last executing test programs: 7m10.21406185s ago: executing program 4 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfe33) 7m9.60093576s ago: executing program 4 (id=212): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 7m9.344205721s ago: executing program 4 (id=213): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x5) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) sendto$unix(r2, &(0x7f0000000200), 0x0, 0x20000041, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) 7m7.52809732s ago: executing program 4 (id=218): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r2 = syz_io_uring_setup(0x6dbf, &(0x7f0000000300)={0x0, 0x1c2c, 0x10100, 0x1, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/12) 7m5.147662753s ago: executing program 4 (id=222): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x5) 7m2.97911824s ago: executing program 4 (id=229): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x2581) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") 6m46.605088954s ago: executing program 32 (id=229): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x2581) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") 5m6.205736823s ago: executing program 5 (id=524): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2010}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpid() socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) read(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) 5m4.688138767s ago: executing program 5 (id=529): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 5m4.53371314s ago: executing program 5 (id=530): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) fsopen(&(0x7f0000000080)='logfs\x00', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x800) ioctl$CEC_G_MODE(r2, 0x80046108, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc030000023d5f0d960d6403d27429951417e99b1405e0d6ad9c15ccca1234d704b29aa2d469f143a50bcaf6bbdc1c12128a625c9064c905a4f81b152874f19f16934f833fd86f3861622cfa62f5358265a9dba0226d7fa9cc060e44d46aaaa6c9f3e6cb5eab349c621ba9a005b6b67748e9622b45f5b142738d034e053c8174e4a7505a3022ddd893d4dd278a555f567ff051d54c2308786de71027322134fa9f224f74478a8d5223c6d86c45afbfd4ba73b2f03a26dd02f8d9", @ANYRES16, @ANYBLOB="00042dbd7000ffdbdf253a0000000c009900010000006c00000006006500070000008a005b00fd9cf82235486f0d8b4b4bb46dededecc6318eed7153f7adce24aa4c7f6a2b05ae5aaa4d8a45f32d40919b9746996d1ffb01b1bdec8940564bc1b4a620ace8b30d7d9b26c569da9bcbf73b5fbc4624271d20806c92068a92514e368d86f6c395db3f16c110374cadaaddba9c7832b63c8dae5f711b7e7757d998a9fe5d1fffc8bc467ea848320000060065000300000040005b0019dea1a2482dc09cabe3787433ba556e2c25957e8afe208ac58ffcfba887ad9b892dc2711facd098db8a3184c9c119f1ac31fdcedc4b417d39fc8d6928005b0063f714afc85361c00d810dd3cea9feac1357fcc2c1f282200471548f12576af5fd98d9fba1005b00b5af1f83ce2598b991bb63baa583e0d3cd36a2e4a37bf16c40b3e8af3697800faff2891c3d4aa25f1c7ee47d49f6bc160c71688ac8f6ab3e1f1cb380d167a5b3bf900962c889a8d0d87a0875ab52aa690d85acc3251d134b1c42041df466206568877962fa68f115f98ccc843a5499061b08b3e201960673862ad0547c2fc524514362f12f631261bd5414a1fb0e53a6a5792f1c1e50e5901c6528264a000000060065000400000032005b00b27c00bd05b859a469e2bc5b079c96b1551b3f2eb67c22b003343344812da05c9f749d388551774ce94d63387f490000c6005b00bfd3523acaff00a13b0edfdde2d3eb3b91aa8053ba566cc3bf0bc44c23c6fbb17031815c17f53f3e0484c8c12366c46eb45cd4268dc3de0c26572f853f538fb1b8707ab79ee11887dd6c9acc45460d464c5730961bef8b28b5cbc6de0cecd1e65615daf1f699325957b4b0869035b198b5