last executing test programs: 7m32.977610916s ago: executing program 2 (id=61): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m29.487729957s ago: executing program 2 (id=70): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000100)={0x1, 0x1, 0x19, 0x1f, 0xbb, 0x0}) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(r0, 0x3, 0x2b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = timerfd_create(0x1, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r7, 0x2, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b3a, 0x2) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r9, 0x0, 0x0, 0x4044040) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) open$dir(0x0, 0xc2, 0x0) 7m28.246251627s ago: executing program 2 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bf148a71cad4ed95ffffffffffffffff32ab9c320908000000000000007015210ba418d5c2a1e8e59f040000b4e24531f80629062bde23c0e84405000000b2f9b8203f83ec3632", @ANYRESOCT=r1], 0x20) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000300)=""/4096, 0x1000, 0x0, &(0x7f0000001300)=""/36, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'system.', '.#-%\\\x00'}) socket$inet(0x2, 0x1, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]}) 7m27.396753346s ago: executing program 2 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xe}, {0xb, 0xa}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 7m26.415302695s ago: executing program 2 (id=81): syz_emit_ethernet(0x6e, &(0x7f0000000d80)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53244", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "000100", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 7m25.283995426s ago: executing program 2 (id=83): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x1, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) madvise(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="860801000000000028", @ANYRESDEC, @ANYBLOB="2008010057a100ce"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001640)={'wg0\x00'}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f00000004c0)=""/4137, 0x80000001, 0x1029}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYRESHEX=r6], 0x11) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000380)=""/164, 0x2, 0xa4}, &(0x7f0000000440)={0x0}) 7m9.874650259s ago: executing program 32 (id=83): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x1, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) madvise(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="860801000000000028", @ANYRESDEC, @ANYBLOB="2008010057a100ce"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001640)={'wg0\x00'}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f00000004c0)=""/4137, 0x80000001, 0x1029}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYRESHEX=r6], 0x11) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000380)=""/164, 0x2, 0xa4}, &(0x7f0000000440)={0x0}) 18.991969088s ago: executing program 1 (id=1300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17.923216254s ago: executing program 1 (id=1303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$igmp6(0xa, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 17.825877542s ago: executing program 1 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd92) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 11.305030908s ago: executing program 4 (id=1316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r1, 0x0) 11.252133143s ago: executing program 0 (id=1317): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x3ffff, 0x30b}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000423) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, 0x0, 0x0, 0x1d}) io_uring_enter(r0, 0x8aa, 0x20, 0x0, 0x0, 0x0) 9.91502076s ago: executing program 4 (id=1318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.904340591s ago: executing program 0 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) 9.232328015s ago: executing program 4 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30) sendmsg$nl_route(r0, 0x0, 0x20000040) 8.766074853s ago: executing program 0 (id=1323): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x1) syz_io_uring_submit(0x0, 0x0, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x20000880}], 0x1, 0x40800) 7.771471873s ago: executing program 3 (id=1325): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000002100390d0000000000000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000300000a006060ff00000070834399e82873b80656005059e5617cf576c3ccb4658183c83ab7f8f8cce2bb9dc58874b3f7f1a4f56e3448c64d4df4ce4ac0c4733574ee60eaceab32387fe9a388dfed329d4a59c0f1dd20f5a29363881d2c1d70b14ff08db1cf4d25bd15db7f8b395e4ec7a9e5ff0a56", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004001100"], 0x54}}, 0x4048890) connect$inet(r3, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)}, {&(0x7f0000000540)="9441f428e9b0bb2e194530067d961b523232b70516e8b83fa48990aa5213ae346415130108566cf0961cdfe1aa9444de918449b7cffce7d5720898692faf5153ea92d488159a9389f5e1d2b7b05f66084079d7b1814b53f9836b9b8d9a91982e8d847715db7e1ad3fbc1c4b705c8cde97b8e735d2be24708715ae2d4e1f91fc2a95185a8e84b6fa562d36d211a", 0x8d}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/1059], 0x430}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a40)="9ceaf40a3f5895878ad181bb47686b47b7c77f4b03c4785d06bbe2256eaf2ec66bbc4afbbafea07f81eddf63a8cb58ebfebf9fa0029afeec57fb3ba787cfecd1b5cd0cc125b9b81bd5ec8e1d8bf6fdb9fce11956b73be8a21dee57", 0x5b}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x208}}, {{&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)="73552ce555d40eff27c1406749", 0xd}, {&(0x7f0000000dc0)="c8", 0x1}], 0x2}}], 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r2) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x19) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40440d4}, 0x804) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000000)={0x4, 0x5, 0x10000, 0x2, 0xc, 0x7fff, 0x9}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 7.728735867s ago: executing program 1 (id=1326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x4, 0x2, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={0x0, 0x0, 0x4018, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.609863466s ago: executing program 4 (id=1327): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 7.547581281s ago: executing program 0 (id=1328): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) 7.490857496s ago: executing program 4 (id=1329): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r4, 0x400ffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000000}) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r4, 0x1, 0x1000, 0x1000000}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) open(0x0, 0x0, 0xc8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0xd431737e0777cbe5, @vbi={0x0, 0x0, 0x8, 0x3831354f, [0x7, 0x8000000], [0x8200], 0x2}}, 0x1}) socket$xdp(0x2c, 0x3, 0x0) 6.104669468s ago: executing program 5 (id=1331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 5.996023256s ago: executing program 5 (id=1332): syz_open_dev$MSR(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 5.743265497s ago: executing program 3 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) 5.734137838s ago: executing program 5 (id=1334): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]}) 4.055755323s ago: executing program 3 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 3.97534512s ago: executing program 5 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd92) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 3.915367614s ago: executing program 1 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30) sendmsg$nl_route(r0, 0x0, 0x20000040) 3.860010049s ago: executing program 0 (id=1338): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x2, 0x8, {0x0, r1}}, 0x18) 3.039083825s ago: executing program 3 (id=1339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(0x0, 0x0) 2.872402059s ago: executing program 0 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="93378efcd1deb855848967100db5730172627283aa9fa88608996042ab60ae09f9a90efedde424f36d7e69db30", 0x2d) 2.135829038s ago: executing program 3 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 1.974123251s ago: executing program 4 (id=1342): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000008800000005000000000000000600000000000000f3ffe5db000000000000000000000000f8000000000000000000000000000000000000000000000009000000ff7fffff08000000000000000c0000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009152cb1468ba42cd4d9b49cb00"/448]) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0xe19, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x4237}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x10) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x7d) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r4, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 1.907184587s ago: executing program 5 (id=1343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.068036894s ago: executing program 3 (id=1344): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="3f03fe7f0302140006001e0089e9aaa911d7ec16e7dbf34f99c3584e8c65024d574c580501fe9598df48faf495b8acc673f706bd2a8882d3", 0x12, 0x20000000, 0x0, 0xfffffffffffffff2) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x37) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) 180.319316ms ago: executing program 5 (id=1345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x404100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close(r2) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x240000, &(0x7f0000000480)=ANY=[]) r3 = syz_io_uring_setup(0x3cd0, &(0x7f0000000040)={0x0, 0x0, 0x400, 0x4, 0xd7}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x10001, 0x0, 0x0, 0x2e, "0060930000efa4890200040001000300000100"}) r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x1ffd}, 0x20) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000006840)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x200, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7, 0x8, 0x0, @mcast2, @remote, 0x700, 0x1, 0x0, 0x7}}) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) 0s ago: executing program 1 (id=1346): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8000, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@bloom_filter={0x1e, 0x0, 0x8a1, 0xfff, 0x49540, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 43.431100][ T4171] cgroup: Unknown subsys name 'net' [ 43.537771][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.755832][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 46.535616][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 46.566615][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 46.655821][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 46.689030][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.696239][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.704968][ T4187] device bridge_slave_0 entered promiscuous mode [ 46.715429][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.722998][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.730717][ T4187] device bridge_slave_1 entered promiscuous mode [ 46.758012][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.765132][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.773264][ T4182] device bridge_slave_0 entered promiscuous mode [ 46.788315][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 46.810655][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.817701][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.825436][ T4182] device bridge_slave_1 entered promiscuous mode [ 46.845779][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.866303][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.881541][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 46.915562][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.942410][ T4187] team0: Port device team_slave_0 added [ 46.953620][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.974455][ T4187] team0: Port device team_slave_1 added [ 47.001356][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.008478][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.016252][ T4194] device bridge_slave_0 entered promiscuous mode [ 47.053643][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.061394][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069009][ T4194] device bridge_slave_1 entered promiscuous mode [ 