last executing test programs: 4m29.229829988s ago: executing program 3 (id=162): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffea}) 4m29.084736873s ago: executing program 3 (id=164): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) r3 = fsmount(r1, 0x0, 0x2) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000080)={0x1}, 0x0) syz_clone(0x801a8491, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000880)={0xe, {0x4, 0x7, 0x2, 0x1000, "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"}}, 0x100c) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 4m23.623420646s ago: executing program 3 (id=168): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000440)=[r9], &(0x7f00000010c0), &(0x7f00000000c0)=[r7], &(0x7f00000010c0)=[0x9], 0x0, 0x300}) 4m21.823078556s ago: executing program 3 (id=173): timer_create(0x7, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 4m21.449433508s ago: executing program 3 (id=176): r0 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x8) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fanotify_init(0x200, 0x400) fanotify_mark(r2, 0x1, 0x4800002d, r1, 0x0) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.552782262s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) kcmp(r3, r4, 0x1, r2, r1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000000101040000003e800000000a000b0ac741e76370e3f00000300002804700018014000300fe8000000000000000000000000000aa14f10300fe80000000000000000000000000007b4fe718773ba4471e996a841464805e89c74f18601f83fa0b4fd6e0b19b180d2012d9c85efa8664ba2828f25e87c056824ad9024580b15558b557a7d24b7488e96deab93ccc079d"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000", @ANYBLOB="18"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0x81, @vifc_lcl_addr=@local, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1408000002010500000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) dup(0xffffffffffffffff) 4m3.772506861s ago: executing program 32 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) kcmp(r3, r4, 0x1, r2, r1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000000101040000003e800000000a000b0ac741e76370e3f00000300002804700018014000300fe8000000000000000000000000000aa14f10300fe80000000000000000000000000007b4fe718773ba4471e996a841464805e89c74f18601f83fa0b4fd6e0b19b180d2012d9c85efa8664ba2828f25e87c056824ad9024580b15558b557a7d24b7488e96deab93ccc079d"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000", @ANYBLOB="18"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0x81, @vifc_lcl_addr=@local, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1408000002010500000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) dup(0xffffffffffffffff) 2m15.439492931s ago: executing program 1 (id=464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_complete(0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) write$dsp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m14.316218399s ago: executing program 1 (id=465): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2m12.77405553s ago: executing program 1 (id=471): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xfffffffffffffffd, r5}, 0x4c) splice(r2, 0x0, r4, 0x0, 0x10, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)="a0896d32fb", 0x5}], 0x2, 0x0, 0x0, 0x4085}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r7 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) 2m12.570395208s ago: executing program 1 (id=473): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r5, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) 2m9.415329633s ago: executing program 1 (id=475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_complete(0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) write$dsp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m6.420145613s ago: executing program 1 (id=477): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1m50.768614428s ago: executing program 33 (id=477): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1m13.548336885s ago: executing program 5 (id=557): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_open_dev$video4linux(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x1, 0x2, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000800)={r4, r5, r6, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0]}) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYBLOB="18"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44094}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$IMDELTIMER(r11, 0x80044941, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 1m11.508888504s ago: executing program 5 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(r0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080), 0x2) 1m7.104347221s ago: executing program 5 (id=566): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m3.86791228s ago: executing program 5 (id=569): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000f00)='./bus\x00', 0x810000, &(0x7f0000000440)=ANY=[], 0xfd, 0xc3a, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 59.96755354s ago: executing program 5 (id=576): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d2", 0xa3}, {0x0}, {0x0}, {0x0}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc", 0x6}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f6231", 0x24}], 0x2}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 55.324178256s ago: executing program 5 (id=582): pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) r2 = fsmount(r0, 0x0, 0x2) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000080)={0x1}, 0x0) syz_clone(0x801a8491, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000880)={0xe, {0x4, 0x7, 0x2, 0x1000, "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"}}, 0x100c) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 53.841605916s ago: executing program 34 (id=582): pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) r2 = fsmount(r0, 0x0, 0x2) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000080)={0x1}, 0x0) syz_clone(0x801a8491, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000880)={0xe, {0x4, 0x7, 0x2, 0x1000, "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"}}, 0x100c) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 10.610063574s ago: executing program 0 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 10.595114385s ago: executing program 4 (id=698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 8.690071809s ago: executing program 4 (id=700): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) setitimer(0x1, &(0x7f0000000000)={{0x4000000ffffffff, 0xf4240}, {0xffffffff}}, 0x0) 8.565933243s ago: executing program 0 (id=702): r0 = socket$inet(0x2, 0x3, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) 8.518134025s ago: executing program 4 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x62, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x4e, 0x0, @opaque="95e75fce2e4a9f1e08b17a4efc38c8dc3af7971dfa854b2fd50196071caf27246c96f805a9c9957421067e1b2b81796d947b50366e4b9d157912edc1d975a85bc98b21172b91"}}}, 0x70) 8.442825117s ago: executing program 6 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0016801800018014000a000500f0ffffff0000010000000000000008001b"], 0x44}}, 0x0) 7.44824489s ago: executing program 0 (id=707): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 7.429121041s ago: executing program 6 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 6.132946314s ago: executing program 6 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000004e40), 0x4) 6.042039877s ago: executing program 4 (id=712): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 5.035148561s ago: executing program 6 (id=713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000840)=""/182, 0xb6}], 0x2}, 0x9}], 0x1, 0x100, 0x0) 4.745926921s ago: executing program 2 (id=714): syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x3ff, 0x7}}}}}}, 0x0) 4.532205688s ago: executing program 2 (id=715): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) 4.48062549s ago: executing program 6 (id=716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.374764763s ago: executing program 2 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9bd, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 3.990710746s ago: executing program 0 (id=718): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xfffffffffffffffd, r5}, 0x4c) splice(r2, 0x0, r4, 0x0, 0x10, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)="a0896d32fb", 0x5}], 0x2, 0x0, 0x0, 0x4085}], 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) socket$kcm(0x29, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 3.480014343s ago: executing program 6 (id=719): syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f29668405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.412754996s ago: executing program 0 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) 3.220168142s ago: executing program 2 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 1.516404529s ago: executing program 4 (id=722): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e5709", @ANYBLOB="40a9384824ea"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 1.422282993s ago: executing program 2 (id=723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 1.287579147s ago: executing program 0 (id=724): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000440)=[r9], &(0x7f00000010c0), &(0x7f00000000c0)=[r7], &(0x7f00000010c0)=[0x9], 0x0, 0x300}) 306.99557ms ago: executing program 2 (id=725): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000004600)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000004ac0)=[{&(0x7f0000004640)="367c05", 0x3}], 0x1, 0xfffffff6, 0x80000000, 0x4) 57.443058ms ago: executing program 7 (id=583): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 0s ago: executing program 4 (id=726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x48000) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d220f15a2008423c3e96b4925d1074a0dd64208f745417", @ANYBLOB="01002bbd7000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b00d00007300000018"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) kernel console output (not intermixed with test programs): 48][ T4229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.863232][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.873242][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.883736][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.894642][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.908702][ T4229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.918355][ T4229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.935794][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.947709][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.957464][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.968291][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.976236][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.988616][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.999266][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.033040][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.042396][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.051605][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.060918][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.068296][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.076322][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.087632][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.096301][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.108575][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.118669][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.127463][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.134860][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.158806][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.167339][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.176008][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.200605][ T4228] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.225464][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.234754][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.245039][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.252555][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.260666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.272945][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.282280][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.290023][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.298151][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.307382][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.316038][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.325328][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.348958][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.358233][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.370263][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.379133][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.391744][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.400618][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.409656][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.477448][ T4230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.496577][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.505914][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.514830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.524225][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.533078][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.542631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.551820][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.563339][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.573086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.582193][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.590876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.601784][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.611981][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.642162][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.652482][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.680432][ T4230] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.729364][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.739298][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.766872][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.774193][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.784501][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.802951][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.827468][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.847356][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.869292][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.876609][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.892902][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.902113][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.932717][ T4227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.957342][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 331.957501][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.964086][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 331.980380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.986941][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 331.990248][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.997168][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 332.005167][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.013272][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 332.017584][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.030827][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.039216][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.048072][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.057213][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.065555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.074284][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.090279][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.098201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.109053][ T4230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.123778][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.133315][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.144742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.155008][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.201514][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.211585][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.220380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.230395][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.240349][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.249868][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.257098][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.265072][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.274067][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.283635][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.290741][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.299913][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.309055][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.319206][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.333058][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.351086][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.369571][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.380330][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.392317][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.401632][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.424905][ T4227] device veth0_vlan entered promiscuous mode [ 332.451666][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.473671][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.483549][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.499927][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.517072][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.525744][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.540035][ T4227] device veth1_vlan entered promiscuous mode [ 332.561905][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.574163][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.585423][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.595437][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.604813][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.613690][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.623738][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.634107][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.643644][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.697386][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.722791][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.741340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.754219][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.767663][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.775371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.789059][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.797577][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.807996][ T4228] device veth0_vlan entered promiscuous mode [ 332.847982][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.864734][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.878248][ T4227] device veth0_macvtap entered promiscuous mode [ 332.900269][ T4228] device veth1_vlan entered promiscuous mode [ 332.917913][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.933375][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.942785][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.953078][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.967140][ T4227] device veth1_macvtap entered promiscuous mode [ 332.981450][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.991618][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.000354][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.010420][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.041448][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.049170][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.069256][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.077709][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.089116][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.103810][ T4228] device veth0_macvtap entered promiscuous mode [ 333.135752][ T4228] device veth1_macvtap entered promiscuous mode [ 333.144401][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.156181][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.164816][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.174025][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.182839][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.191979][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.200748][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.209215][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.219211][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.228267][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.239347][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.249317][ T4230] device veth0_vlan entered promiscuous mode [ 333.274545][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.283762][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.293068][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.303326][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.316260][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.330739][ T4230] device veth1_vlan entered promiscuous mode [ 333.338853][ T4231] device veth0_vlan entered promiscuous mode [ 333.346870][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.357735][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.370318][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.380772][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.390520][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.400897][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.409651][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.422110][ T4227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.431299][ T4227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.442298][ T4227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.451537][ T4227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.474163][ T4231] device veth1_vlan entered promiscuous mode [ 333.488377][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.501665][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.511372][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.522569][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.534554][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.568625][ T4229] device veth0_vlan entered promiscuous mode [ 333.578305][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.586193][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.600213][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.609728][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.623621][ T4228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.634144][ T4228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.643308][ T4228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.652263][ T4228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.705315][ T4229] device veth1_vlan entered promiscuous mode [ 333.725860][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.734501][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.744229][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.759020][ T4231] device veth0_macvtap entered promiscuous mode [ 333.802977][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.815062][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.824167][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.833433][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.847679][ T4231] device veth1_macvtap entered promiscuous mode [ 333.868652][ T4230] device veth0_macvtap entered promiscuous mode [ 333.937442][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.948034][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.982243][ T4230] device veth1_macvtap entered promiscuous mode [ 333.993295][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.001861][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.011066][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.020060][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.036790][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.036854][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 334.050218][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.058452][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.068098][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.070349][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.080766][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.093335][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 334.095315][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.101382][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 334.114995][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.125935][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 334.130997][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.134643][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 334.146234][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.159524][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.170118][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.181686][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.193208][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.207871][ T4229] device veth0_macvtap entered promiscuous mode [ 334.220639][ T4229] device veth1_macvtap entered promiscuous mode [ 334.236778][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.245041][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.254816][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.263921][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.273937][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.286769][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.295779][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.306097][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.316293][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.329127][ T4231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.338104][ T4231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.348925][ T4231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.359415][ T4231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.393938][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.422021][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.444968][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.451166][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.466148][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.485159][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.496364][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.509270][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.519955][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.531439][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.550082][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.562003][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.573670][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.584419][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.595512][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.607019][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.617919][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.628906][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.640635][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.648497][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.657418][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.668900][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.678228][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.687099][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.713545][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.732643][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.756167][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.772178][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.783817][ T4230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.794494][ T4230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.806203][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.817302][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.831738][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.844562][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.871410][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.882521][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.893109][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.903535][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.914786][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.926921][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.940225][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.968823][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.016104][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.038793][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.062100][ T4230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.084543][ T4230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.093763][ T4230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.103565][ T4230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.127762][ T4229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.144221][ T4229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.155568][ T4229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.165908][ T4229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.236622][ T4307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 335.456207][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 335.506599][ T4307] usb 4-1: Using ep0 maxpacket: 8 [ 335.637028][ T4307] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.662630][ T4307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.696671][ T4307] usb 4-1: config 0 has no interface number 0 [ 335.703980][ T4307] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.714251][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.750649][ T4307] usb 4-1: config 0 descriptor?? [ 335.776546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 335.778444][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.809797][ T4307] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 335.822165][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.866438][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 335.886469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 335.932315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 335.945932][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.981245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 336.139114][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 336.179536][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.188555][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 336.199571][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 336.208630][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 336.216202][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.239627][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 336.243264][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.264036][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.270470][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.277136][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.287695][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.318235][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.337822][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.509977][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.522680][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.651756][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.666234][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.681681][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.717173][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.896531][ T4331] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 337.106566][ T4331] usb 5-1: device descriptor read/64, error -71 [ 337.229003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 337.303407][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 337.387038][ T4331] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 337.588947][ T4331] usb 5-1: device descriptor read/64, error -71 [ 337.739733][ T4331] usb usb5-port1: attempt power cycle [ 338.131945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 338.166647][ T4331] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 338.267466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 338.336828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 338.439265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 338.997382][ T4331] usb 5-1: device descriptor read/8, error -71 [ 339.205061][ T4216] usb 4-1: USB disconnect, device number 2 [ 339.266695][ T4331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 339.356689][ T4331] usb 5-1: device descriptor read/8, error -71 [ 339.476666][ T4331] usb usb5-port1: unable to enumerate USB device [ 339.644656][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 339.856602][ T4273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 340.588597][ T4273] usb 4-1: Using ep0 maxpacket: 8 [ 340.612396][ T4366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 340.707087][ T4273] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.734381][ T4273] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.763928][ T4273] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.781448][ T4273] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.789570][ T4273] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 340.803962][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.952717][ T4273] usb 4-1: config 0 descriptor?? [ 341.165394][ T4377] ufs: You didn't specify the type of your ufs filesystem [ 341.165394][ T4377] [ 341.165394][ T4377] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 341.165394][ T4377] [ 341.165394][ T4377] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 341.198092][ T4377] ufs: ufstype=old is supported read-only [ 341.208453][ T4377] ufs: ufs_fill_super(): bad magic number [ 341.396695][ T4326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 342.340446][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.384318][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.440209][ T4326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.452944][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.464328][ T4381] sctp: failed to load transform for md5: -2 [ 342.956978][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.965075][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.974162][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.979307][ T4326] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.985359][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 342.999122][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.006481][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.014882][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.022070][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.053632][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.074723][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.082481][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.113157][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.169310][ T4326] usb 2-1: config 0 descriptor?? [ 343.169990][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.246570][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.826348][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.836022][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.864153][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.888292][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.904595][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.916513][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.939445][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.949114][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 343.964785][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.043218][ T4326] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 344.762696][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.771984][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.780431][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.788424][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.796521][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.805151][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.806644][ T4326] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 344.812455][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.830842][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.838554][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.845712][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.852776][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.859864][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.867072][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.874174][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.881233][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 344.888278][ T4273] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x0 [ 346.198741][ T4273] lenovo 0003:17EF:60A4.0001: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 346.224299][ T4273] usb 4-1: USB disconnect, device number 3 [ 346.539529][ T4326] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 347.305976][ T4326] usb 2-1: USB disconnect, device number 2 [ 347.625346][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 348.016654][ T4326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 348.046110][ T4442] fido_id[4442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 348.276573][ T4326] usb 3-1: Using ep0 maxpacket: 32 [ 348.396707][ T4326] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 348.426994][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 348.467955][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 348.706627][ T4326] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 348.725975][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.756674][ T4326] usb 3-1: Product: syz [ 348.761008][ T4326] usb 3-1: Manufacturer: syz [ 348.796575][ T4326] usb 3-1: SerialNumber: syz [ 348.828443][ T4326] usb 3-1: config 0 descriptor?? [ 349.077181][ T4450] process 'syz.4.37' launched './file1' with NULL argv: empty string added [ 349.806626][ T7] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 350.248189][ T7] usb 2-1: config 0 has no interfaces? [ 350.253603][ T4326] usb 3-1: USB disconnect, device number 2 [ 350.334266][ T7] usb 2-1: config 0 has no interfaces? [ 350.348072][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 350.376070][ T4473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 350.424274][ T4473] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.434558][ T4473] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.444043][ T4473] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.452988][ T4473] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.466577][ T7] usb 2-1: config 0 has no interfaces? [ 350.480608][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 350.489887][ T4473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 350.501481][ T4473] Zero length message leads to an empty skb [ 350.727931][ T7] usb 2-1: string descriptor 0 read error: -22 [ 350.758086][ T7] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 350.864209][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.122280][ T7] usb 2-1: config 0 descriptor?? [ 351.646664][ T4326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 352.077245][ T4326] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 352.182511][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.437155][ T4326] usb 4-1: config 0 descriptor?? [ 352.528333][ T7] usb 2-1: USB disconnect, device number 3 [ 352.865056][ T4504] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 353.377090][ T4326] usb 4-1: Cannot set autoneg [ 353.383729][ T4326] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 353.423712][ T4326] usb 4-1: USB disconnect, device number 4 [ 353.809537][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.817648][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.878084][ T4516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.726511][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 359.186584][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.576806][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 359.609264][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.636067][ T7] usb 3-1: Product: syz [ 359.644492][ T7] usb 3-1: Manufacturer: syz [ 359.644899][ T4570] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.654667][ T7] usb 3-1: SerialNumber: syz [ 359.876557][ T1108] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 360.016987][ T7] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 360.106657][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 360.171713][ T7] usb 3-1: USB disconnect, device number 3 [ 360.246796][ T1108] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 360.264908][ T1108] usb 5-1: config 1 has no interface number 0 [ 360.284532][ T1108] usb 5-1: config 1 interface 82 has no altsetting 0 [ 360.428638][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.466767][ T1108] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 360.494675][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.565884][ T1108] usb 5-1: Product: syz [ 360.586101][ T1108] usb 5-1: Manufacturer: syz [ 360.611083][ T1108] usb 5-1: SerialNumber: syz [ 361.331966][ T1108] hub 5-1:1.82: bad descriptor, ignoring hub [ 361.640177][ T1108] hub: probe of 5-1:1.82 failed with error -5 [ 361.652382][ T1108] sierra 5-1:1.82: Sierra USB modem converter detected [ 361.832354][ T1108] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 362.787455][ T1108] usb 5-1: USB disconnect, device number 6 [ 362.798405][ T1108] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 362.808252][ T1108] sierra 5-1:1.82: device disconnected [ 365.636505][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 365.906613][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 366.026718][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.066643][ T1108] usb 5-1: config 0 has no interfaces? [ 366.276907][ T1108] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 366.286015][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 366.346776][ T1108] usb 5-1: Product: syz [ 366.358355][ T1108] usb 5-1: Manufacturer: syz [ 366.376657][ T1108] usb 5-1: SerialNumber: syz [ 366.404672][ T1108] usb 5-1: config 0 descriptor?? [ 367.346633][ T4326] usb 5-1: USB disconnect, device number 7 [ 371.974268][ T4648] input: syz1 as /devices/virtual/input/input6 [ 373.153230][ T4689] netlink: 116 bytes leftover after parsing attributes in process `syz.0.101'. [ 374.087612][ T4688] sched: RT throttling activated [ 374.638868][ T4696] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 374.647453][ T4696] overlayfs: overlapping lowerdir path [ 377.100714][ T4708] netlink: 'syz.1.104': attribute type 6 has an invalid length. [ 377.898790][ T4729] tipc: Started in network mode [ 377.907228][ T4729] tipc: Node identity 080211000001, cluster identity 4711 [ 377.922996][ T4729] tipc: Enabled bearer , priority 10 [ 378.506465][ T4326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 378.589403][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.595924][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.329724][ T4274] tipc: Node number set to 134418688 [ 380.701545][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 380.748773][ T4326] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.071788][ T4326] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 381.083058][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.092753][ T4326] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 381.256727][ T4326] usb 3-1: string descriptor 0 read error: -71 [ 381.293753][ T4326] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.392962][ T4773] netlink: 108 bytes leftover after parsing attributes in process `syz.2.125'. [ 381.891822][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.936608][ T4326] usb 3-1: can't set config #1, error -71 [ 382.056450][ T4326] usb 3-1: USB disconnect, device number 4 [ 382.305123][ T4767] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 383.078832][ T4793] Invalid argument reading file caps for ./file0 [ 384.515730][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 384.698609][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 384.895643][ T4815] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 385.149274][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 385.366729][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 385.410185][ T4831] ======================================================= [ 385.410185][ T4831] WARNING: The mand mount option has been deprecated and [ 385.410185][ T4831] and is ignored by this kernel. Remove the mand [ 385.410185][ T4831] option from the mount to silence this warning. [ 385.410185][ T4831] ======================================================= [ 385.576751][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.595930][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.649527][ T7] usb 2-1: Product: syz [ 385.653769][ T7] usb 2-1: Manufacturer: syz [ 385.682235][ T7] usb 2-1: SerialNumber: syz [ 385.729565][ T7] usb 2-1: config 0 descriptor?? [ 387.740438][ T4326] usb 2-1: USB disconnect, device number 4 [ 389.282045][ T4871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 389.296974][ T4326] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 389.757047][ T4326] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 389.765894][ T4326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.898271][ T4326] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 389.907964][ T4326] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 389.916167][ T4326] usb 2-1: Manufacturer: syz [ 389.922994][ T4326] usb 2-1: config 0 descriptor?? [ 390.336477][ T4326] rc_core: IR keymap rc-hauppauge not found [ 390.410229][ T4326] Registered IR keymap rc-empty [ 390.427752][ T4326] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 390.448611][ T4326] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 390.496662][ T4331] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 391.188201][ T4326] usb 2-1: USB disconnect, device number 5 [ 391.216979][ T4331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.244829][ T4331] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 391.305564][ T4331] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.356518][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.432284][ T4899] loop2: detected capacity change from 0 to 7 [ 392.132766][ T4899] loop2: [POWERTEC] p1 p2 p3 [ 392.451881][ T4899] loop2: p1 start 1819279361 is beyond EOD, truncated [ 392.460259][ T4908] udc-core: couldn't find an available UDC or it's busy [ 392.467955][ T4908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 392.720833][ T4899] loop2: p2 start 144 is beyond EOD, truncated [ 392.769330][ T4899] loop2: p3 start 262144 is beyond EOD, truncated [ 393.028914][ T1108] usb 4-1: USB disconnect, device number 5 [ 393.859832][ T4926] autofs4:pid:4926:autofs_fill_super: called with bogus options [ 394.185151][ T4930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.193124][ T4930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.279332][ T4930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.287220][ T4930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.809158][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 401.536657][ T4275] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 401.659945][ T4977] overlayfs: failed to resolve './file0/file0': -2 [ 402.324531][ T4976] capability: warning: `syz.3.176' uses 32-bit capabilities (legacy support in use) [ 402.576663][ T4275] usb 1-1: Using ep0 maxpacket: 8 [ 402.721184][ T4275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.752194][ T4275] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.157571][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.188877][ T4275] usb 1-1: config 0 descriptor?? [ 403.237993][ T4275] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 403.330081][ T4994] autofs4:pid:4994:autofs_fill_super: called with bogus options [ 403.432263][ T4996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.440239][ T4996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.452857][ T4996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.461148][ T4996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.865484][ T4307] usb 1-1: USB disconnect, device number 2 [ 405.435519][ T4999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 407.797369][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 408.057840][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 408.176835][ T7] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 408.191813][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.461204][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 408.490936][ T7] usb 1-1: config 0 has no interface number 0 [ 408.502483][ T7] usb 1-1: too many endpoints for config 0 interface 104 altsetting 255: 255, using maximum allowed: 30 [ 408.515027][ T7] usb 1-1: config 0 interface 104 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 408.529820][ T7] usb 1-1: config 0 interface 104 has no altsetting 0 [ 408.736644][ T7] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 409.642208][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.656546][ T7] usb 1-1: Product: syz [ 409.660838][ T7] usb 1-1: Manufacturer: syz [ 409.665642][ T7] usb 1-1: SerialNumber: syz [ 409.678779][ T7] usb 1-1: config 0 descriptor?? [ 409.743209][ T7] asix: probe of 1-1:0.104 failed with error -22 [ 413.760882][ T7] usb 1-1: USB disconnect, device number 3 [ 413.990025][ T5051] autofs4:pid:5051:autofs_fill_super: called with bogus options [ 415.009376][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.017055][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.841862][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.849839][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.157141][ T5062] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.109183][ T4275] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 420.497814][ T4275] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 420.509351][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 420.520785][ T4275] usb 2-1: config 0 has no interface number 0 [ 420.558501][ T4275] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 420.609738][ T4275] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.767127][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.786488][ T4326] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 420.798566][ T4275] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 420.811488][ T4275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.824040][ T4275] usb 2-1: Product: syz [ 420.829116][ T4275] usb 2-1: Manufacturer: syz [ 420.834215][ T4275] usb 2-1: SerialNumber: syz [ 420.842044][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.850845][ T4275] usb 2-1: config 0 descriptor?? [ 420.866217][ T5087] device bridge_slave_0 entered promiscuous mode [ 420.873796][ T5091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.887553][ T4275] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 420.905035][ T4275] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 421.083427][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.136777][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 421.156152][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.196570][ T4326] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.196614][ T4326] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.196649][ T4326] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.196672][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.216794][ T5101] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 421.244643][ T5087] device bridge_slave_1 entered promiscuous mode [ 421.325273][ T7] usb 2-1: USB disconnect, device number 6 [ 421.370407][ T7] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 421.447025][ T7] cyberjack 2-1:0.69: device disconnected [ 421.579572][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.617084][ T4275] usb 5-1: USB disconnect, device number 8 [ 421.786842][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 421.800679][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.884767][ T5087] team0: Port device team_slave_0 added [ 421.920896][ T5087] team0: Port device team_slave_1 added [ 422.024770][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.053840][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.096276][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.121001][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.132545][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.169113][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.235068][ T5120] autofs4:pid:5120:autofs_fill_super: called with bogus options [ 423.912262][ T4326] Bluetooth: hci5: command 0x041b tx timeout [ 423.983084][ T5122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.990919][ T5122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.262633][ T5122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.270524][ T5122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.792827][ T5087] device hsr_slave_0 entered promiscuous mode [ 425.932752][ T5087] device hsr_slave_1 entered promiscuous mode [ 425.982345][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.996560][ T5087] Cannot create hsr debugfs directory [ 427.043626][ T4275] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 427.112071][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 427.264504][ T5123] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 427.536497][ T5123] usb 3-1: Using ep0 maxpacket: 16 [ 427.686574][ T4275] usb 2-1: Using ep0 maxpacket: 32 [ 427.807906][ T4275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.829879][ T5123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.833122][ T4275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.850047][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.877324][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18432, setting to 1024 [ 427.886557][ T4275] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.897801][ T5123] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 427.897835][ T5123] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.932517][ T4254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.962090][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.984523][ T4275] usb 2-1: config 0 descriptor?? [ 427.996978][ T5123] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 428.012835][ T5123] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 428.039813][ T5123] usb 3-1: Manufacturer: syz [ 428.048407][ T4275] hub 2-1:0.0: USB hub found [ 428.048631][ T5123] usb 3-1: config 0 descriptor?? [ 428.087610][ T4254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.180616][ T4254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.263095][ T4254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.266691][ T4275] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 428.416726][ T5123] rc_core: IR keymap rc-hauppauge not found [ 428.423310][ T5123] Registered IR keymap rc-empty [ 428.434622][ T5087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.462570][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.470043][ T5087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.499132][ T4254] tipc: Disabling bearer [ 428.511455][ T5087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.523670][ T4254] tipc: Left network mode [ 428.528603][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.568375][ T5087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.578285][ T5123] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 428.599223][ T5123] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 428.657477][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.716786][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.723282][ T4275] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 428.784605][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.836779][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.846826][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.891544][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.905006][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.916773][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.975105][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.982021][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 429.011507][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.037237][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.046573][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 429.095615][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.102768][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.128941][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 429.145932][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.162656][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 429.181540][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.200022][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.219477][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 429.221445][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.233905][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.280954][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.296556][ T5123] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 429.340140][ T5123] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 429.356093][ T5123] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 429.409210][ T5144] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 429.439790][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.459088][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.499101][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.524860][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.592070][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.609965][ T4326] usb 3-1: USB disconnect, device number 5 [ 429.634765][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.669812][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.704943][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.828953][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.848434][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.024986][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.038325][ T4326] usb 2-1: USB disconnect, device number 7 [ 430.046970][ T5144] usbhid 2-1:0.0: reset_resume error -19 [ 431.285962][ T4254] device hsr_slave_0 left promiscuous mode [ 431.401450][ T4254] device hsr_slave_1 left promiscuous mode [ 431.495455][ T4254] device bridge_slave_1 left promiscuous mode [ 431.516421][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.127080][ T4254] device bridge_slave_0 left promiscuous mode [ 432.133407][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.098292][ T4254] device veth1_macvtap left promiscuous mode [ 433.105164][ T4254] device veth0_macvtap left promiscuous mode [ 433.199587][ T4254] device veth1_vlan left promiscuous mode [ 433.207510][ T4254] device veth0_vlan left promiscuous mode [ 433.340246][ T5247] syz.1.238 uses obsolete (PF_INET,SOCK_PACKET) [ 433.970213][ T4254] team0 (unregistering): Port device team_slave_1 removed [ 433.985590][ T4254] team0 (unregistering): Port device team_slave_0 removed [ 434.002509][ T4254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.024508][ T4254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.125767][ T4254] bond0 (unregistering): Released all slaves [ 435.048676][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.075298][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.137749][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.441480][ T5292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 436.453996][ T5292] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 436.685748][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.694722][ T5292] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 436.703491][ T5296] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 436.711724][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.247'. [ 436.721102][ T5296] device batadv0 entered promiscuous mode [ 436.727902][ T5296] bond0: (slave batadv0): Releasing backup interface [ 436.737312][ T5296] bridge0: port 3(batadv0) entered blocking state [ 436.744026][ T5296] bridge0: port 3(batadv0) entered disabled state [ 437.228091][ T4513] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 437.238014][ T4513] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 437.585041][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.616061][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.777257][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.817062][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.847819][ T5087] device veth0_vlan entered promiscuous mode [ 437.855817][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.901467][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.930215][ T5087] device veth1_vlan entered promiscuous mode [ 438.023134][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 438.045389][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 438.102445][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.143055][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.250857][ T5087] device veth0_macvtap entered promiscuous mode [ 438.741805][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.835531][ T5087] device veth1_macvtap entered promiscuous mode [ 439.157557][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.516756][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.830466][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.905451][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.911023][ T5358] overlayfs: unrecognized mount option "= [ 439.911023][ T5358] ›¡Q" or missing value [ 440.271699][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.319484][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.479577][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.594038][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.650335][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.694449][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.731671][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.009465][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.350618][ T5087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.401488][ T5377] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 441.417790][ T5087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.438546][ T5087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.458500][ T5377] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 441.484679][ T5087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.541943][ T5372] loop1: detected capacity change from 0 to 4 [ 441.554892][ T5372] Dev loop1: unable to read RDB block 4 [ 441.554945][ T5372] loop1: unable to read partition table [ 441.555037][ T5372] loop1: partition table beyond EOD, truncated [ 441.555058][ T5372] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑàâ·û) failed (rc=-5) [ 441.738990][ T3561] Dev loop1: unable to read RDB block 4 [ 441.756530][ T3561] loop1: unable to read partition table [ 441.770941][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.796696][ T3561] loop1: partition table beyond EOD, truncated [ 441.807170][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.843412][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.259199][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.284129][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.146038][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 443.827423][ T5416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 446.528005][ T5431] netlink: set zone limit has 8 unknown bytes [ 447.526466][ T4938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 448.506457][ T4216] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 448.716688][ T4938] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 448.736480][ T4938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.761416][ T5471] ufs: You didn't specify the type of your ufs filesystem [ 448.761416][ T5471] [ 448.761416][ T5471] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 448.761416][ T5471] [ 448.761416][ T5471] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 448.805665][ T4938] usb 2-1: config 0 descriptor?? [ 448.868857][ T4938] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 448.886817][ T4216] usb 1-1: config 155 has an invalid interface number: 255 but max is 0 [ 448.906164][ T4216] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 448.931510][ T4216] usb 1-1: config 155 has no interface number 0 [ 448.956441][ T5471] ufs: ufstype=old is supported read-only [ 448.966874][ T4216] usb 1-1: too many endpoints for config 155 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 448.971064][ T5471] ufs: ufs_fill_super(): bad magic number [ 449.009141][ T4216] usb 1-1: config 155 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 449.056612][ T4216] usb 1-1: config 155 interface 255 has no altsetting 0 [ 449.247497][ T4216] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 449.257896][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.266149][ T4216] usb 1-1: Product: syz [ 449.275280][ T4216] usb 1-1: Manufacturer: syz [ 449.283798][ T4216] usb 1-1: SerialNumber: syz [ 449.437147][ T5481] comedi comedi0: Minor 3 could not be opened [ 449.451936][ T4216] imon 1-1:155.255: unable to register, err -19 [ 449.710026][ T21] usb 1-1: USB disconnect, device number 4 [ 450.056507][ T4938] gspca_stv06xx: I2C: Read error writing address: -71 [ 450.421917][ T4938] usb 2-1: USB disconnect, device number 8 [ 452.047837][ T5521] ufs: You didn't specify the type of your ufs filesystem [ 452.047837][ T5521] [ 452.047837][ T5521] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 452.047837][ T5521] [ 452.047837][ T5521] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 452.159738][ T5521] ufs: ufstype=old is supported read-only [ 452.346633][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 452.799557][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 452.895429][ T5521] ufs: ufs_fill_super(): bad magic number [ 452.926482][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 452.932822][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 453.063891][ T5536] netlink: 312 bytes leftover after parsing attributes in process `syz.2.305'. [ 453.073468][ T5536] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 454.756188][ T5548] tipc: Started in network mode [ 454.761115][ T5548] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 454.771356][ T5548] tipc: Enabled bearer , priority 10 [ 454.897324][ T5538] autofs4:pid:5538:autofs_fill_super: called with bogus options [ 455.060206][ T5560] ax25_connect(): syz.0.311 uses autobind, please contact jreuter@yaina.de [ 455.944133][ T1108] tipc: Node number set to 1 [ 456.108166][ T5564] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 457.025501][ T5583] ufs: You didn't specify the type of your ufs filesystem [ 457.025501][ T5583] [ 457.025501][ T5583] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 457.025501][ T5583] [ 457.025501][ T5583] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 457.058433][ T5583] ufs: ufstype=old is supported read-only [ 457.259196][ T5583] ufs: ufs_fill_super(): bad magic number [ 461.056462][ T4277] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 462.026476][ T4277] usb 1-1: Using ep0 maxpacket: 16 [ 462.146805][ T4277] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.154906][ T4277] usb 1-1: config 0 has no interface number 0 [ 462.306459][ T5608] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 462.327270][ T4277] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 462.374389][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.480987][ T4277] usb 1-1: Product: syz [ 462.533625][ T4277] usb 1-1: Manufacturer: syz [ 462.594195][ T4277] usb 1-1: SerialNumber: syz [ 462.730398][ T4277] usb 1-1: config 0 descriptor?? [ 462.956472][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 463.236512][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 463.356962][ T21] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 463.392855][ T21] usb 3-1: config 0 has no interface number 1 [ 463.537616][ T4277] usb 1-1: selecting invalid altsetting 1 [ 463.545132][ T4277] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 463.607694][ T21] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 463.643918][ T4277] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 463.644249][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.663630][ T4277] speedtch: probe of 1-1:0.1 failed with error -22 [ 463.799973][ T4277] usb 1-1: USB disconnect, device number 5 [ 463.871939][ T21] usb 3-1: Product: syz [ 463.942103][ T21] usb 3-1: Manufacturer: syz [ 464.023620][ T21] usb 3-1: SerialNumber: syz [ 464.219656][ T21] usb 3-1: config 0 descriptor?? [ 464.498029][ T21] viperboard 3-1:0.61: version 0.00 found at bus 003 address 006 [ 465.042038][ T21] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 465.245505][ T21] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 465.717874][ T5651] ufs: You didn't specify the type of your ufs filesystem [ 465.717874][ T5651] [ 465.717874][ T5651] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 465.717874][ T5651] [ 465.717874][ T5651] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 465.750040][ T5651] ufs: ufstype=old is supported read-only [ 468.263688][ T5651] ufs: ufs_fill_super(): bad magic number [ 468.396544][ T5608] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 468.404461][ T5608] usb 5-1: can't read configurations, error -71 [ 468.500497][ T21] viperboard 3-1:0.0: version 0.00 found at bus 003 address 006 [ 468.539684][ T21] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 468.720932][ T21] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 469.845177][ T21] usb 3-1: USB