856a93bb9bbab347e9247ec994dcd9a80505a7e10c952b9e9668f7720ae252e697f674eab5f115bf3aa4d84cef665a4761c6553e27f5c4460421c216edea4fc12502014e7b6fb95e2371fb354ee4c260230000ef005b00b18858c5e46d6f9775e04dd92e77541e7bfbb311b4a840959845cf1bb4a02f6a05e457332987d17bbc65dc94cc82ab8a1e1ad79ebabf7465f4cbcf20951bb6e5f811fbaabfe55bc64410908e53a9a0a3e969ce7b89c64b5f6f4c00ee80e0eceb4ebe2c4f12b3c2f65af8de1ce545b8b05eb054619dad9749387575c6d2bec1ade87299acbf3be1f86c181eb50dc245109b8c35ed2d05548f542026d995c803e325778cb9612df1423ae528325beb97cb32"], 0x3bc}, 0x1, 0x0, 0x0, 0x2}, 0x4044091) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "e663a69610d474a706"}], 0x20}, 0x41) chdir(&(0x7f0000000140)='./bus\x00') 5m1.331260671s ago: executing program 5 (id=532): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m59.925687645s ago: executing program 5 (id=535): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x5) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) sendto$unix(r2, &(0x7f0000000200), 0x0, 0x20000041, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) 4m58.828485225s ago: executing program 5 (id=537): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x9}]}) socket$inet_udplite(0x2, 0x2, 0x88) 4m43.498587344s ago: executing program 33 (id=537): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x9}]}) socket$inet_udplite(0x2, 0x2, 0x88) 2m0.003413244s ago: executing program 2 (id=866): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) 1m59.920549381s ago: executing program 2 (id=867): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x5) 1m58.653221394s ago: executing program 2 (id=868): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x8, 0x10e9, 0x6, 0x0, 0xe1}, 0x14) 1m58.433476552s ago: executing program 2 (id=869): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1m58.308329592s ago: executing program 2 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x16, 0x1}, {0x30}]}]}, 0x38}}, 0x40840) 1m58.044053594s ago: executing program 2 (id=873): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0100000000000000000001"], 0x110}}, 0x0) 1m42.613448101s ago: executing program 34 (id=873): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0100000000000000000001"], 0x110}}, 0x0) 20.709727564s ago: executing program 0 (id=1095): getpid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003114000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x604c000) 19.556511687s ago: executing program 0 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) gettid() timer_create(0x9, &(0x7f0000000340)={0x0, 0x9e, 0x1, @thr={&(0x7f0000000380)="ea616ff47e43e15ee23bec23e45765822da4c84bf25b0eb44b6219844396e562f922528d70a82a2e730e41f38d9160f2ddc52ef8f02deced37617efc4f14e7afa551eaad95f974e5a89915482db13c44e89ffcd6953dd9af5821cb55270c23064e8645d481c70216e4e102fad21364161f03cc67016902ec1d5075f9d3c3cf6be03158c2bb34dc203fdf9bc29babf3af143ec036bc11f3fdbce98e4b4b4a9e381c9e24aaaccb0f8173e4bb832324c8c0a81aad97cc74f24e040be22d", &(0x7f0000000700)="de621baac7faa1cc05948b0aa17564f0357a6310e5ee6110ee470bc192c394b8a41fb8e2cd93de8385274b8014c8e8b28c9b83ce21d9b80695197854b8fe83a464df6d0a3b02746905bbe7158b3981a8713dd08de2234b25813e7b8b8f96af034c7fb54de2480822d207531a02bc01a5a2d5de3fd1b32adb68326f8fd762d968aff6779a4a3b549241"}}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 17.935982649s ago: executing program 0 (id=1102): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x3}) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 