47.076764][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.083785][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.109694][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.126795][ T4182] team0: Port device team_slave_0 added [ 47.132954][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.140246][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.148022][ T4183] device bridge_slave_0 entered promiscuous mode [ 47.168844][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.175947][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.201980][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.217218][ T4182] team0: Port device team_slave_1 added [ 47.223237][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.230764][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.238341][ T4183] device bridge_slave_1 entered promiscuous mode [ 47.247506][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.288384][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.312753][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.335907][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.343083][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.350857][ T4192] device bridge_slave_0 entered promiscuous mode [ 47.358583][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.365552][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.391549][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.404298][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.428098][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.435274][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.443658][ T4192] device bridge_slave_1 entered promiscuous mode [ 47.451166][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.458098][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.484319][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.505662][ T4187] device hsr_slave_0 entered promiscuous mode [ 47.513066][ T4187] device hsr_slave_1 entered promiscuous mode [ 47.521967][ T4194] team0: Port device team_slave_0 added [ 47.546852][ T4194] team0: Port device team_slave_1 added [ 47.575493][ T4183] team0: Port device team_slave_0 added [ 47.584048][ T4183] team0: Port device team_slave_1 added [ 47.603705][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.610979][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.637601][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.664935][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.681720][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.688653][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.714956][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.740924][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.759709][ T4182] device hsr_slave_0 entered promiscuous mode [ 47.766713][ T4182] device hsr_slave_1 entered promiscuous mode [ 47.773492][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.781405][ T4182] Cannot create hsr debugfs directory [ 47.787782][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.794778][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.820683][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.847591][ T4192] team0: Port device team_slave_0 added [ 47.855588][ T4192] team0: Port device team_slave_1 added [ 47.871864][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.878802][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.905035][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.968096][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.975197][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.001370][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.031017][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.037970][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.063977][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.084477][ T4183] device hsr_slave_0 entered promiscuous mode [ 48.091204][ T4183] device hsr_slave_1 entered promiscuous mode [ 48.097570][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.108065][ T4183] Cannot create hsr debugfs directory [ 48.119290][ T4194] device hsr_slave_0 entered promiscuous mode [ 48.125947][ T4194] device hsr_slave_1 entered promiscuous mode [ 48.132724][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.140338][ T4194] Cannot create hsr debugfs directory [ 48.256955][ T4192] device hsr_slave_0 entered promiscuous mode [ 48.263971][ T4192] device hsr_slave_1 entered promiscuous mode [ 48.270638][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 48.270638][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 48.283298][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.283383][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 48.292993][ T4192] Cannot create hsr debugfs directory [ 48.296915][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 48.309979][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 48.447304][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.457535][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.467077][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.479591][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.529598][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.544670][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.555664][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.566918][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.633937][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.644291][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.662120][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.690083][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.701331][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.714919][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.743190][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.753581][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.772397][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.785398][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.793901][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.803514][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.844954][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.853816][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.863359][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.870604][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.878923][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.890663][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.898996][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.906097][ T895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.913895][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.922769][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.932706][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.964935][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.974017][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.983042][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.993182][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.002805][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.011348][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.021844][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.034494][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.045490][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.055696][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.082243][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.090876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.099210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.109559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.118451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.127135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.135022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.148503][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.183297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.195956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.208053][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.215167][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.224798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.233577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.242066][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.249089][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.288449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.322730][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.346410][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.353464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.362412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.372773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.380484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.387876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.397445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.407369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.426166][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.440956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.450293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.458573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.467375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.476629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.485857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.504551][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.520038][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.529129][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.538201][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.545297][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.553698][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.566111][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.577341][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.595316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.606423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.618829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.633777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.647175][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.654247][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.662367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.671284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.678871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.687504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.701437][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.718229][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.741728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.751905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.764136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.774507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.783178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.791767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.800118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.808351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.831563][ T4187] device veth0_vlan entered promiscuous mode [ 49.838995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.850275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.858319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.867843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.876358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.885452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.893262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.907170][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.923751][ T4187] device veth1_vlan entered promiscuous mode [ 