage [ 139.377920][ T4255] cdc_wdm 4-1:1.0: skipping garbage [ 139.412180][ T4255] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 139.418316][ T4255] cdc_wdm 4-1:1.0: Unknown control protocol [ 139.461250][ T5230] Bluetooth: hci5: command 0x1003 tx timeout [ 139.467916][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 139.591281][ T5913] binder: 5912:5913 ioctl 4018620d 0 returned -22 [ 139.642848][ T5230] usb 4-1: USB disconnect, device number 5 [ 140.025774][ T5953] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.120319][ T5953] overlayfs: failed to set xattr on upper [ 140.126614][ T5953] overlayfs: ...falling back to index=off,metacopy=off. [ 141.539433][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 141.724530][ T4307] Bluetooth: hci5: command 0x1001 tx timeout [ 141.779460][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 142.139738][ T5987] input: syz1 as /devices/virtual/input/input10 [ 142.570409][ T5993] binder_alloc: 5990: binder_alloc_buf, no vma [ 142.903822][ T5998] team0: Device gtp0 is of different type [ 143.858418][ T4307] Bluetooth: hci5: command 0x1009 tx timeout [ 143.922654][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 147.270648][ T26] kauditd_printk_skb: 317 callbacks suppressed [ 147.270660][ T26] audit: type=1326 audit(1756385577.327:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 147.302115][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.496461][ T26] audit: type=1326 audit(1756385577.367:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 147.548213][ T433] Bluetooth: hci6: Frame reassembly failed (-84) [ 147.576912][ T433] Bluetooth: hci6: Frame reassembly failed (-84) [ 147.652814][ T26] audit: type=1326 audit(1756385577.367:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 147.835282][ T26] audit: type=1326 audit(1756385577.367:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 147.954460][ T26] audit: type=1326 audit(1756385577.367:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 148.806113][ T26] audit: type=1326 audit(1756385577.367:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 149.123745][ T26] audit: type=1326 audit(1756385577.377:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1e09046be9 code=0x7ffc0000 [ 149.147968][ T26] audit: type=1326 audit(1756385577.377:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.5.566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e09046be9 code=0x0 [ 149.466804][ T6123] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 149.615758][ T1108] Bluetooth: hci6: command 0x1003 tx timeout [ 149.625490][ T146] Bluetooth: hci6: sending frame failed (-49) [ 149.658370][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.735728][ T6130] device batadv_slave_0 entered promiscuous mode [ 149.768485][ T6134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.578'. [ 150.921312][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 151.704421][ T1108] Bluetooth: hci6: command 0x1001 tx timeout [ 151.722349][ T146] Bluetooth: hci6: sending frame failed (-49) [ 152.461154][ T6176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.773287][ T23] Bluetooth: hci6: command 0x1009 tx timeout [ 155.613771][ T6224] tmpfs: Unknown parameter 'usrquota' [ 156.035200][ T6238] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.931170][ T6277] 9pnet_virtio: no channels available for device syz [ 163.910000][ T5230] Bluetooth: hci3: command 0x0409 tx timeout [ 164.707827][ T6345] 9pnet_virtio: no channels available for device syz [ 168.033334][ T6381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 168.493507][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 170.985336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 171.085801][ T6439] input: syz1 as /devices/virtual/input/input12 [ 171.198261][ T5230] [ 171.200995][ T5230] ====================================================== [ 171.211898][ T5230] WARNING: possible circular locking dependency detected [ 171.220803][ T5230] 5.15.189-syzkaller #0 Not tainted [ 171.228800][ T5230] ------------------------------------------------------ [ 