16.922816192s ago: executing program 0 (id=1104): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r3, 0x0, 0x0) pipe2$9p(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044068}, 0x4c004) r9 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r9, 0x0, 0x0) write$sndseq(r9, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) 15.375859038s ago: executing program 0 (id=1107): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000680)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, &(0x7f0000001fc0)={0x0, 0x3938700}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$igmp(0x2, 0x3, 0x2) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 13.760269379s ago: executing program 0 (id=1110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x1000000000007, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0x4000000b692, 0xcc, 0x8, 0x3]}) 6.124425061s ago: executing program 6 (id=1129): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.049811897s ago: executing program 1 (id=1130): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x5) 5.944240736s ago: executing program 6 (id=1131): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[]) 5.714312875s ago: executing program 6 (id=1132): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/224, 0xe0}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f00000003c0)}, 0xa47e}], 0x2, 0x10000, 0x0) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff06b58b8", 0x8e}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef", 0x18}, {&(0x7f0000000540)="6d2657493131db30447fce55af67ac7d10106db6d5cacd06cd9a77b801ded29e208feef1fc", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e4", 0x1d}, {&(0x7f0000001a40)="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", 0x353}], 0x2}}], 0x2, 0x4000040) 5.475654625s ago: executing program 1 (id=1134): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 5.224118085s ago: executing program 6 (id=1136): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) 4.466072037s ago: executing program 1 (id=1137): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)) 4.271038573s ago: executing program 6 (id=1138): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 3.672036041s ago: executing program 1 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 3.456119479s ago: executing program 1 (id=1143): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x80000001, 0x4) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) fspick(r2, &(0x7f0000000140)='./file0\x00', 0x0) 3.44573048s ago: executing program 3 (id=1144): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x5) 2.444271631s ago: executing program 7 (id=1147): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) 2.403546095s ago: executing program 7 (id=1148): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"87412fcf3b7656866352bfc3b2a97409f657f12f35013bff5243e9df7287106d02bcb0d638722ca4b8c03c00d8a7008f57b74d0fb9eda8c8d8a733262574a53c242d4bc2315f2a4330212629510faf60e06a809b44e3e956079f8e15309975eff5624b8e45b4290e4fd8619c8cda5e70e7fb7483bcb2d4dd171510932e4433505aa14c048b20f8bcea3979ac05e8a7f8c69335943f945df35be808e545a8701b5be1992667e07680101ae7c1052ba83cc3bd6351e484cc28c90390cc9a670f8e82994662194133d1416df6adf63f7d4dfa6bd4d6ed755b91231e5ad99cd82cde77441875b7f23566f34ec3ef4c58ca1243a22bdb0f3d0c3c0cf3567d3624b00e0822cc27b0c10cd3ebbfe5cee69113acf809ee9cb63e761d1b8b74c19cd23e3e4701f08d76318d0f11a28ad24f46105b6d53b071cc8e51e0b54609f2757158c24bb01751b963681616d9fe8948f2234a5f53