49.931020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.940045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.948626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.957645][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.964885][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.972766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.980715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.988350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.997324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.006020][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.013112][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.020851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.028247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.036838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.052418][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.069206][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.077108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.086038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.097134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.106341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.115291][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.122370][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.129919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.138424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.147056][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.154252][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.167337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.175715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.184414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.194220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.203509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.213842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.248677][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.259607][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.290183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.298271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.310494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.318941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.327720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.336327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.345736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.353985][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 50.354959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.365083][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 50.369606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.374757][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 50.382858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.393225][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 50.397224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.403577][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 50.410607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.425922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.435367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.444203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.452643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.460763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.489112][ T4187] device veth0_macvtap entered promiscuous mode [ 50.511240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.521469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.534227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.544760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.554161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.565346][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.576589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.585419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.600204][ T4187] device veth1_macvtap entered promiscuous mode [ 50.623333][ T4182] device veth0_vlan entered promiscuous mode [ 50.638638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.656498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.667161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.698517][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.712622][ T4182] device veth1_vlan entered promiscuous mode [ 50.727762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.736048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.750287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.768466][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.798425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.806449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.814296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.823047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.837970][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.847394][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856967][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.873719][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.885527][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.906584][ T4182] device veth0_macvtap entered promiscuous mode [ 50.914964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.926544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.934204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.942910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.954283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.964146][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.975492][ T4182] device veth1_macvtap entered promiscuous mode [ 51.035239][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.050763][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.058730][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.068488][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.078025][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.085769][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.095006][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.106058][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.119569][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.129760][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.140601][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.152299][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.164720][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.173562][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.183018][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.191961][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.204800][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.217790][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.233906][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.245720][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.284877][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.293969][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.304698][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.314431][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.323744][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.332177][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.353432][ T4194] device veth0_vlan entered promiscuous mode [ 51.367250][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.376488][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.417160][ T4194] device veth1_vlan entered promiscuous mode [ 51.427140][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.435238][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.443963][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.453860][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.462395][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.472183][ T4192] device veth0_vlan entered promiscuous mode [ 51.497554][ T4183] device veth0_vlan entered promiscuous mode [ 51.515587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.526294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.534755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.551302][ T4183] device veth1_vlan entered promiscuous mode [ 51.571705][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.572509][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.579621][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.592014][ T4192] device veth1_vlan entered promiscuous mode [ 51.608423][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.610819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.624365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.632466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.641012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.649021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.657105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.690828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.698902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.712445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.733369][ T4194] device veth0_macvtap entered promiscuous mode [ 51.751420][ T4183] device veth0_macvtap entered promiscuous mode [ 51.758286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.767117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.776393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.784849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.804999][ T4194] device veth1_macvtap entered promiscuous mode [ 51.822889][ T4183] device veth1_macvtap entered promiscuous mode [ 51.833499][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.843274][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.858950][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.869608][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.881225][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.892229][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.903700][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.918391][ T4192] device veth0_macvtap entered promiscuous mode [ 51.932784][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.941500][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.951065][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.959677][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.968372][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.977067][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.991300][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.002639][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.012717][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.024096][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.034638][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.045166][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.058951][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.068544][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.079054][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.090057][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.100735][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.114643][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.130718][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.144472][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.155291][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.169205][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.179435][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.190133][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.201602][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.208952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.219085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.227870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.236745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.247357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.256102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.267815][ T4192] device veth1_macvtap entered promiscuous mode [ 52.291939][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.301143][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.312915][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.322041][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.331437][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.333318][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.369659][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.381172][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.392514][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.401514][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.414166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.427958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.436445][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 52.449192][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 52.471549][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.482828][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 52.488894][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.499433][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 52.511415][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 52.519036][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.529571][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.539701][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.550654][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.560709][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.572591][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.588171][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.608430][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.617491][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.654864][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.673314][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.688903][ T25] audit: type=1326 audit(1756628950.