disconnect, device number 6 [ 471.370845][ T4933] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 471.395259][ T5701] ufs: You didn't specify the type of your ufs filesystem [ 471.395259][ T5701] [ 471.395259][ T5701] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 471.395259][ T5701] [ 471.395259][ T5701] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 471.427166][ T5701] ufs: ufstype=old is supported read-only [ 472.226559][ T5701] ufs: ufs_fill_super(): bad magic number [ 475.776588][ T4933] usb 5-1: unable to read config index 0 descriptor/all [ 475.783751][ T4933] usb 5-1: can't read configurations, error -71 [ 476.119795][ T5722] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 476.717002][ T5732] dlm: dev_write: no op 0 0 [ 479.217778][ T5778] loop2: detected capacity change from 0 to 1024 [ 479.227780][ T5775] kernel profiling enabled (shift: 3) [ 479.321254][ T5790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 479.415690][ T5778] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.365: lblock 2 mapped to illegal pblock 2 (length 1) [ 479.542081][ T5778] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 479.569504][ T5778] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.365: lblock 0 mapped to illegal pblock 48 (length 1) [ 479.598917][ T5778] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 479.616697][ T5778] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.365: Failed to acquire dquot type 0 [ 479.663191][ T5778] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 479.754061][ T5778] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.365: mark_inode_dirty error [ 479.806659][ T5778] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 479.829562][ T5778] EXT4-fs (loop2): 1 orphan inode deleted [ 479.835354][ T5778] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 479.909155][ T5802] Cannot find add_set index 65532 as target [ 479.946824][ T1279] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 480.357301][ T1279] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 480.583192][ T1279] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 483.174768][ T4287] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 483.291321][ T4287] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 483.528435][ T4287] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 483.817679][ T4229] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 484.034808][ T4229] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 484.201875][ T4229] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 484.357165][ T5849] dlm: dev_write: no op 0 74000000000000 [ 486.753793][ T5872] Illegal XDP return value 51, expect packet loss! [ 486.824518][ T5877] loop4: detected capacity change from 0 to 164 [ 487.072220][ T5877] Unable to read rock-ridge attributes [ 488.693224][ T5890] ufs: You didn't specify the type of your ufs filesystem [ 488.693224][ T5890] [ 488.693224][ T5890] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 488.693224][ T5890] [ 488.693224][ T5890] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 488.724542][ T5890] ufs: ufstype=old is supported read-only [ 488.732538][ T5890] ufs: ufs_fill_super(): bad magic number [ 488.894601][ T5901] netlink: 180 bytes leftover after parsing attributes in process `syz.4.391'. [ 492.979794][ T5945] loop0: detected capacity change from 0 to 512 [ 493.248063][ T5945] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 496.358539][ T5966] loop2: detected capacity change from 0 to 512 [ 497.792750][ T5966] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 498.094872][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 498.679300][ T5974] loop4: detected capacity change from 0 to 512 [ 498.744979][ T5974] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.470115][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.476666][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.625635][ T5997] mmap: syz.2.410 (5997) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 502.663038][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 506.533318][ T6057] autofs4:pid:6057:autofs_fill_super: called with bogus options [ 506.597636][ T6063] vcan0: tx address claim with dlc 0 [ 511.891440][ T6096] input: syz0 as /devices/virtual/input/input10 [ 513.192741][ T6110] ptrace attach of "./syz-executor exec"[4230] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ./file0 °ÿ Àÿ ÿÿÿÿ  N$à   8   € \x0c Û  þÿÿú ÿÿÿÿ blkio.bfq.dequeue [ 513.422057][ T6123] loop2: detected capacity change from 0 to 2048 [ 514.396146][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 514.408018][ T6123] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.642707][ T6141] autofs4:pid:6141:autofs_fill_super: called with bogus options [ 516.537761][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.545601][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.583116][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.590782][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.651031][ T6141] bridge0: port 3(batadv0) entered disabled state [ 517.346580][ T6153] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 517.499913][ T6153] team0: Device vxcan1 is of different type [ 517.697290][ T6153] syz.0.442 (6153) used greatest stack depth: 21008 bytes left [ 519.948457][ T6193] loop2: detected capacity change from 0 to 164 [ 520.139185][ T4272] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 521.071429][ T6205] loop4: detected capacity change from 0 to 512 [ 521.187775][ T4272] usb 6-1: Using ep0 maxpacket: 32 [ 521.293621][ T6205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 521.306893][ T4272] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 521.335930][ T4272] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 521.349832][ T4273] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 521.381898][ T6211] loop2: detected capacity change from 0 to 1024 [ 521.409128][ T6205] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.450011][ T4272] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 521.646405][ T4272] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 521.974711][ T4272] usb 6-1: config 0 interface 0 has no altsetting 0 [ 522.027567][ T6216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 522.045574][ T6216] Quota error (device loop4): write_blk: dquota write failed [ 522.054021][ T6216] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 522.064586][ T6216] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.453: Failed to acquire dquot type 0 [ 522.317025][ T6211] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 522.356799][ T4273] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 522.367881][ T4272] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 522.399669][ T4272] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 522.409156][ T4273] usb 2-1: too many endpoints for config 2 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 522.439944][ T4272] usb 6-1: Product: syz [ 522.445216][ T6211] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 522.453263][ T4273] usb 2-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 522.453301][ T4273] usb 2-1: config 2 interface 0 has no altsetting 0 [ 522.456706][ T4272] usb 6-1: Manufacturer: syz [ 522.512015][ T6211] EXT4-fs (loop2): orphan cleanup on readonly fs [ 522.562011][ T6211] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.454: Inode bitmap for bg 0 marked uninitialized [ 522.578866][ T6211] EXT4-fs (loop2): Remounting filesystem read-only [ 522.622060][ T6211] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 522.766588][ T4273] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 522.787197][ T4272] usb 6-1: SerialNumber: syz [ 522.797130][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.843276][ T4272] usb 6-1: config 0 descriptor?? [ 523.002159][ T4273] usb 2-1: Product: syz [ 523.027159][ T4272] usb 6-1: can't set config #0, error -71 [ 523.036195][ T4273] usb 2-1: Manufacturer: syz [ 523.536684][ T4272] usb 6-1: USB disconnect, device number 2 [ 523.545902][ T4273] usb 2-1: SerialNumber: syz [ 523.793330][ T6234] autofs4:pid:6234:autofs_fill_super: called with bogus options [ 524.267177][ T4273] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 524.284622][ T4273] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 524.932860][ T4273] usb 2-1: USB disconnect, device number 9 [ 526.354134][ T6242] loop2: detected capacity change from 0 to 8192 [ 530.033394][ T6287] device bridge0 entered promiscuous mode [ 530.081851][ T6287] device vlan2 entered promiscuous mode [ 533.079057][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.087653][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.115097][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.123318][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.291206][ T6310] loop2: detected capacity change from 0 to 512 [ 535.332366][ T6310] EXT4-fs error (device loop2): __ext4_iget:4912: inode #3: block 127754: comm syz.2.469: invalid block [ 535.345580][ T6310] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.469: Bad quota inode: 3, type: 0 [ 535.364804][ T6310] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 535.419308][ T6310] EXT4-fs (loop2): mount failed [ 536.966612][ T4216] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 537.309604][ T6331] bridge0: port 3(erspan0) entered blocking state [ 537.319682][ T6331] bridge0: port 3(erspan0) entered disabled state [ 537.329605][ T6331] device erspan0 entered promiscuous mode [ 537.338326][ T6331] bridge0: port 3(erspan0) entered blocking state [ 537.345313][ T6331] bridge0: port 3(erspan0) entered forwarding state [ 537.386521][ T4216] usb 5-1: Using ep0 maxpacket: 16 [ 537.567070][ T4216] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 538.417535][ T4216] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 538.526462][ T4216] usb 5-1: string descriptor 0 read error: -71 [ 538.538920][ T4216] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 538.586470][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.616571][ T4216] usb 5-1: can't set config #1, error -71 [ 538.638981][ T4216] usb 5-1: USB disconnect, device number 13 [ 538.695426][ T6331] netlink: 68 bytes leftover after parsing attributes in process `syz.0.478'. [ 539.084759][ T6354] loop0: detected capacity change from 0 to 512 [ 539.381838][ T6354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 539.418019][ T6354] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.531957][ T6342] loop5: detected capacity change from 0 to 32768 [ 539.666503][ T4216] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 539.737956][ T6360] loop2: detected capacity change from 0 to 764 [ 539.763600][ T6342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.480 (6342) [ 540.010385][ T6360] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 540.856674][ T4216] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 540.885103][ T4216] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 540.895916][ T6342] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 540.906728][ T6342] BTRFS info (device loop5): using free space tree [ 540.916810][ T6342] BTRFS info (device loop5): has skinny extents [ 542.826788][ T6386] loop4: detected capacity change from 0 to 32768 [ 543.692394][ T4216] usb 5-1: Product: syz [ 546.606951][ T4216] usb 5-1: Manufacturer: syz [ 546.611696][ T4216] usb 5-1: SerialNumber: syz [ 547.647916][ T4216] usb 5-1: config 0 descriptor?? [ 547.677715][ T4216] usb 5-1: can't set config #0, error -71 [ 547.689570][ T4216] usb 5-1: USB disconnect, device number 14 [ 547.714506][ T6342] BTRFS error (device loop5): open_ctree failed: -12 [ 547.739693][ T6418] loop2: detected capacity change from 0 to 1024 [ 547.796894][ T6418] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.376458][ T4275] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 548.387003][ T6418] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 549.956696][ T4275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.986393][ T4275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.019798][ T4275] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.056506][ T4275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.097153][ T4275] usb 6-1: config 0 descriptor?? [ 550.157269][ T4275] hub 6-1:0.0: USB hub found [ 550.376521][ T4275] hub 6-1:0.0: 1 port detected [ 552.296833][ T4275] hub 6-1:0.0: activate --> -90 [ 553.178065][ T6451] ubi31: attaching mtd0 [ 553.184138][ T6451] ubi31: scanning is finished [ 553.188933][ T6451] ubi31: empty MTD device detected [ 553.388293][ T6451] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 553.585319][ T4215] usb 6-1: USB disconnect, device number 3 [ 553.596536][ T4275] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 554.376531][ T4247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.520131][ T4247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.887579][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 555.916821][ T4938] Bluetooth: hci0: command 0x0409 tx timeout [ 556.109057][ T4247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.338424][ T4247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.543853][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 556.973149][ T6496] loop2: detected capacity change from 0 to 32768 [ 558.082083][ T4938] Bluetooth: hci0: command 0x041b tx timeout [ 558.563785][ T6511] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 559.409098][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.511'. [ 559.419724][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.428928][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.444184][ T6463] device bridge_slave_0 entered promiscuous mode [ 559.456884][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.464205][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.473887][ T6463] device bridge_slave_1 entered promiscuous mode [ 559.496193][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.508358][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.545441][ T6463] team0: Port device team_slave_0 added [ 559.585905][ T6463] team0: Port device team_slave_1 added [ 560.588333][ T6517] autofs4:pid:6517:autofs_fill_super: called with bogus options [ 562.501531][ T4938] Bluetooth: hci0: command 0x040f tx timeout [ 562.919772][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926216][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.947545][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.954877][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.067715][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.089312][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.116414][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.196163][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.514523][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 565.521673][ T6463] device hsr_slave_0 entered promiscuous mode [ 565.646920][ T6463] device hsr_slave_1 entered promiscuous mode [ 567.779877][ T4247] device hsr_slave_0 left promiscuous mode [ 567.808035][ T4247] device hsr_slave_1 left promiscuous mode [ 567.816250][ T4247] device bridge_slave_1 left promiscuous mode [ 567.833216][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.988855][ T4247] device bridge_slave_0 left promiscuous mode [ 568.015713][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.051754][ T4247] device veth1_macvtap left promiscuous mode [ 570.061326][ T4247] device veth0_macvtap left promiscuous mode [ 570.091540][ T4247] device veth1_vlan left promiscuous mode [ 570.099469][ T6596] autofs4:pid:6596:autofs_fill_super: called with bogus options [ 570.160572][ T4247] device veth0_vlan left promiscuous mode [ 570.862253][ T6602] netlink: 108 bytes leftover after parsing attributes in process `syz.0.530'. [ 573.122643][ T6611] loop4: detected capacity change from 0 to 128 [ 573.350099][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 573.397374][ T6611] FAT-fs (loop4): Filesystem has been set read-only [ 573.422692][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 573.436222][ T6607] loop5: detected capacity change from 0 to 8192 [ 573.463234][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 573.505304][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.076032][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.107911][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.141722][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.186020][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.228922][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.250881][ T6611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 574.263525][ T26] audit: type=1800 audit(1775156806.030:2): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 574.298206][ T6611] syz.4.533 (6611) used greatest stack depth: 20272 bytes left [ 574.342626][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 574.424907][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 574.449108][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.482464][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.631417][ T4247] bond0 (unregistering): Released all slaves [ 575.929285][ T6643] loop5: detected capacity change from 0 to 64 [ 576.058629][ T6643] hfs: unable to parse mount options [ 576.571437][ T6463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 576.947536][ T6463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 577.001303][ T6463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.017146][ T6624] loop4: detected capacity change from 0 to 40427 [ 577.179081][ T6463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.203035][ T6624] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 577.352418][ T6624] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 578.013632][ T6624] F2FS-fs (loop4): invalid crc value [ 578.373068][ T6624] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 579.282675][ T6664] netlink: 108 bytes leftover after parsing attributes in process `syz.5.543'. [ 579.294013][ T6463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.681921][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.800943][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.859223][ T6665] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 579.902671][ T6463] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.929638][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 579.958214][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 579.998315][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.005447][ T6519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.107376][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 580.382444][ T6683] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 581.318317][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 581.414656][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.610031][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.617304][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.886081][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.083134][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.300682][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.531466][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.600530][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.815397][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.838007][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.908134][ T6698] autofs4:pid:6698:autofs_fill_super: called with bogus options [ 583.923660][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.367087][ T6691] loop4: detected capacity change from 0 to 8192 [ 585.394783][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.608230][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.888313][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.214761][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.342926][ T6712] loop2: detected capacity change from 0 to 512 [ 589.395201][ T6712] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 589.591513][ T6712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 590.385425][ T6712] EXT4-fs: error -4 creating inode table initialization thread [ 590.394114][ T6712] EXT4-fs (loop2): mount failed [ 590.536798][ T6727] netlink: 108 bytes leftover after parsing attributes in process `syz.5.557'. [ 591.022354][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.100094][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.130199][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.194421][ T6759] No such timeout policy "syz1" [ 597.090646][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 597.100337][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 597.400514][ T6765] loop4: detected capacity change from 0 to 8192 [ 597.448981][ T6777] autofs4:pid:6777:autofs_fill_super: called with bogus options [ 597.461703][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.489976][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.559741][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 597.997794][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.028473][ T6463] device veth0_vlan entered promiscuous mode [ 599.506847][ T6463] device veth1_vlan entered promiscuous mode [ 600.587997][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 600.599562][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 600.698528][ T6463] device veth0_macvtap entered promiscuous mode [ 600.708104][ T6785] loop5: detected capacity change from 0 to 2048 [ 600.741946][ T6785] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 600.750805][ T6463] device veth1_macvtap entered promiscuous mode [ 600.775843][ T6785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.809561][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.823522][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.848006][ T6463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.875527][ T6463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.056642][ T6463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.065654][ T6463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.116654][ T6790] netlink: 108 bytes leftover after parsing attributes in process `syz.4.570'. [ 601.544006][ T6785] overlayfs: upper fs needs to support d_type. [ 601.597158][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 601.616965][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 601.641572][ T6785] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 601.677026][ T6785] overlayfs: failed to set xattr on upper [ 601.682811][ T6785] overlayfs: ...falling back to index=off,metacopy=off. [ 601.701960][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.117101][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.918024][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.950497][ T5087] UDF-fs: error (device loop5): udf_read_inode: (ino 1313) failed !bh [ 603.193219][ T5087] UDF-fs: error (device loop5): udf_read_inode: (ino 1313) failed !bh [ 604.889586][ T6818] loop2: detected capacity change from 0 to 2048 [ 606.126701][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.134585][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.352450][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.363770][ T6818] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.398446][ T6818] overlayfs: failed to resolve './bus': -2 [ 607.281276][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 607.432356][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.452570][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.522160][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 607.733686][ T6840] netlink: 108 bytes leftover after parsing attributes in process `syz.0.581'. [ 609.479629][ T6847] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 610.499326][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 611.660755][ T4247] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.698163][ T6868] loop6: detected capacity change from 0 to 512 [ 611.821517][ T4247] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.944449][ T6868] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 611.966652][ T6868] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.210234][ T4247] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.417141][ T6889] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 612.432895][ T6889] Quota error (device loop6): write_blk: dquota write failed [ 612.440677][ T6889] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 612.450719][ T6889] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.589: Failed to acquire dquot type 0 [ 613.122320][ T4247] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.297699][ T6895] loop6: detected capacity change from 0 to 2048 [ 613.455605][ T6895] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 613.506475][ T21] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 613.747876][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 613.825304][ T6895] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 613.897866][ T6895] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 613.911545][ T6895] EXT4-fs (loop6): This should not happen!! Data will be lost [ 613.911545][ T6895] [ 613.921940][ T21] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 613.930332][ T21] usb 3-1: config 0 has no interface number 0 [ 613.936770][ T21] usb 3-1: config 0 interface 41 has no altsetting 0 [ 613.946488][ T6895] EXT4-fs (loop6): Total free blocks count 0 [ 613.954455][ T6895] EXT4-fs (loop6): Free/Dirty block details [ 613.960854][ T4938] Bluetooth: hci2: command 0x0409 tx timeout [ 613.969039][ T6895] EXT4-fs (loop6): free_blocks=66060288 [ 613.974811][ T6895] EXT4-fs (loop6): dirty_blocks=48 [ 613.981533][ T6895] EXT4-fs (loop6): Block reservation details [ 613.990491][ T6895] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 614.083171][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.136106][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.146668][ T21] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 614.187728][ T6871] device bridge_slave_0 entered promiscuous mode [ 614.191047][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.213874][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.238862][ T21] usb 3-1: Product: syz [ 614.245897][ T21] usb 3-1: Manufacturer: syz [ 614.254748][ T21] usb 3-1: SerialNumber: syz [ 614.256736][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.275817][ T21] usb 3-1: config 0 descriptor?? [ 614.300689][ T6871] device bridge_slave_1 entered promiscuous mode [ 614.589808][ T5123] libceph: connect (1)[c::]:6789 error -101 [ 614.620743][ T5123] libceph: mon0 (1)[c::]:6789 connect error [ 614.627760][ T6923] ceph: No mds server is up or the cluster is laggy [ 614.828105][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.975371][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.027349][ T5123] Bluetooth: hci2: command 0x041b tx timeout [ 616.085743][ T6871] team0: Port device team_slave_0 added [ 616.098509][ T6871] team0: Port device team_slave_1 added [ 616.966659][ T21] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 617.031026][ T6940] loop6: detected capacity change from 0 to 16 [ 617.041081][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.058393][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.199012][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.218416][ T6940] erofs: (device loop6): mounted with root inode @ nid 36. [ 617.272607][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.294779][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.332497][ T6940] attempt to access beyond end of device [ 617.332497][ T6940] loop6: rw=524288, want=34359738368, limit=16 [ 617.384403][ T6940] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 617.415061][ T6940] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 617.444431][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.445991][ T6940] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 617.550328][ T6940] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 617.580347][ T6940] attempt to access beyond end of device [ 617.580347][ T6940] loop6: rw=524288, want=56, limit=16 [ 617.603905][ T6871] device hsr_slave_0 entered promiscuous mode [ 617.625258][ T6940] attempt to access beyond end of device [ 617.625258][ T6940] loop6: rw=0, want=34359738368, limit=16 [ 617.637241][ T6871] device