ecb3af48f3896e53c92a4a0035c1a22c08dd13808f8d26772e52c418e2860f4d1c51b77ce73bf7ae4a0023218a4e3af6ac7fb00396b4d5d69996e39638c42c51384bca0d141bc64e27ad1cbccc3d45cec59fd5fc46e312696c47b8d1b029c7cbd0194c675d445e93f7abf8bf2d4765f03e57fde167382ece70993a0cfe964e1a6f75b88af69739f654043da63c32c4101f30de250b052f7eb6da1eecf5dd1d6d29b63620af24d62c31c6566c82763b7ab4293441dd14d369f08cf1189a58047952bf8f973c095ffbdfa9b91bbfa8c3c894d85f08fd311ab1eae103318761b47a93a6cae00204635a8cb57b3204c4b8fbb2dfef3c596f8d4dda918110abd6ebc5bf26311c438898a7f814ae9ff9ab8c8f23282906cf57dc2e167bd3be0a2b19945b3dde4e7fe2d01056a1d9d486e543bf2454c4e4219ffc33ae22a824b0e1058706656c59cc6e5c08fcbe0a88d35cf178136aabf450453dec7878bccc1daca7c6690983be524e83a17f9ce02ec0a58c125916cd7575ac1cc02f8485562f1542da73fa09d2be7f4d3e629fde6e5c58389a1ffb95b146e1d1b2a25aede59f02c5f9a55fc53b1867ee3863fb838e0750beb6939097aca0c03ebded37f2ffa945339fcc99ad006aa71863358bf300a71df24adc6b00c2687e7756a8d5e93668ba13989e824dbb992050748b87b9300ffea6ccf04a990046f5522749d80d45444866e3d7c21dfb786563e3ca11b5311eb3f8b7ed70e73ef02e477d76dea6c14bf1b47a2cda66a024eae350efb34d11fd512d0921d16e6c5e90845be2a5e8ea30f438f331f1e316c5d6e60526249300e6fc921dd8c0c8d470e2485b9145b12ed332b0de2bc3b29f7dbf980617c378f28ebfd8b0a37c89124c79c5b2f344b5c3b5d0f3a8641093b4b06d5a67c152a510a56a0bef5a24fea0869455e7d54535163289a970e6e908aacd0c30f85fbf16b923e5d18a997b5b0b1f2bd15a7f1ccc33b8cf1b8fd0e0f8f4f0ff533669e5f71f460f3672f6ca7a1539997689fd6f97f296f53761bf94f5f75aa274cb5ae67b25682cca33c87da759c0c99e064fa973af0d2d6ccf82266a48241d2284eda04590bc80c31b0c0b04fa104cce536fbb29508a222c4a777c072348502a27272ff9656a0fba49538be263d23e9bce31f3e5d573b1cbc0b0ecb27170c2eb10115dd8ecaee8f0ead3202d3c855223c196a7343fd6d2c152430add0c5d088a406f40e4aad95fc2d30655ca81f65aeeaf81eb82821da75334ed82cb09f41c891c53cd193ca8f99017fd28f5b454ada00989697756f2aaf11254c67dca0ee39d51a6dfcd09732401bdda91de59ef0af9a8711c8b3365caab3a941c3aae59a3cc51f7604b8dd945e174a69d556ea00dbf82baef3c263488eaa96c009c399486d7d828dbddf34acf90575c55463cd92b55162647cb1a282e2670928eb9c0c0af020202d2387bffcbe4006019d20b0963da0fbbdf9fefd6ef1f8fb5ba0c6ea129b004df63bcd06d7d6d09b6783e70a1bfa6d2fc1066621f7ea859cca0467c8322b32655eb23f5d3197ebc0a49ecf867c3e934e91ea31c3415ccc7adf01ca6a2e835eed34cd953f2cf89aec22a48cd3ba586001f15012f9c8edaeead6df6ee6cdaaadd62cffd7fd34bb175065cee2a9a79776cc13bb74930e1edc108e03eba8b3bb2c62d1d695d5284c8cad21d9bedad563e2e96570ea03b23032d818d305c188810116bea0e19f33e7a4eb71e2e86281f55c095ad24005dccee4685395206dbfb7480d55f00e191407844cd6ba022ceea6eac1e5ef1107df340764065ff13480924b4d63c00ee00f9b9bfebee99d9ec920a821fcf06f14a1b5bb4e0590dc30a5c9944f5b2ffe6ff0c62165930cf450718b2ad74775553c6a5de2d9eab709912158b00b87836cf8feab171d774fa0745222902d0c99b312240e900e2759211168947d6d52eaf5f9df731d9d2b1ea2cf2713ca5a9fc9c64761f19012bca4d901e65ccae30197b6c3f57d82d7990d0c82d07a9dcd147a470319f0c6261b8cd5eec858a88ca9a28663220ccc0e2361dc40daffd486e625c403013d70bd4b029f8f63797ae6e7b02e800fdf709824b0e27b6073792fcee6c2cc1477368d0832723a2b13ba98daee9cdf9ede4eb6e7aeea7b37c04fee94db6f28c8252cc0b4b36af066b3b148ceb6765357eb01a071fbeef1d41b296d1627066b9ab344ddb259df37cb9e301e26a5cdf362c8f015236c7aed0cadf533431d9336fe9b5cf17f66964ccdff0db89526b9f2256fc3b82e4e749c5672cb14884935efeb65a44ff9035bbb648242bd508449afd0740491ab5819b75f19802b6741d854fbd87e694df208c55a3751c0865cd09e1e328d079693aef4fc437c9bf977c9aeae7b0a4cebf0c54ebe02efec8f53c7889af5b16ab4eb13422d5ba73a76db75d7cffe779b0ffdcc0ad429dd09448b54f10bac299