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.689460][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.723208][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.735651][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.744609][ T25] audit: type=1326 audit(1756628950.224:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.746343][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.798767][ T25] audit: type=1326 audit(1756628950.264:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.800378][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.858125][ T25] audit: type=1326 audit(1756628950.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.869872][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.893069][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.904362][ T25] audit: type=1326 audit(1756628950.264:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.928420][ T25] audit: type=1326 audit(1756628950.264:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 52.964971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.969210][ T25] audit: type=1326 audit(1756628950.264:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 53.008312][ T25] audit: type=1326 audit(1756628950.264:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 53.008639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.049005][ T25] audit: type=1326 audit(1756628950.264:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 53.078961][ T25] audit: type=1326 audit(1756628950.264:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98722debe9 code=0x7ffc0000 [ 53.116467][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.128484][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.138858][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.151302][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.330228][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.340168][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.368798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.516863][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.535977][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.560245][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.638389][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.647510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.699792][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.709462][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.740710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.797396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 53.839859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 53.848835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 53.857815][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 53.866798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 53.875782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 53.884757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 53.984334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.002323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 54.012718][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 54.104653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 54.399694][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.409562][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.457863][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.543587][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.559040][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.568848][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 54.600493][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 54.624518][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 54.643105][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 54.653232][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 54.675386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.150001][ T4224] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.391172][ T4173] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 58.913478][ T4224] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 58.939494][ T4224] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.035058][ T4295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.140732][ T4173] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.150902][ T4173] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.171174][ T4173] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.182578][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.299149][ T4224] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.469563][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.581311][ T4224] usb 5-1: Product: ࠊ [ 59.620341][ T4173] usb 4-1: usb_control_msg returned -32 [ 59.626541][ T4173] usbtmc 4-1:16.0: can't read capabilities [ 59.673088][ T4224] usb 5-1: Manufacturer: 꼭蝯ጠ즹脳칔쬎ꆼﳋ⧇ື䤟᳽䎠ꌀ麀⊩譹릆ꈒ߄햙䇥룴ⴀ榏껹袃J͋媑魃Ӳ혢梸ݐ淴諐탹ୀ嫔᪜坏儃㱕䅻稷덺鵠식䱗࡬⣖妄卛姢풨诵홻䏘ಊ듪鿈䢰ഷ肢쯥賁쥒健鄭孲鴍࿛쬮큃⿽鯡ළ窮䰳น삘딊栌렓艏滏햬烑해௨˟伶㫃ઘ唜퍅륓ꕉ뗵촽侹ࢵ傰饉㖔꾆⦁サ璃呙ꅁ斤 [ 59.708172][ C1] vkms_vblank_simulate: vblank timer overrun [ 59.768004][ T4224] usb 5-1: SerialNumber: syz [ 59.769910][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 59.930747][ T4295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.077684][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.182276][ T4295] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 60.274296][ T4295] usb 3-1: config 7 has no interface number 0 [ 60.407035][ T4344] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.10'. [ 60.419944][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 60.503687][ T4344] Zero length message leads to an empty skb [ 60.521364][ T4295] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 60.536703][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.545570][ T4295] usb 3-1: Product: syz [ 60.549722][ T4295] usb 3-1: Manufacturer: syz [ 60.559239][ T4295] usb 3-1: SerialNumber: syz [ 60.570121][ T4301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.588641][ T4301] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.640264][ T4224] usb 5-1: 0:2 : does not exist [ 60.693011][ T4224] usb 5-1: USB disconnect, device number 2 [ 60.790041][ T4301] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 60.807394][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.896196][ T4301] usb 2-1: Product: syz [ 60.897845][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.900967][ T4301] usb 2-1: Manufacturer: syz [ 60.928011][ T4301] usb 2-1: SerialNumber: syz [ 60.939598][ T4301] usb 2-1: config 0 descriptor?? [ 61.023484][ T1092] block nbd0: Attempted send on invalid socket [ 61.030692][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.051222][ T4301] appledisplay 2-1:0.0: Could not find int-in endpoint [ 61.062227][ T4375] FAT-fs (nbd0): unable to read boot sector [ 61.072774][ T4301] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 61.101585][ T4295] usb 3-1: USB disconnect, device number 2 [ 61.287823][ T4342] usb 4-1: USB disconnect, device number 2 [ 62.561691][ T4342] usb 2-1: USB disconnect, device number 2 [ 64.699568][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 64.699580][ T25] audit: type=1326 audit(1756628962.234:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 64.766628][ T25] audit: type=1326 audit(1756628962.304:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 64.788717][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.379141][ T25] audit: type=1326 audit(1756628962.344:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 65.557458][ T25] audit: type=1326 audit(1756628962.344:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 66.325054][ T25] audit: type=1326 audit(1756628962.344:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 66.361498][ T25] audit: type=1326 audit(1756628962.344:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 66.584534][ T25] audit: type=1326 audit(1756628962.344:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 66.606524][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.964272][ T25] audit: type=1326 audit(1756628962.344:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 67.614666][ T25] audit: type=1326 audit(1756628962.344:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 67.692799][ T25] audit: type=1326 audit(1756628962.344:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293ff1be9 code=0x7ffc0000 [ 70.679650][ T1092] block nbd2: Attempted send on invalid socket [ 70.688135][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.722809][ T4438] FAT-fs (nbd2): unable to read boot sector [ 71.154705][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.167699][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230004][ T4342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.619966][ T4342] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 72.632363][ T4342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.799986][ T4342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.809151][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.817437][ T4342] usb 1-1: Product: ࠊ [ 72.821860][ T4342] usb 1-1: Manufacturer: 꼭蝯ጠ즹脳칔쬎ꆼﳋ⧇ື䤟᳽䎠ꌀ麀⊩譹릆ꈒ߄햙䇥룴ⴀ榏껹袃J͋媑魃Ӳ혢梸ݐ淴諐탹ୀ嫔᪜坏儃㱕䅻稷덺鵠식䱗࡬⣖妄卛姢풨诵홻䏘ಊ듪鿈䢰ഷ肢쯥賁쥒健鄭孲鴍࿛쬮큃⿽鯡ළ窮䰳น삘딊栌렓艏滏햬烑해௨˟伶㫃ઘ唜퍅륓ꕉ뗵촽侹ࢵ傰饉㖔꾆⦁サ璃呙ꅁ斤 [ 72.863773][ T4342] usb 1-1: SerialNumber: syz [ 73.621911][ T4464] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.33'. [ 74.647222][ T4342] usb 1-1: 0:2 : does not exist [ 75.258454][ T4342] usb 1-1: USB disconnect, device number 2 [ 75.327863][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.294014][ T21] cfg80211: failed to load regulatory.db [ 78.201199][ T4342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.142273][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.242387][ T4513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 80.160148][ T4342] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 80.169211][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.180969][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.290260][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 80.309419][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.405168][ T4231] usb 5-1: config 0 descriptor?? [ 80.769903][ T4342] usb 2-1: Product: syz [ 80.779506][ T4342] usb 2-1: Manufacturer: syz [ 80.790666][ T4231] usbhid 5-1:0.0: can't add hid device: -71 [ 80.800160][ T4231] usbhid: probe of 5-1:0.0 failed with error -71 [ 80.819446][ T4342] usb 2-1: SerialNumber: syz [ 80.833167][ T4231] usb 5-1: USB disconnect, device number 3 [ 80.833554][ T4342] usb 2-1: config 0 descriptor?? [ 80.890100][ T4342] usb 2-1: can't set config #0, error -71 [ 80.914944][ T4342] usb 2-1: USB disconnect, device number 3 [ 80.979117][ T4534] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.160063][ T4512] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.469930][ T4512] usb 3-1: Using ep0 maxpacket: 32 [ 82.239973][ T4512] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 82.258267][ T4512] usb 3-1: config 0 has no interface number 0 [ 82.265111][ T4512] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.277986][ T4512] usb 3-1: config 0 interface 85 has no altsetting 0 [ 82.570416][ T4512] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 84.057933][ T4512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.158783][ T4512] usb 3-1: Product: syz [ 84.187159][ T4512] usb 3-1: Manufacturer: syz [ 84.213980][ T4512] usb 3-1: SerialNumber: syz [ 84.293075][ T4512] usb 3-1: config 0 descriptor?? [ 84.430046][ T4512] usb 3-1: can't set config #0, error -71 [ 84.450916][ T4512] usb 3-1: USB disconnect, device number 3 [ 84.624416][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.029453][ T4342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.350441][ T21] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 85.366283][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.375277][ T21] usb 4-1: Product: syz [ 85.379559][ T21] usb 4-1: Manufacturer: syz [ 85.384296][ T21] usb 4-1: SerialNumber: syz [ 85.427666][ T21] usb 4-1: config 0 descriptor?? [ 85.470590][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 85.487511][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 85.498600][ T21] f81232 4-1:0.0: f81534a converter detected [ 86.063674][ T21] usb 4-1: f81534a converter now attached to ttyUSB0 [ 86.080598][ T4342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.314901][ T4342] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 86.392714][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.440912][ T21] usb 4-1: USB disconnect, device number 3 [ 86.485265][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 86.581741][ T21] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 86.613790][ T21] f81232 4-1:0.0: device disconnected [ 87.101664][ T4342] usb 2-1: config 0 descriptor?? [ 88.699823][ C0] sched: RT throttling activated [ 89.070059][ T4342] usbhid 2-1:0.0: can't add hid device: -71 [ 89.076062][ T4342] usbhid: probe of 2-1:0.0 failed with error -71 [ 89.086129][ T4342] usb 2-1: USB disconnect, device number 4 [ 91.840213][ T4647] syz.3.89 (4647) used greatest stack depth: 17280 bytes left [ 96.889343][ T4683] IPVS: sed: FWM 3 0x00000003 - no destination available [ 96.902264][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 99.420782][ T4698] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 103.917815][ T4733] overlayfs: upper fs does not support file handles, falling back to index=off. [ 104.202651][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 105.179638][ T4746] chnl_net:caif_netlink_parms(): no params data found [ 105.581157][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.707372][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.727756][ T4746] device bridge_slave_0 entered promiscuous mode [ 105.817147][ T4763] netlink: 277 bytes leftover after parsing attributes in process `syz.0.120'. [ 106.661041][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 106.729431][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.749659][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.780147][ T4746] device bridge_slave_1 entered promiscuous mode [ 107.196437][ T4746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.595981][ T4746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.641101][ T4746] team0: Port device team_slave_0 added [ 107.652019][ T4746] team0: Port device team_slave_1 added [ 107.689031][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.702571][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.743510][ T4746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.757717][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.766129][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.866927][ T4746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.127793][ T4746] device hsr_slave_0 entered promiscuous mode [ 108.861685][ T4316] Bluetooth: hci2: command 0x041b tx timeout [ 108.972692][ T4746] device hsr_slave_1 entered promiscuous mode [ 109.013710][ T4746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.031599][ T4746] Cannot create hsr debugfs directory [ 109.156609][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 109.400103][ T4238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.660097][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 109.790374][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 109.801665][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 109.816815][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 109.980068][ T4238] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 110.010314][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.019243][ T4238] usb 4-1: Product: syz [ 110.032980][ T4238] usb 4-1: Manufacturer: syz [ 110.039039][ T4746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.054597][ T4238] usb 4-1: SerialNumber: syz [ 110.068329][ T4746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.078065][ T4746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.090793][ T4238] usb 4-1: config 0 descriptor?? [ 110.220647][ T4746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.570227][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.695988][ T4746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.725662][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.849963][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 110.953892][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.980452][ T26] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 111.011211][ T26] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 111.129410][ T26] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.234869][ T26] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 111.313683][ T4316] Bluetooth: hci2: command 0x040f tx timeout [ 111.388221][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.421098][ T4746] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.465652][ T4486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.504973][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.538419][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.570153][ T26] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.580131][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.587211][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.600933][ T26] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.647397][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.706124][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.749531][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.756701][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.001378][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.168073][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.221590][ T26] usb 1-1: Product: syz [ 112.225778][ T26] usb 1-1: Manufacturer: syz [ 112.230424][ T26] usb 1-1: SerialNumber: syz [ 112.245108][ T26] usb 1-1: config 0 descriptor?? [ 112.255549][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.291563][ T26] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.342903][ T4316] usb 4-1: USB disconnect, device number 4 [ 112.363820][ T26] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.426355][ T4486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.460097][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.468923][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.547133][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.671539][ T4230] usb 1-1: USB disconnect, device number 3 [ 112.680113][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.698325][ T4815] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 112.714496][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.726822][ T4230] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 112.778706][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.798534][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.822014][ T4746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.845493][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.879089][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.901539][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.924758][ T4486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.211079][ T4486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.391249][ T4512] Bluetooth: hci2: command 0x0419 tx timeout [ 115.352187][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.359679][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.469940][ T4512] Bluetooth: hci2: command 0x0405 tx timeout [ 115.508549][ T4746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.543705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.590880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.652404][ T4746] device veth0_vlan entered promiscuous mode [ 118.661213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.691788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.777391][ T4746] device veth1_vlan entered promiscuous mode [ 118.810985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.272947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.284562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.304322][ T4486] device hsr_slave_0 left promiscuous mode [ 119.322669][ T4486] device hsr_slave_1 left promiscuous mode [ 119.396576][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.408564][ T4948] binder: 4947:4948 ioctl c0306201 200000000280 returned -11 [ 119.423253][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.464478][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.481937][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.514792][ T4486] device bridge_slave_1 left promiscuous mode [ 119.527995][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.613359][ T4486] device bridge_slave_0 left promiscuous mode [ 119.619587][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.753987][ T4486] device veth1_macvtap left promiscuous mode [ 119.770208][ T4486] device veth0_macvtap left promiscuous mode [ 120.085228][ T4486] device veth1_vlan left promiscuous mode [ 120.488420][ T4486] device veth0_vlan left promiscuous mode [ 122.396930][ T4986] tmpfs: Unknown parameter 'usrquota' [ 122.569934][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.799734][ T4486] team0 (unregistering): Port device team_slave_1 removed [ 122.829916][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 122.872156][ T4486] team0 (unregistering): Port device team_slave_0 removed [ 122.938720][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.960001][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.011162][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.180047][ T4230] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 123.198309][ T4486] bond0 (unregistering): Released all slaves [ 123.224996][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 123.238745][ T4230] usb 4-1: SerialNumber: syz [ 123.283538][ T4230] usb 4-1: config 0 descriptor?? [ 123.463426][ T4230] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 123.473641][ T4746] device veth0_macvtap entered promiscuous mode [ 123.497812][ T4230] usb 4-1: Failed to create links for entity 255 [ 123.510196][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.533421][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.548306][ T4230] usb 4-1: Failed to register entities (-22). [ 123.567952][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.621435][ T4746] device veth1_macvtap entered promiscuous mode [ 123.703073][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.785867][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.846428][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.888307][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.019976][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.093457][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.159863][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.199361][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.257175][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.310104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.370352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.400401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.458493][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.473204][ T4231] usb 4-1: USB disconnect, device number 5 [ 124.488155][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.604347][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.664312][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.736110][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.849938][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.860866][ T4746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.872833][ T4746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.972187][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.052728][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.229680][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.251824][ T4746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.316659][ T4746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.362124][ T4746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.370970][ T4746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.021664][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.029708][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.097776][ T895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.105143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.153895][ T895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.290723][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.680525][ T4238] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.919895][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 127.040552][ T4238] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.049499][ T4238] usb 1-1: config 0 has no interface number 0 [ 127.439967][ T4238] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 127.459109][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.470272][ T4238] usb 1-1: Product: syz [ 127.474949][ T4238] usb 1-1: Manufacturer: syz [ 127.479684][ T4238] usb 1-1: SerialNumber: syz [ 127.556785][ T4238] usb 1-1: config 0 descriptor?? [ 127.621798][ T4238] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 128.680184][ T4238] gspca_spca1528: reg_w err -110 [ 128.709981][ T4238] spca1528: probe of 1-1:0.1 failed with error -110 [ 130.912619][ T4230] usb 1-1: USB disconnect, device number 4 [ 132.895725][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906507][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.270469][ T5180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'. [ 139.370110][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.448867][ T5182] input: syz1 as /devices/virtual/input/input6 [ 139.669960][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 139.800116][ T4231] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 139.819484][ T4231] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 139.894222][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.014451][ T4231] usb 4-1: config 0 has no interface number 0 [ 140.260798][ T4231] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 140.700856][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.751900][ T4231] usb 4-1: Product: syz [ 140.933349][ T4231] usb 4-1: Manufacturer: syz [ 140.944834][ T4231] usb 4-1: SerialNumber: syz [ 141.026362][ T4231] usb 4-1: config 0 descriptor?? [ 141.340094][ T4231] usb 4-1: Found UVC 0.00 device syz (046c:14e0) [ 141.353606][ T4231] usb 4-1: No valid video chain found. [ 141.463168][ T4231] usb 4-1: USB disconnect, device number 6 [ 144.322461][ T5272] [U]  [ 145.210931][ T5283] tmpfs: Unknown parameter 'usrquota' [ 153.692129][ T5386] tmpfs: Unknown parameter 'usrquota' [ 156.397124][ T5412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 156.824017][ T5412] ======================================================= [ 156.824017][ T5412] WARNING: The mand mount option has been deprecated and [ 156.824017][ T5412] and is ignored by this kernel. Remove the mand [ 156.824017][ T5412] option from the mount to silence this warning. [ 156.824017][ T5412] ======================================================= [ 156.858887][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.132619][ T5500] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 163.172445][ T5500] cramfs: wrong magic [ 164.727309][ T5507] netlink: set zone limit has 8 unknown bytes [ 164.829076][ T5505] kernel profiling enabled (shift: 63) [ 164.834776][ T5505] profiling shift: 63 too large [ 165.376302][ T5518] qrtr: Invalid version 109 [ 166.078158][ T5539] capability: warning: `syz.0.289' uses 32-bit capabilities (legacy support in use) [ 167.017607][ T5555] tipc: Started in network mode [ 167.071956][ T5555] tipc: Node identity 12905af3a17a, cluster identity 4711 [ 167.149439][ T5555] tipc: Enabled bearer , priority 0 [ 167.223043][ T5556] device syzkaller0 entered promiscuous mode [ 167.288476][ T5555] tipc: Resetting bearer [ 167.324202][ T5553] tipc: Resetting bearer [ 167.355870][ T5553] tipc: Disabling bearer [ 169.436717][ T5583] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.462877][ T5583] CIFS mount error: No usable UNC path provided in device string! [ 169.462877][ T5583] [ 169.473173][ T5583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.561826][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 170.935868][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 170.991630][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 171.023856][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 172.693869][ T5620] capability: warning: `syz.0.299' uses deprecated v2 capabilities in a way that may be insecure [ 176.750922][ T5657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.308'. [ 179.727136][ T5696] CIFS mount error: No usable UNC path provided in device string! [ 179.727136][ T5696] [ 179.861847][ T5696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 182.422828][ T5723] netlink: 72 bytes leftover after parsing attributes in process `syz.3.324'. [ 182.679924][ T4512] Bluetooth: hci1: command 0x0433 tx timeout [ 185.192138][ T4295] libceph: connect (1)[c::]:6789 error -101 [ 185.198618][ T4295] libceph: mon0 (1)[c::]:6789 connect error [ 185.430190][ T5772] ceph: No mds server is up or the cluster is laggy [ 185.485911][ T4295] libceph: connect (1)[c::]:6789 error -101 [ 185.493030][ T4295] libceph: mon0 (1)[c::]:6789 connect error [ 186.294518][ T5794] netlink: 72 bytes leftover after parsing attributes in process `syz.5.339'. [ 186.531944][ T5813] CIFS mount error: No usable UNC path provided in device string! [ 186.531944][ T5813] [ 186.547011][ T5806] syz.3.345 uses obsolete (PF_INET,SOCK_PACKET) [ 186.593805][ T5813] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 194.032420][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.038725][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.150194][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.374'. [ 195.480015][ T4230] Bluetooth: hci1: command 0x0433 tx timeout [ 198.585056][ T5930] tipc: Started in network mode [ 199.232217][ T5930] tipc: Node identity 6250f1b31a03, cluster identity 4711 [ 199.253650][ T5930] tipc: Enabled bearer , priority 0 [ 199.291146][ T5932] device syzkaller0 entered promiscuous mode [ 199.374232][ T5930] tipc: Resetting bearer [ 199.453049][ T5929] tipc: Resetting bearer [ 199.479431][ T5929] tipc: Disabling bearer [ 202.268397][ T5976] tipc: Started in network mode [ 202.290016][ T5976] tipc: Node identity a20c2e4ce95c, cluster identity 4711 [ 202.300670][ T5976] tipc: Enabled bearer , priority 0 [ 202.384720][ T5977] device syzkaller0 entered promiscuous mode [ 202.507192][ T5976] tipc: Resetting bearer [ 202.544249][ T5975] tipc: Resetting bearer [ 202.590096][ T5975] tipc: Disabling bearer [ 206.854127][ T6016] tipc: Enabled bearer , priority 0 [ 206.885130][ T6016] device syzkaller0 entered promiscuous mode [ 207.036187][ T6016] tipc: Resetting bearer [ 207.060095][ T6015] tipc: Resetting bearer [ 207.121916][ T6015] tipc: Disabling bearer [ 213.011454][ T6081] tipc: Started in network mode [ 213.021400][ T6081] tipc: Node identity eebe44670fee, cluster identity 4711 [ 213.113579][ T6081] tipc: Enabled bearer , priority 0 [ 213.361850][ T6083] device syzkaller0 entered promiscuous mode [ 213.403833][ T6081] tipc: Resetting bearer [ 213.611350][ T6080] tipc: Resetting bearer [ 213.629596][ T6080] tipc: Disabling bearer [ 221.742052][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 222.619865][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 222.769939][ T7] usb 2-1: config 0 has no interfaces? [ 222.775661][ T7] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 222.870841][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.983845][ T7] usb 2-1: config 0 descriptor?? [ 223.485727][ T7] usb 2-1: USB disconnect, device number 5 [ 224.159298][ T6206] input: syz1 as /devices/virtual/input/input7 [ 227.000525][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 231.584697][ T6332] input: syz1 as /devices/virtual/input/input8 [ 236.839815][ T4238] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 237.534595][ T4238] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.543540][ T4238] usb 5-1: config 179 has no interface number 0 [ 237.555148][ T4238] usb 5-1: config 179 interface 65 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 237.593656][ T6413] loop2: detected capacity change from 0 to 7 [ 237.601727][ T4238] usb 5-1: config 179 interface 65 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 237.664865][ T4176] loop2: p1 p4 [ 237.668469][ T4176] loop2: partition table partially beyond EOD, truncated [ 237.705254][ T4176] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 237.712662][ T4238] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.712706][ T4238] usb 5-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 237.712728][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.770096][ T6400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.827734][ T4176] loop2: p4 start 2495 is beyond EOD, truncated [ 237.889370][ T6413] loop2: p1 p4 [ 237.893354][ T6413] loop2: partition table partially beyond EOD, truncated [ 237.908129][ T6413] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 237.932315][ T6413] loop2: p4 start 2495 is beyond EOD, truncated [ 238.010536][ T4238] usb 5-1: USB disconnect, device number 4 [ 239.029957][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 239.419832][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 239.632002][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.936069][ T4230] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 240.947519][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.955915][ T4230] usb 5-1: Product: syz [ 240.960850][ T4230] usb 5-1: Manufacturer: syz [ 240.970067][ T4230] usb 5-1: SerialNumber: syz [ 240.977250][ T4230] usb 5-1: config 0 descriptor?? [ 241.033881][ T4230] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 241.046311][ T4230] usb 5-1: selecting invalid altsetting 1 [ 241.781299][ T6449] genirq: Flags mismatch irq 5. 00000000 (pcl812) vs. 00000000 (pcl818) [ 242.116331][ T4230] gspca_stk014: reg_r err -110 [ 242.251811][ T6449] vivid-001: kernel_thread() failed [ 242.263601][ T4230] stk014: probe of 5-1:0.0 failed with error -110 [ 242.534104][ T4230] usb 5-1: USB disconnect, device number 5 [ 244.440073][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 245.799991][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.829925][ T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.868816][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.031474][ T21] usb 2-1: config 0 descriptor?? [ 246.071919][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 247.250328][ T21] pwc: recv_control_msg error -71 req 02 val 2700 [ 247.520449][ T21] pwc: recv_control_msg error -71 req 02 val 2c00 [ 247.705391][ T21] pwc: recv_control_msg error -71 req 04 val 1000 [ 247.730974][ T21] pwc: recv_control_msg error -71 req 04 val 1300 [ 247.799261][ T21] pwc: recv_control_msg error -71 req 04 val 1400 [ 247.831092][ T21] pwc: recv_control_msg error -71 req 02 val 2000 [ 247.951247][ T21] pwc: recv_control_msg error -71 req 02 val 2100 [ 247.995947][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 248.090124][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 248.120080][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 248.150107][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.190159][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.240100][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 248.280369][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.310097][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.662940][ T21] pwc: Registered as video103. [ 248.670866][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 248.714658][ T21] usb 2-1: USB disconnect, device number 6 [ 253.127733][ T6537] 9pnet: p9_errstr2errno: server reported unknown error n [ 255.450470][ T6558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.458395][ T6558] UDF-fs: Scanning with blocksize 512 failed [ 255.471614][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931184][ T6558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.939300][ T6558] UDF-fs: Scanning with blocksize 1024 failed [ 255.946729][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.953275][ T6558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.960876][ T6558] UDF-fs: Scanning with blocksize 2048 failed [ 255.967863][ T6558] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.975483][ T6558] UDF-fs: Scanning with blocksize 4096 failed [ 258.567732][ T6583] vivid-001: kernel_thread() failed [ 259.577719][ T6594] 9pnet: p9_errstr2errno: server reported unknown error n [ 260.873109][ T6618] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.874497][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 