hsr_slave_1 entered promiscuous mode [ 617.659314][ T26] audit: type=1800 audit(1775156849.430:3): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.597" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 617.719296][ T6871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.736412][ T6871] Cannot create hsr debugfs directory [ 618.117177][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 618.566486][ T21] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 618.737752][ T21] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 619.498335][ T21] CoreChips: probe of 3-1:0.41 failed with error -71 [ 619.569207][ T21] usb 3-1: USB disconnect, device number 7 [ 619.741735][ T6976] loop6: detected capacity change from 0 to 764 [ 619.830235][ T6976] Symlink component flag not implemented [ 619.852210][ T6976] Symlink component flag not implemented (116) [ 619.862865][ T4247] device hsr_slave_0 left promiscuous mode [ 619.885163][ T4247] device hsr_slave_1 left promiscuous mode [ 619.914769][ T4247] device bridge_slave_1 left promiscuous mode [ 619.947762][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.957425][ T4247] device bridge_slave_0 left promiscuous mode [ 619.966102][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.181124][ T4247] device veth1_macvtap left promiscuous mode [ 620.196788][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 620.458819][ T4247] device veth0_macvtap left promiscuous mode [ 620.483365][ T4247] device veth1_vlan left promiscuous mode [ 621.077551][ T6996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 621.466249][ T4247] device veth0_vlan left promiscuous mode [ 624.349996][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.356443][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.521738][ T7037] loop6: detected capacity change from 0 to 2048 [ 624.670803][ T7037] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 624.681965][ T7037] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.717014][ T7037] overlayfs: failed to resolve './bus': -2 [ 626.124365][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 626.145949][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 626.167660][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.191943][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.009274][ T7053] [U]  [ 628.862897][ T4247] bond0 (unregistering): Released all slaves [ 629.840321][ T6871] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 629.997845][ T7088] loop2: detected capacity change from 0 to 2048 [ 633.269504][ T6871] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.478916][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 633.916989][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 634.235614][ T7089] device team0 entered promiscuous mode [ 634.276521][ T7089] device team_slave_0 entered promiscuous mode [ 634.283135][ T7089] device team_slave_1 entered promiscuous mode [ 634.563914][ T7089] device bond0 entered promiscuous mode [ 634.620890][ T7089] device bond_slave_0 entered promiscuous mode [ 634.695800][ T7127] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 635.690097][ T7089] device bond_slave_1 entered promiscuous mode [ 635.866777][ T7089] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 635.987859][ T6871] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.022525][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 636.037029][ T6871] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 636.640006][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 636.862331][ T7139] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 636.942462][ T7139] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 637.189984][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.563186][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.602666][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.727950][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.806561][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.839538][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.052115][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.059311][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.077247][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.085685][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.102500][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.135704][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.143131][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.183032][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.280510][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 640.304029][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 640.381715][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 640.405481][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 640.464716][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 640.473540][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.482144][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 640.509957][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 640.644585][ T7192] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 641.593389][ T7187] loop0: detected capacity change from 0 to 2048 [ 641.991487][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.084549][ T7187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 642.095701][ T7187] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.225669][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 642.338284][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.380077][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.399855][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 645.314179][ T7248] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 646.539447][ T7256] loop4: detected capacity change from 0 to 64 [ 646.546829][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.555773][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.584222][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.612745][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 649.785188][ T7309] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 650.945914][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.208973][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.241727][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.279212][ T6871] device veth0_vlan entered promiscuous mode [ 652.310158][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.323422][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.554839][ T6871] device veth1_vlan entered promiscuous mode [ 654.202980][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 654.356617][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 654.409164][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.454934][ T6871] device veth0_macvtap entered promiscuous mode [ 654.852475][ T7369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.356897][ T6871] device veth1_macvtap entered promiscuous mode [ 655.569376][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 655.587391][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.089564][ T4236] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 656.588654][ T7384] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 656.737151][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.780963][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.832819][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.899874][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.986331][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.068874][ T5123] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 658.090644][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.140428][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.185403][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.237693][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.273173][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.309152][ T6871] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.355016][ T6871] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.366635][ T4236] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 658.383719][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.390416][ T6871] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.411689][ T4236] usb 1-1: Product: syz [ 658.415994][ T4236] usb 1-1: Manufacturer: syz [ 658.423629][ T6871] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.427928][ T4236] usb 1-1: SerialNumber: syz [ 658.496544][ T4236] usb 1-1: can't set config #1, error -71 [ 658.516855][ T5123] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 658.994422][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.397079][ T4236] usb 1-1: USB disconnect, device number 6 [ 659.414200][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.451839][ T5123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 659.638645][ T5123] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 659.689000][ T5123] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 660.046628][ T4272] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 660.957376][ T4272] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 661.053200][ T4272] usb 7-1: config 0 interface 0 has no altsetting 0 [ 661.297245][ T4272] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 661.348913][ T4272] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 661.406753][ T4272] usb 7-1: Product: syz [ 661.421872][ T4272] usb 7-1: Manufacturer: syz [ 661.435447][ T4272] usb 7-1: SerialNumber: syz [ 661.455663][ T5123] usb 5-1: Manufacturer: syz [ 661.566198][ T4272] usb 7-1: config 0 descriptor?? [ 661.623797][ T4272] usb 7-1: selecting invalid altsetting 0 [ 661.672481][ T5123] usb 5-1: config 0 descriptor?? [ 661.706860][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.731048][ T5123] usb 5-1: can't set config #0, error -71 [ 661.772058][ T5123] usb 5-1: USB disconnect, device number 15 [ 661.804143][ T7460] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 662.050792][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.589566][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.616882][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.624786][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.703782][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 662.712830][ T7432] usb 7-1: selecting invalid altsetting 0 [ 662.736575][ T7432] usb 7-1: 0:0: usb_set_interface failed (-22) [ 662.768092][ T5123] usb 7-1: USB disconnect, device number 2 [ 663.889309][ T4277] [ 663.892275][ T4277] ============================= [ 663.897499][ T4277] WARNING: suspicious RCU usage [ 663.902486][ T4277] syzkaller #0 Not tainted [ 663.906951][ T4277] ----------------------------- [ 663.911812][ T4277] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 663.920175][ T4277] [ 663.920175][ T4277] other info that might help us debug this: [ 663.920175][ T4277] [ 663.930451][ T4277] [ 663.930451][ T4277] rcu_scheduler_active = 2, debug_locks = 1 [ 663.938659][ T4277] 8 locks held by kworker/1:3/4277: [ 663.943980][ T4277] #0: ffff888061cb4938 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 663.955227][ T4277] #1: ffffc9000304fd00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 663.967931][ T4277] #2: ffff888022c60178 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 663.979680][ T4277] #3: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 663.989418][ T4277] #4: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 663.999075][ T4277] #5: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 664.008818][ T4277] #6: ffff88802be27908 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 664.018484][ T4277] #7: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 664.027881][ T4277] [ 664.027881][ T4277] stack backtrace: [ 664.033790][ T4277] CPU: 1 PID: 4277 Comm: kworker/1:3 Not tainted syzkaller #0 [ 664.041264][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.051346][ T4277] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 664.057445][ T4277] Call Trace: [ 664.060745][ T4277] [ 664.063906][ T4277] dump_stack_lvl+0x188/0x250 [ 664.068618][ T4277] ? show_regs_print_info+0x20/0x20 [ 664.073863][ T4277] ? lockdep_rcu_suspicious+0x110/0x180 [ 664.079459][ T4277] qdisc_lookup+0xa6/0x650 [ 664.083913][ T4277] qdisc_tree_reduce_backlog+0x190/0x430 [ 664.089673][ T4277] sfq_enqueue+0x14ad/0x2280 [ 664.094303][ T4277] ? decrement_one_qlen+0x550/0x550 [ 664.099628][ T4277] tbf_enqueue+0x224/0x6e0 [ 664.104160][ T4277] ? __rwlock_init+0x140/0x140 [ 664.109041][ T4277] dev_qdisc_enqueue+0x48/0x210 [ 664.114019][ T4277] __dev_queue_xmit+0xc25/0x2f80 [ 664.119186][ T4277] ? udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 664.124683][ T4277] ? dev_queue_xmit+0x20/0x20 [ 664.129385][ T4277] ? mark_lock+0x94/0x320 [ 664.133856][ T4277] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 664.139884][ T4277] ? lock_chain_count+0x20/0x20 [ 664.144765][ T4277] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 664.150624][ T4277] ? ip6_finish_output2+0xcb6/0x1510 [ 664.156040][ T4277] ? ip6_finish_output2+0xe80/0x1510 [ 664.161363][ T4277] ip6_finish_output2+0x1051/0x1510 [ 664.166599][ T4277] ? nf_hook+0x360/0x360 [ 664.170894][ T4277] ? ip6_finish_output+0x64c/0x7d0 [ 664.176129][ T4277] udp_tunnel6_xmit_skb+0x4dd/0x8f0 [ 664.181409][ T4277] send6+0x5ab/0x8d0 [ 664.185351][ T4277] ? send4+0xdc0/0xdc0 [ 664.189525][ T4277] ? __local_bh_disable_ip+0x111/0x1a0 [ 664.195053][ T4277] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 664.200853][ T4277] wg_packet_tx_worker+0x1d3/0x790 [ 664.206155][ T4277] process_one_work+0x85f/0x1010 [ 664.211244][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 664.216923][ T4277] ? lockdep_hardirqs_off+0x70/0x100 [ 664.222266][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 664.227716][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 664.233471][ T4277] ? wq_worker_running+0x97/0x170 [ 664.238543][ T4277] worker_thread+0xaa6/0x1290 [ 664.243313][ T4277] kthread+0x436/0x520 [ 664.247420][ T4277] ? rcu_lock_release+0x20/0x20 [ 664.252305][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 664.257159][ T4277] ret_from_fork+0x1f/0x30 [ 664.261631][ T4277]