361d7d649e7d38b7c470ab9f77daeba576783a7b0161e59a61f96d407773bc79c4beadc19c1a1dfde445f819aee6afecccad3579e26542321b53ab0877544c25eaa638e405449ad26c9b8ca38838ab31a8387bd7772e521e80df7c63a534f9eb6c0aacc513d17a78ae076bbaac2472153aa43ca3aa454ab5b334126a74e72e833ab718384e3a8c0e3a7a62e89362cd3da082f83052e91c02ed49739357b77546329969214dc0ca44fbdbf98eb558bb20a328788cf80e358db5b55b1c91b1d3e116642527a40850e9935eb894afc010c67be9034d05dbc5ef41f5660c849c588718c8c6517715e3fec863265fb873b03e8c3d60c7bd69ac8fa156cc5455add9ba2b9b2bcf31eae846cd31ac2b6e29bbed6384ae9bc96a2b68d13fddeaf64f08653547416782ab3eb6e206699fe084d51e32911d994626a3e7970dac2b3a7aa79222ea714228dfaeb1947894db1c4e5f21d5149f2f1b9df2084e6e848da180422e7db75f32deaec04f0cec0c3dab199dca6f932e4f774e7a072798d465a79010e08f284bf01fae43340269269eecc7b43ace70661ea38a4f19faa2df9867437dd55c5e711672057fed655eb02c3e8b05516cd08ce5db30c2adae57bb30bb45590d566bd74956d86269bf8ee9ca064780ead780c8f10795e4d93bfefddaebacfb93ab6333c8b5318c0d73d55364c2dfe057184d837d9a9c41b9070cfe2366f9bdcbf30dd9d5b8566c6204bfdb1c11dd936d9a4b288172a706f0ac9b3b8e0e97fa35579e73fe600134eb004dd9c8d1a7f4d625419c2d48b1a906ac1f7ef34f3c9a816de3c53f6f019a4a554f6a282a21f45891ffaa1e85c5af43f949c8a495dfe7953f53793dac5455b679f90efb678d25b9a7b7326193c34922487a2d83b1689261891d55ca69954c5f4d1fb1824c577cdc8dc4a22d5662e15f87ad729df239ec9ee007556c633d5dbbb4874568d11375250dd836e944c523ffcde1c156613877715c1895a0b755a971b41a1167542d5a94b2930e818fa18d169ed1f95db235cabba2f0b8162c93a31e549ee7903cb8ea9b15a39486b1d1347957e768ab1c372513f0816fd03d64e03c95019bb47b221a60f36c9ad2e4eee321175fdc6dcde5bea9d1bf73cd8ac2919a4f652fea4e1f5e761f5aeb78d925f175e066595e642a2f0c9eeb9313432bb0726ad27e3767007a27bfcdaa83a91b903ca122a3c0d503dc1ff3bdcedb096d0c7c74a67536ce50cc4b1aedef43a8d7bd26f657e3044b6ff25b01e91eb50cd17a2b28b2190e088786c5f3a6b79cf10c7de46cf94aecfdf3e99fc7ff07ca0d051375d81c888eeb525ac2b38036700a5646ab2a3814e7e91441f3dc6c0a149804142fecd91f6d6fff02e6058a670cef325dd009897fb9f7650eeabcfd832e30d2d59080c56fe524666f992c090f5ba17cad9ec034374ed4b98d46fa87b9068b31bf99d80714a736218992e37d674a0100128f93503156f9d53070cbcbb6f1aa4758a2b0012ae3b44ed0952a9ab17a626e9ccd994c401a9749b209d95223a0aa6533654a34cb1b3d4581475a22692daf84e4b87e68f6e53124cb6e3598a363d9157e94fb7d3eb59d6871766a1c3e40820f5eb917b03483cec88524ea8deb4f44dcc2bd73d01fb5ab3f45179c9d176666b6d8264aa7a6694aa208f3a8b9e6269d8b57d233d721750ef14b7b9f711e8c90bd480dbfa0c01d6dd3e899162cbde3c55f0dc0a438347b740fcde9aa0ecd9dd8e1265da91a5dd0d502608c045a54d1a23b91aaf0bb0bcb1174429cae5f2bd99011325d3df263621f110550a181767299fe386125069d08614adf9a1f3070fdcbae318c7b995d75e0ae92e5ab781d1fa0aa71c6a9a5b886835469e204da4c4592375df674a95edc197f097386e2b1de0e068df16c80dd7cd281e5c7ac6ed8d472dfdf8a4cb3dfe753635872c9c9f2a7928fc079b9191c72074b84bfdbcf6a8851bd3796f3d8ea0c9a5b124336dde9c80314aaad1e479a83a32c3ea57fd606c4753551a323cc2e83dfdb4ce40330b05a92172842f9c9df0d69c5cac7c1533c8f422dc7f9f5d697f679ea103f386d4d27fa9d3abdb335d78e6e3a1f0287056f65bb82850317883d80eb676acfd2c9c3da6f530c4f10c32865575bc75432bbf646de1f20fea33ba709befa14099bb52938dea4870a79c6814fb47ad4b8d0d8f180c8dfaa629a39ee861da33dbb0729450802e0dd1e669a07cc74e395986f13850c51fe7b7b4f295fafec913e26df87087c1868c8debbe48f83428819357c953e525abba44d25a3ceb23660c8df4f667463063179b792605a1609dcf63bef3114f4a7a41e54caeb6f164737bb508a91c015cfa960e7971dbb9f5a6bf13cdde7584c37a0e143fa5e6132cd553518f7a277b02aa89a9cd7efe86cc86122a7066c5d60de76cfa6aaf0ae10323534ff6065b715a4c1c2c376338c355fea617