261.883659][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 276.042291][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 276.051598][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 276.598247][ T6783] tipc: Started in network mode [ 276.620254][ T6783] tipc: Node identity d6c184022fdc, cluster identity 4711 [ 276.628361][ T6783] tipc: Enabled bearer , priority 0 [ 276.643273][ T6783] device syzkaller0 entered promiscuous mode [ 277.460195][ T6782] tipc: Resetting bearer [ 277.627523][ T6782] tipc: Disabling bearer [ 277.636003][ T4250] tipc: Node number set to 4179461122 [ 280.909149][ T6835] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.921405][ T6835] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 280.934577][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 280.943600][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 282.824825][ T6841] tipc: Enabled bearer , priority 0 [ 282.865875][ T6841] device syzkaller0 entered promiscuous mode [ 282.984903][ T6840] tipc: Resetting bearer [ 283.112673][ T6840] tipc: Disabling bearer [ 293.084102][ T4316] Bluetooth: hci1: command 0x0433 tx timeout [ 293.468146][ T6947] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.918140][ T6978] tipc: Enabled bearer , priority 0 [ 297.021207][ T6978] tipc: Resetting bearer [ 297.087597][ T6977] tipc: Disabling bearer [ 297.243761][ T6993] netlink: 'syz.0.667': attribute type 33 has an invalid length. [ 297.349822][ T6993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.667'. [ 297.449798][ T6998] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 297.865529][ T6998] team0: Port device team_slave_0 removed [ 301.257656][ T7042] tipc: Enabled bearer , priority 0 [ 301.403255][ T7045] tipc: Resetting bearer [ 301.440625][ T7039] tipc: Disabling bearer [ 307.900026][ T7116] CIFS mount error: No usable UNC path provided in device string! [ 307.900026][ T7116] [ 307.910197][ T7116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 312.469046][ T7180] CIFS mount error: No usable UNC path provided in device string! [ 312.469046][ T7180] [ 312.479108][ T7180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 313.550596][ T4250] Bluetooth: hci1: command 0x0433 tx timeout [ 314.318151][ T7210] device syzkaller0 entered promiscuous mode [ 316.033234][ T7231] CIFS mount error: No usable UNC path provided in device string! [ 316.033234][ T7231] [ 316.043398][ T7231] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 316.920872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.929325][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.317308][ T7323] CIFS mount error: No usable UNC path provided in device string! [ 325.317308][ T7323] [ 325.350741][ T7323] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 329.111939][ T7382] CIFS mount error: No usable UNC path provided in device string! [ 329.111939][ T7382] [ 329.122075][ T7382] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.232038][ T7424] CIFS mount error: No usable UNC path provided in device string! [ 332.232038][ T7424] [ 332.242254][ T7424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.904975][ T7463] CIFS mount error: No usable UNC path provided in device string! [ 335.904975][ T7463] [ 335.915529][ T7463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 340.117689][ T7505] CIFS mount error: No usable UNC path provided in device string! [ 340.117689][ T7505] [ 340.127730][ T7505] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 346.749897][ T7] Bluetooth: hci1: command 0x0433 tx timeout [ 347.415268][ T7585] tipc: Enabled bearer , priority 0 [ 347.531739][ T7585] tipc: Resetting bearer [ 347.588467][ T7584] tipc: Disabling bearer [ 352.546331][ T7646] tipc: Enabled bearer , priority 0 [ 352.588368][ T7646] tipc: Resetting bearer [ 352.673854][ T7645] tipc: Disabling bearer [ 358.816741][ T7708] tipc: Enabled bearer , priority 0 [ 358.829252][ T7708] tipc: Resetting bearer [ 358.846156][ T7707] tipc: Disabling bearer [ 358.999864][ T4512] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 359.409996][ T4512] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.434992][ T4512] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.588468][ T4512] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.598021][ T4512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.039933][ T4512] usb 5-1: usb_control_msg returned -32 [ 360.046732][ T4512] usbtmc 5-1:16.0: can't read capabilities [ 361.264168][ T7740] affs: No valid root block on device nullb0 [ 361.715035][ T4512] usb 5-1: USB disconnect, device number 6 [ 361.917035][ T7749] tipc: Enabling of bearer rejected, failed to enable media [ 363.438547][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 363.447538][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 366.387109][ T7811] tipc: Enabling of bearer rejected, failed to enable media [ 370.673342][ T7858] tipc: Enabling of bearer rejected, failed to enable media [ 374.939444][ T7913] tipc: Enabling of bearer rejected, failed to enable media [ 378.374783][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.392070][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.333397][ T7976] tipc: Enabling of bearer rejected, failed to enable media [ 381.912397][ T7851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 382.192142][ T7851] usb 4-1: Using ep0 maxpacket: 16 [ 382.984564][ T7851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.048755][ T7851] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.066618][ T7851] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 383.076025][ T7851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.112126][ T7851] usb 4-1: config 0 descriptor?? [ 383.330445][ T7851] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 384.507002][ T8036] tipc: Enabling of bearer rejected, failed to enable media [ 387.499824][ T4512] Bluetooth: hci1: command 0x0433 tx timeout [ 387.508765][ T4231] usb 4-1: USB disconnect, device number 7 [ 390.106709][ T8096] tipc: Enabling of bearer rejected, failed to enable media [ 393.853126][ T8142] tipc: Enabling of bearer rejected, failed to enable media [ 396.286768][ T8179] CIFS mount error: No usable UNC path provided in device string! [ 396.286768][ T8179] [ 396.329789][ T8179] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.471224][ T8190] tipc: Enabling of bearer rejected, failed to enable media [ 402.343391][ T8239] tipc: Enabling of bearer rejected, failed to enable media [ 403.484682][ T8257] CIFS mount error: No usable UNC path provided in device string! [ 403.484682][ T8257] [ 403.570775][ T8257] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.737541][ T8299] tipc: Enabling of bearer rejected, failed to enable media [ 409.358814][ T8322] CIFS mount error: No usable UNC path provided in device string! [ 409.358814][ T8322] [ 409.530229][ T8322] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 410.779614][ T8335] process 'syz.3.1020' launched './file0' with NULL argv: empty string added [ 411.843913][ T8353] tipc: Enabling of bearer rejected, failed to enable media [ 414.988574][ T8396] block nbd4: shutting down sockets [ 423.129691][ C1] hrtimer: interrupt took 42121 ns [ 427.404640][ T8527] device syzkaller0 entered promiscuous mode [ 433.449367][ T8590] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 437.241618][ T8619] device syzkaller0 entered promiscuous mode [ 439.820300][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.826731][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.909765][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 440.917395][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 442.080301][ T8667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 442.092406][ T8667] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 442.104885][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1103'. [ 442.113899][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'. [ 442.973885][ T8671] device syzkaller0 entered promiscuous mode [ 442.990189][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 442.996321][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 443.795700][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 443.804923][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 444.412523][ T8688] affs: No valid root block on device nullb0 [ 445.630576][ T4238] Bluetooth: hci5: command 0x1009 tx timeout [ 445.934804][ T8710] overlayfs: missing 'lowerdir' [ 447.066866][ T8722] device syzkaller0 entered promiscuous mode [ 449.889297][ T8731] ODEBUG: Out of memory. ODEBUG disabled [ 449.984207][ T4245] libceph: connect (1)[c::]:6789 error -101 [ 449.990348][ T4245] libceph: mon0 (1)[c::]:6789 connect error [ 450.006650][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1131'. [ 450.892117][ T4245] libceph: connect (1)[c::]:6789 error -101 [ 450.898088][ T4245] libceph: mon0 (1)[c::]:6789 connect error [ 450.947012][ T8749] ceph: No mds server is up or the cluster is laggy [ 451.217830][ T8761] tipc: Enabled bearer , priority 0 [ 451.373395][ T8759] tipc: Resetting bearer [ 452.202940][ T8759] tipc: Disabling bearer [ 452.211011][ T4250] tipc: Node number set to 1263545932 [ 452.927298][ T8731] Set syz1 is full, maxelem 65536 reached [ 457.136958][ T8817] device syzkaller0 entered promiscuous mode [ 457.489910][ T4245] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 458.099889][ T4245] usb 4-1: Using ep0 maxpacket: 8 [ 458.735189][ T8819] binder: 8818:8819 ioctl 4018f50b 0 returned -22 [ 458.859789][ T4245] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.509809][ T4245] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 459.517539][ T4245] usb 4-1: can't read configurations, error -71 [ 461.640477][ T8863] device syzkaller0 entered promiscuous mode [ 461.762662][ T1092] block nbd4: Attempted send on invalid socket [ 461.768945][ T1092] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 461.782318][ T8867] SQUASHFS error: Failed to read block 0x0: -5 [ 461.788892][ T8867] unable to read squashfs_super_block [ 467.184149][ T4191] Bluetooth: Wrong link type (-22) [ 470.951190][ T8990] block nbd1: shutting down sockets [ 472.397118][ T9011] CIFS mount error: No usable UNC path provided in device string! [ 472.397118][ T9011] [ 472.485548][ T9011] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 473.599734][ T9015] device vlan0 entered promiscuous mode [ 473.728721][ T9015] team0: Port device vlan0 added [ 475.926768][ T9036] device syzkaller0 entered promiscuous mode [ 477.460093][ T150] block nbd0: Attempted send on invalid socket [ 477.466394][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 477.477581][ T9051] SQUASHFS error: Failed to read block 0x0: -5 [ 477.483900][ T9051] unable to read squashfs_super_block [ 480.327318][ T9079] CIFS mount error: No usable UNC path provided in device string! [ 480.327318][ T9079] [ 480.359737][ T9079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 483.719803][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 483.973098][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 484.114985][ T7] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 484.133523][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.152685][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.181637][ T7] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 484.212889][ T7] usb 4-1: config 0 has no interface number 0 [ 484.219029][ T7] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.257600][ T7] usb 4-1: config 0 interface 150 has no altsetting 0 [ 484.274538][ T7] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 484.303954][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.339356][ T7] usb 4-1: config 0 descriptor?? [ 485.019709][ T8471] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 486.579425][ T7] usb 4-1: USB disconnect, device number 10 [ 486.585454][ T8471] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.224022][ T8471] usb 5-1: config 0 has no interface number 0 [ 487.275566][ T8471] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.325807][ T8471] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.354061][ T8471] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.956929][ T8471] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 487.984753][ T8471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.032862][ T8471] usb 5-1: config 0 descriptor?? [ 488.078924][ T9122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 488.089924][ T8471] usb 5-1: can't set config #0, error -71 [ 488.130998][ T8471] usb 5-1: USB disconnect, device number 7 [ 490.319702][ T4512] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 490.323189][ T9151] CIFS mount error: No usable UNC path provided in device string! [ 490.323189][ T9151] [ 490.579822][ T4512] usb 5-1: Using ep0 maxpacket: 8 [ 490.610827][ T9151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 490.725702][ T4512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 490.737232][ T4512] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 490.749922][ T4512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.804075][ T4512] usb 5-1: config 0 descriptor?? [ 492.197543][ T4512] asus 0003:0B05:17E0.0001: item fetching failed at offset 3/11 [ 492.231313][ T4512] asus 0003:0B05:17E0.0001: Asus hid parse failed: -22 [ 492.243631][ T4512] asus: probe of 0003:0B05:17E0.0001 failed with error -22 [ 492.268040][ T4512] usb 5-1: USB disconnect, device number 8 [ 492.949819][ T4512] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 493.199841][ T4512] usb 5-1: Using ep0 maxpacket: 16 [ 493.410191][ T4512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 493.619914][ T4512] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.659504][ T4512] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 493.678140][ T4512] usb 5-1: Manufacturer: syz [ 493.683084][ T4512] usb 5-1: SerialNumber: syz [ 493.698865][ T4512] usb 5-1: config 0 descriptor?? [ 493.791904][ T4512] em28xx 5-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 494.030049][ T4512] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 494.169786][ T4512] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 494.500006][ T4512] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 494.519565][ T4512] em28xx 5-1:0.0: board has no eeprom [ 495.390173][ T4512] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 495.401225][ T4512] em28xx 5-1:0.0: dvb set to bulk mode. [ 495.441749][ T4512] usb 5-1: USB disconnect, device number 9 [ 495.464865][ T4512] em28xx 5-1:0.0: Disconnecting em28xx [ 495.481001][ T9175] em28xx 5-1:0.0: Binding DVB extension [ 496.700609][ T9175] em28xx 5-1:0.0: Registering input extension [ 496.709293][ T4512] em28xx 5-1:0.0: Closing input extension [ 497.178684][ T4512] em28xx 5-1:0.0: Freeing device [ 498.154029][ T9224] CIFS mount error: No usable UNC path provided in device string! [ 498.154029][ T9224] [ 498.164224][ T9224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.239752][ T1325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 500.550336][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 500.708480][ T9249] netlink: 'syz.5.1260': attribute type 9 has an invalid length. [ 500.716471][ T9249] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.1260'. [ 501.089842][ T1325] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 501.110763][ T1325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.154026][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.226565][ T1325] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 501.237487][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.237587][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.342866][ T1325] usb 4-1: config 0 has no interface number 0 [ 501.361986][ T1325] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.381469][ T1325] usb 4-1: config 0 interface 150 has no altsetting 0 [ 502.693136][ T1325] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 502.722662][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.761198][ T1325] usb 4-1: config 0 descriptor?? [ 503.423231][ T1325] usb 4-1: USB disconnect, device number 11 [ 503.642918][ T9272] CIFS mount error: No usable UNC path provided in device string! [ 503.642918][ T9272] [ 503.653137][ T9272] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 503.766152][ T9274] netlink: set zone limit has 8 unknown bytes [ 504.603384][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.589785][ T4238] Bluetooth: hci1: command 0x0433 tx timeout [ 512.401264][ T9347] CIFS mount error: No usable UNC path provided in device string! [ 512.401264][ T9347] [ 512.411406][ T9347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 514.269881][ T4245] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 514.909814][ T4245] usb 5-1: Using ep0 maxpacket: 8 [ 515.659894][ T4245] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 515.876954][ T4245] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.885298][ T4245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.895629][ T4245] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 517.571188][ T9397] CIFS mount error: No usable UNC path provided in device string! [ 517.571188][ T9397] [ 517.581581][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1306'. [ 517.699513][ T9397] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 518.359922][ T9401] tipc: Enabled bearer , priority 10 [ 518.926254][ T4245] usb 5-1: config 0 has no interface number 0 [ 518.932943][ T4245] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.946314][ T4245] usb 5-1: config 0 interface 150 has no altsetting 0 [ 518.953384][ T4245] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 518.981711][ T9401] lo speed is unknown, defaulting to 1000 [ 518.987836][ T9401] lo speed is unknown, defaulting to 1000 [ 518.995777][ T9401] lo speed is unknown, defaulting to 1000 [ 519.006098][ T9401] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 519.018764][ T9401] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 519.085749][ T9401] lo speed is unknown, defaulting to 1000 [ 519.092814][ T9401] lo speed is unknown, defaulting to 1000 [ 519.099053][ T9401] lo speed is unknown, defaulting to 1000 [ 519.106082][ T9401] lo speed is unknown, defaulting to 1000 [ 519.112398][ T9401] lo speed is unknown, defaulting to 1000 [ 519.158530][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.191265][ T4245] usb 5-1: config 0 descriptor?? [ 519.210453][ T4245] usb 5-1: can't set config #0, error -71 [ 519.217428][ T4245] usb 5-1: USB disconnect, device number 10 [ 519.522922][ T4512] tipc: Node number set to 2018767283 [ 520.473704][ T9417] device syzkaller0 entered promiscuous mode [ 526.086176][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 530.952707][ T9508] CIFS mount error: No usable UNC path provided in device string! [ 530.952707][ T9508] [ 530.962887][ T9508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 533.580078][ T9539] ------------[ cut here ]------------ [ 533.649746][ T9539] WARNING: CPU: 1 PID: 9539 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 533.708777][ T9539] Modules linked in: [ 533.759744][ T9539] CPU: 0 PID: 9539 Comm: syz.5.1345 Not tainted syzkaller #0 [ 533.771704][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.806509][ T9539] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 533.823040][ T9539] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 48 c0 ff 0f 0b e9 62 fe ff ff e8 29 48 c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 c0 69 8d 80 e1 07 80 c1 03 38 c1 [ 533.918658][ T9539] RSP: 0018:ffffc900033efac8 EFLAGS: 00010283 [ 533.945127][ T9539] RAX: ffffffff81b78287 RBX: 0000200000000000 RCX: 0000000000080000 [ 533.976062][ T9539] RDX: ffffc900165c2000 RSI: 0000000000000048 RDI: 0000000000000049 [ 534.024497][ T9539] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005706638 [ 534.059244][ T9539] R10: ffffed1005706638 R11: 1ffff11005706637 R12: ffff88801eaa82b0 [ 534.108829][ T9539] R13: dffffc0000000000 R14: ffff88801eaa8210 R15: ffff8880775655c0 [ 534.147417][ T9539] FS: 00007f1f3df216c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 534.176344][ T9539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.198406][ T9539] CR2: 000020000001d000 CR3: 00000000793f5000 CR4: 00000000003506f0 [ 534.243614][ T9539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.287401][ T9539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 534.319713][ T9539] Call Trace: [ 534.323075][ T9539] [ 534.327172][ T9539] __vma_adjust+0x6a9/0x1c20 [ 534.357651][ T9539] ? memset+0x1e/0x40 [ 534.385089][ T9539] __split_vma+0x34b/0x410 [ 534.409411][ T9539] __do_munmap+0x375/0xdc0 [ 534.434973][ T9539] mremap_to+0x306/0x6b0 [ 534.472016][ T9539] __se_sys_mremap+0x418/0x990 [ 534.510264][ T9539] ? __x64_sys_mremap+0xc0/0xc0 [ 534.538311][ T9539] ? lock_chain_count+0x20/0x20 [ 534.578483][ T9539] ? lockdep_hardirqs_on+0x94/0x140 [ 534.616006][ T9539] ? __x64_sys_mremap+0x1c/0xc0 [ 534.663778][ T9539] do_syscall_64+0x4c/0xa0 [ 534.692337][ T9539] ? clear_bhb_loop+0x30/0x80 [ 534.722179][ T9539] ? clear_bhb_loop+0x30/0x80 [ 534.746695][ T9539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.789479][ T9539] RIP: 0033:0x7f1f3fcb9be9 [ 534.808461][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.875651][ T9539] RSP: 002b:00007f1f3df21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 534.902436][ T9539] RAX: ffffffffffffffda RBX: 00007f1f3fef0fa0 RCX: 00007f1f3fcb9be9 [ 534.928008][ T9539] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000 [ 534.956243][ T9539] RBP: 00007f1f3fd3ce19 R08: 0000200000a00000 R09: 0000000000000000 [ 534.982406][ T9539] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 535.000660][ T9539] R13: 00007f1f3fef1038 R14: 00007f1f3fef0fa0 R15: 00007ffddc579858 [ 535.015503][ T9539] [ 535.025629][ T9539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 535.032915][ T9539] CPU: 0 PID: 9539 Comm: syz.5.1345 Not tainted syzkaller #0 [ 535.040281][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.050314][ T9539] Call Trace: [ 535.053576][ T9539] [ 535.056501][ T9539] dump_stack_lvl+0x168/0x230 [ 535.061159][ T9539] ? show_regs_print_info+0x20/0x20 [ 535.066333][ T9539] ? load_image+0x3b0/0x3b0 [ 535.070822][ T9539] panic+0x2c9/0x7f0 [ 535.074698][ T9539] ? bpf_jit_dump+0xd0/0xd0 [ 535.079184][ T9539] ? hugetlb_split+0x237/0x2a0 [ 535.083985][ T9539] __warn+0x248/0x2b0 [ 535.087960][ T9539] ? hugetlb_split+0x237/0x2a0 [ 535.092706][ T9539] report_bug+0x1b7/0x2e0 [ 535.097019][ T9539] handle_bug+0x3a/0x70 [ 535.101150][ T9539] exc_invalid_op+0x16/0x40 [ 535.105625][ T9539] asm_exc_invalid_op+0x16/0x20 [ 535.110459][ T9539] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 535.115808][ T9539] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 48 c0 ff 0f 0b e9 62 fe ff ff e8 29 48 c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 c0 69 8d 80 e1 07 80 c1 03 38 c1 [ 535.135399][ T9539] RSP: 0018:ffffc900033efac8 EFLAGS: 00010283 [ 535.141443][ T9539] RAX: ffffffff81b78287 RBX: 0000200000000000 RCX: 0000000000080000 [ 535.149390][ T9539] RDX: ffffc900165c2000 RSI: 0000000000000048 RDI: 0000000000000049 [ 535.157336][ T9539] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005706638 [ 535.165280][ T9539] R10: ffffed1005706638 R11: 1ffff11005706637 R12: ffff88801eaa82b0 [ 535.173226][ T9539] R13: dffffc0000000000 R14: ffff88801eaa8210 R15: ffff8880775655c0 [ 535.181198][ T9539] ? hugetlb_split+0x237/0x2a0 [ 535.185945][ T9539] ? hugetlb_split+0x237/0x2a0 [ 535.190681][ T9539] __vma_adjust+0x6a9/0x1c20 [ 535.195256][ T9539] ? memset+0x1e/0x40 [ 535.199213][ T9539] __split_vma+0x34b/0x410 [ 535.203605][ T9539] __do_munmap+0x375/0xdc0 [ 535.208000][ T9539] mremap_to+0x306/0x6b0 [ 535.212218][ T9539] __se_sys_mremap+0x418/0x990 [ 535.216960][ T9539] ? __x64_sys_mremap+0xc0/0xc0 [ 535.221792][ T9539] ? lock_chain_count+0x20/0x20 [ 535.226624][ T9539] ? lockdep_hardirqs_on+0x94/0x140 [ 535.231796][ T9539] ? __x64_sys_mremap+0x1c/0xc0 [ 535.236623][ T9539] do_syscall_64+0x4c/0xa0 [ 535.241010][ T9539] ? clear_bhb_loop+0x30/0x80 [ 535.245659][ T9539] ? clear_bhb_loop+0x30/0x80 [ 535.250308][ T9539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.256172][ T9539] RIP: 0033:0x7f1f3fcb9be9 [ 535.260560][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.280138][ T9539] RSP: 002b:00007f1f3df21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 535.288522][ T9539] RAX: ffffffffffffffda RBX: 00007f1f3fef0fa0 RCX: 00007f1f3fcb9be9 [ 535.296469][ T9539] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000 [ 535.304430][ T9539] RBP: 00007f1f3fd3ce19 R08: 0000200000a00000 R09: 0000000000000000 [ 535.312374][ T9539] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 535.320406][ T9539] R13: 00007f1f3fef1038 R14: 00007f1f3fef0fa0 R15: 00007ffddc579858 [ 535.328357][ T9539] [ 535.331545][ T9539] Kernel Offset: disabled [ 535.336124][ T9539] Rebooting in 86400 seconds..