171.238434][ T5230] kworker/1:8/5230 is trying to acquire lock: [ 171.246285][ T5230] ffff88807f140c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 171.265396][ T5230] [ 171.265396][ T5230] but task is already holding lock: [ 171.275267][ T5230] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 171.288757][ T5230] [ 171.288757][ T5230] which lock already depends on the new lock. [ 171.288757][ T5230] [ 171.310061][ T5230] [ 171.310061][ T5230] the existing dependency chain (in reverse order) is: [ 171.326738][ T5230] [ 171.326738][ T5230] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 171.337055][ T5230] __mutex_lock_common+0x1eb/0x2390 [ 171.347727][ T5230] mutex_lock_nested+0x17/0x20 [ 171.356462][ T5230] rfkill_register+0x33/0x8a0 [ 171.362359][ T5230] hci_register_dev+0x452/0x970 [ 171.369874][ T5230] vhci_create_device+0x32c/0x5c0 [ 171.376238][ T5230] vhci_write+0x391/0x450 [ 171.382412][ T5230] vfs_write+0x712/0xd00 [ 171.387635][ T5230] ksys_write+0x14d/0x250 [ 171.392984][ T5230] do_syscall_64+0x4c/0xa0 [ 171.398369][ T5230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.407847][ T5230] [ 171.407847][ T5230] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 171.422277][ T5230] __mutex_lock_common+0x1eb/0x2390 [ 171.428880][ T5230] mutex_lock_nested+0x17/0x20 [ 171.435822][ T5230] vhci_send_frame+0x88/0x100 [ 171.442404][ T5230] hci_send_frame+0x1a9/0x2e0 [ 171.448949][ T5230] hci_tx_work+0x9f9/0x1710 [ 171.455316][ T5230] process_one_work+0x863/0x1000 [ 171.463208][ T5230] worker_thread+0xaa8/0x12a0 [ 171.470805][ T5230] kthread+0x436/0x520 [ 171.477500][ T5230] ret_from_fork+0x1f/0x30 [ 171.483305][ T5230] [ 171.483305][ T5230] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 171.493876][ T5230] __flush_work+0xdd/0x1b0 [ 171.499826][ T5230] hci_dev_do_close+0x1e7/0x1030 [ 171.506035][ T5230] hci_unregister_dev+0x2d7/0x580 [ 171.514153][ T5230] vhci_release+0x73/0xc0 [ 171.519700][ T5230] __fput+0x234/0x930 [ 171.524853][ T5230] task_work_run+0x125/0x1a0 [ 171.530630][ T5230] do_exit+0x61e/0x20a0 [ 171.539812][ T5230] do_group_exit+0x12e/0x300 [ 171.547680][ T5230] __x64_sys_exit_group+0x3b/0x40 [ 171.554269][ T5230] do_syscall_64+0x4c/0xa0 [ 171.561089][ T5230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.570834][ T5230] [ 171.570834][ T5230] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 171.579788][ T5230] __mutex_lock_common+0x1eb/0x2390 [ 171.587674][ T5230] mutex_lock_nested+0x17/0x20 [ 171.598949][ T5230] bg_scan_update+0x44/0x3b0 [ 171.606370][ T5230] process_one_work+0x863/0x1000 [ 171.615513][ T5230] worker_thread+0xaa8/0x12a0 [ 171.622410][ T5230] kthread+0x436/0x520 [ 171.628182][ T5230] ret_from_fork+0x1f/0x30 [ 171.635319][ T5230] [ 171.635319][ T5230] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 171.649903][ T5230] __lock_acquire+0x2c33/0x7c60 [ 171.658051][ T5230] lock_acquire+0x197/0x3f0 [ 171.663710][ T5230] __flush_work+0xdd/0x1b0 [ 171.669431][ T5230] __cancel_work_timer+0x3ac/0x520 [ 171.675552][ T5230] hci_request_cancel_all+0xcc/0x300 [ 171.681840][ T5230] hci_dev_do_close+0x4e/0x1030 [ 171.687863][ T5230] hci_rfkill_set_block+0x10a/0x190 [ 171.694008][ T5230] rfkill_set_block+0x1c6/0x420 [ 171.700123][ T5230] rfkill_epo+0x75/0x170 [ 171.705582][ T5230] rfkill_op_handler+0x76/0x220 [ 171.711342][ T5230] process_one_work+0x863/0x1000 [ 171.717884][ T5230] worker_thread+0xaa8/0x12a0 [ 171.723701][ T5230] kthread+0x436/0x520 [ 171.728973][ T5230] ret_from_fork+0x1f/0x30 [ 171.734900][ T5230] [ 171.734900][ T5230] other info that might help us debug this: [ 171.734900][ T5230] [ 171.746844][ T5230] Chain exists of: [ 171.746844][ T5230] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 171.746844][ T5230] [ 171.764563][ T5230] Possible unsafe locking scenario: [ 171.764563][ T5230] [ 171.772843][ T5230] CPU0 CPU1 [ 171.778926][ T5230] ---- ---- [ 171.784993][ T5230] lock(rfkill_global_mutex); [ 171.789882][ T5230] lock(&data->open_mutex); [ 171.797713][ T5230] lock(rfkill_global_mutex); [ 171.806099][ T5230] lock((work_completion)(&hdev->bg_scan_update)); [ 