b5b77aed0375856516de8b9a556f45f0a907255b4417e3ff9d3363ee9c0317f076cea2f2a90477957f6b72d73085f4f700d18e194d136f253d5c5b1b5fa0a76b37aba42baf527b247aa3ae4ef229d14eae58ebbb7dfd69f4f9bcfb56295ea8ce8cad5c71ee9293d8738c36bdccfd56f99f2c4e42848e3a86b365bf470242e2dec850b61988e4ac505d11e46ae9448d9bab6f208d751921dca54c3ac30fc16fae710bf64401238bef451efd53ac49cc2a1b40d50b59e196ac8fa8272f36ab11abf2ad7d7534c2da0d491f6fad41e63de771f8ec66752c4914dc3d7db34b3b21ce286d077e9900933e650b7d63bd021d3ec71f913efef9ff089c0c762b65bb6f50fcfcaed08d2db57b59b613f269072", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 2.345739109s ago: executing program 1 (id=1149): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}]}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 2.34492512s ago: executing program 6 (id=1150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x5, 'dN'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x8, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}]}}, 0x0}, 0x0) 2.132068617s ago: executing program 3 (id=1151): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1.36032239s ago: executing program 7 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) pread64(0xffffffffffffffff, &(0x7f0000002300)=""/176, 0xb0, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.337396381s ago: executing program 3 (id=1153): r0 = mq_open(0x0, 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) 251.12844ms ago: executing program 3 (id=1154): r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x145, 0x0) 247.85032ms ago: executing program 7 (id=1155): r0 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4084) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5b8c2000) 116.441381ms ago: executing program 7 (id=1156): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x2, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 116.288901ms ago: executing program 3 (id=1157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000180)={0xa, 0x0, [{0xc000001b, 0x80, 0x1, 0x54a, 0x401, 0x6e5b}, {0x40000000, 0x1, 0x4, 0x9, 0x4f93, 0x1, 0xc}, {0x6, 0x5, 0x2, 0x9, 0x400, 0xffffff68, 0xfffffff9}, {0x0, 0x6, 0x4, 0x5, 0x3, 0x200, 0x5}, {0xc0000000, 0xc, 0x5, 0x3ff, 0x7, 0x2f, 0x1}, {0x80000008, 0xd560, 0x3, 0x80, 0x7, 0x7}, {0x0, 0x4, 0x6, 0x4, 0xfffffffe, 0xaf6, 0x9}, {0x40000001, 0xc63, 0x5, 0x7, 0x1000, 0x1000}, {0x6, 0x6, 0x4, 0xbc7, 0x7, 0x5, 0x2}, {0x80000019, 0x7, 0x3, 0x3, 0x2, 0x9, 0xfffffff5}]}) 223.92µs ago: executing program 3 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0xff, 0x81, '\x00', 0xffffffffffffff7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=1159): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) kernel console output (not intermixed with test programs): to perfect channel medium [ 82.195074][ T4530] loop0: detected capacity change from 0 to 512 [ 82.938095][ T4530] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.047151][ T4530] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 83.883768][ T4530] loop0: detected capacity change from 0 to 8 [ 83.892107][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 84.349568][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 84.359450][ T4530] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 84.384831][ T26] audit: type=1326 audit(1754004169.