171.813771][ T5230] [ 171.813771][ T5230] *** DEADLOCK *** [ 171.813771][ T5230] [ 171.823163][ T5230] 3 locks held by kworker/1:8/5230: [ 171.829454][ T5230] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 171.844368][ T5230] #1: ffffc9000300fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 171.856550][ T5230] #2: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 171.868860][ T5230] [ 171.868860][ T5230] stack backtrace: [ 171.876981][ T5230] CPU: 1 PID: 5230 Comm: kworker/1:8 Not tainted 5.15.189-syzkaller #0 [ 171.886219][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.898832][ T5230] Workqueue: events rfkill_op_handler [ 171.904579][ T5230] Call Trace: [ 171.908167][ T5230] [ 171.911717][ T5230] dump_stack_lvl+0x168/0x230 [ 171.917229][ T5230] ? load_image+0x3b0/0x3b0 [ 171.923639][ T5230] ? show_regs_print_info+0x20/0x20 [ 171.929868][ T5230] ? print_circular_bug+0x12b/0x1a0 [ 171.935381][ T5230] check_noncircular+0x274/0x310 [ 171.941450][ T5230] ? add_chain_block+0x940/0x940 [ 171.947439][ T5230] ? lockdep_lock+0xdc/0x1e0 [ 171.952027][ T5230] ? __lock_acquire+0x12d9/0x7c60 [ 171.957638][ T5230] ? lockdep_lock+0x1e0/0x1e0 [ 171.963196][ T5230] ? mark_lock+0x94/0x320 [ 171.968420][ T5230] __lock_acquire+0x2c33/0x7c60 [ 171.974603][ T5230] ? verify_lock_unused+0x140/0x140 [ 171.980312][ T5230] ? verify_lock_unused+0x140/0x140 [ 171.987910][ T5230] ? ret_from_fork+0x1e/0x30 [ 171.993407][ T5230] lock_acquire+0x197/0x3f0 [ 171.998808][ T5230] ? __flush_work+0xc1/0x1b0 [ 172.004801][ T5230] ? __lock_acquire+0x7c60/0x7c60 [ 172.010664][ T5230] ? read_lock_is_recursive+0x10/0x10 [ 172.016722][ T5230] ? start_flush_work+0x776/0x820 [ 172.022193][ T5230] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 172.030496][ T5230] __flush_work+0xdd/0x1b0 [ 172.036404][ T5230] ? __flush_work+0xc1/0x1b0 [ 172.041363][ T5230] ? flush_work+0x20/0x20 [ 172.046841][ T5230] ? try_to_grab_pending+0xf3/0x7e0 [ 172.053122][ T5230] ? lockdep_hardirqs_off+0x70/0x100 [ 172.059971][ T5230] ? mark_lock+0x94/0x320 [ 172.065047][ T5230] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 172.071790][ T5230] ? lock_chain_count+0x20/0x20 [ 172.077709][ T5230] ? lockdep_hardirqs_off+0x70/0x100 [ 172.083375][ T5230] ? mark_lock+0x94/0x320 [ 172.088134][ T5230] ? __cancel_work_timer+0x331/0x520 [ 172.093709][ T5230] __cancel_work_timer+0x3ac/0x520 [ 172.110247][ T5230] ? cancel_work_sync+0x20/0x20 [ 172.119845][ T5230] ? __cancel_work+0x1f4/0x2d0 [ 172.127815][ T5230] ? lockdep_hardirqs_on+0x94/0x140 [ 172.134024][ T5230] ? __cancel_work+0x26f/0x2d0 [ 172.140007][ T5230] ? cancel_work+0x20/0x20 [ 172.145452][ T5230] hci_request_cancel_all+0xcc/0x300 [ 172.152076][ T5230] hci_dev_do_close+0x4e/0x1030 [ 172.157242][ T5230] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 172.163976][ T5230] ? _raw_spin_unlock+0x40/0x40 [ 172.169924][ T5230] ? kobject_uevent_env+0x371/0x890 [ 172.176044][ T5230] hci_rfkill_set_block+0x10a/0x190 [ 172.181818][ T5230] ? rcu_lock_release+0x20/0x20 [ 172.188379][ T5230] rfkill_set_block+0x1c6/0x420 [ 172.193594][ T5230] rfkill_epo+0x75/0x170 [ 172.199406][ T5230] rfkill_op_handler+0x76/0x220 [ 172.205474][ T5230] process_one_work+0x863/0x1000 [ 172.210801][ T5230] ? worker_detach_from_pool+0x240/0x240 [ 172.217135][ T5230] ? lockdep_hardirqs_off+0x70/0x100 [ 172.223061][ T5230] ? _raw_spin_lock_irq+0xab/0xe0 [ 172.228619][ T5230] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 172.234277][ T5230] ? wq_worker_running+0x97/0x170 [ 172.240349][ T5230] worker_thread+0xaa8/0x12a0 [ 172.245846][ T5230] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 172.252394][ T5230] ? lockdep_hardirqs_on+0x94/0x140 [ 172.258149][ T5230] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 172.264607][ T5230] kthread+0x436/0x520 [ 172.269268][ T5230] ? rcu_lock_release+0x20/0x20 [ 172.274211][ T5230] ? kthread_blkcg+0xd0/0xd0 [ 172.279824][ T5230] ret_from_fork+0x1f/0x30 [ 172.284869][ T5230] [ 174.262794][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.293563][ C0] vkms_vblank_simulate: vblank timer overrun