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x0 [ 84.535408][ T4553] cramfs: Error -3 while decompressing! [ 84.541286][ T4553] cramfs: ffffffff961e6042(26)->ffff888070c80000(4096) [ 84.548746][ T4553] cramfs: Error -3 while decompressing! [ 84.554844][ T4553] cramfs: ffffffff961e605c(16)->ffff888070c81000(4096) [ 84.562241][ T4553] cramfs: Error -3 while decompressing! [ 84.568488][ T4553] cramfs: ffffffff961e6042(26)->ffff888070c80000(4096) [ 84.577303][ T26] audit: type=1800 audit(1754004170.092:6): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.66" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 84.783717][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 84.923142][ T4560] vivid-001: ================= START STATUS ================= [ 84.932536][ T4560] vivid-001: Generate PTS: true [ 84.943470][ T4560] vivid-001: Generate SCR: true [ 84.951109][ T4560] tpg source WxH: 640x360 (Y'CbCr) [ 84.956771][ T4560] tpg field: 1 [ 84.960591][ T4560] tpg crop: 640x360@0x0 [ 84.964909][ T4560] tpg compose: 640x360@0x0 [ 84.969576][ T4560] tpg colorspace: 8 [ 84.973796][ T4560] tpg transfer function: 0/0 [ 84.978937][ T4560] tpg Y'CbCr encoding: 0/0 [ 84.983570][ T4560] tpg quantization: 0/0 [ 84.988010][ T4560] tpg RGB range: 0/2 [ 84.992251][ T4560] vivid-001: ================== END STATUS ================== [ 85.442159][ T4559] netlink: 72 bytes leftover after parsing attributes in process `syz.2.74'. [ 86.662306][ T4568] loop3: detected capacity change from 0 to 512 [ 86.687251][ T4563] loop0: detected capacity change from 0 to 512 [ 86.847669][ T4565] loop2: detected capacity change from 0 to 32768 [ 86.898063][ T4565] XFS: ikeep mount option is deprecated. [ 86.947948][ T4563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 86.956025][ T4563] System zones: 1-3, 19-19, 35-38 [ 86.990712][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.993220][ T4565] XFS (loop2): Mounting V5 Filesystem [ 87.001937][ T4563] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.135812][ T4580] loop1: detected capacity change from 0 to 1024 [ 87.247812][ T4580] EXT4-fs (loop1): filesystem is read-only [ 87.254461][ T4580] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 87.265594][ T4580] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 87.276711][ T4580] EXT4-fs error (device loop1): ext4_get_journal_inode:5158: comm syz.1.79: inode #1: comm syz.1.79: iget: illegal inode # [ 87.295052][ T4580] EXT4-fs (loop1): no journal found [ 87.300500][ T4580] EXT4-fs (loop1): can't get journal size [ 87.645836][ T4580] EXT4-fs error (device loop1): ext4_fill_super:4839: inode #2: comm syz.1.79: iget: special inode unallocated [ 87.659207][ T4580] EXT4-fs (loop1): get root inode failed [ 87.664942][ T4580] EXT4-fs (loop1): mount failed [ 88.967486][ T4565] XFS (loop2): Ending clean mount [ 89.040223][ T4565] XFS (loop2): Quotacheck needed: Please wait. [ 89.179288][ T4590] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 89.195784][ T4565] XFS (loop2): Quotacheck: Done. [ 89.243350][ T4190] XFS (loop2): Unmounting Filesystem [ 89.279187][ T4596] vivid-001: disconnect [ 90.171663][ T4592] vivid-001: reconnect [ 91.074409][ T4627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.89'. [ 91.105773][ T4627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 94.095985][ T4641] loop1: detected capacity change from 0 to 1024 [ 94.497849][ T4641] EXT4-fs (loop1): filesystem is read-only [ 94.505780][ T4641] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 94.518620][ T4641] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 94.530509][ T4641] EXT4-fs error (device loop1): ext4_get_journal_inode:5158: comm syz.1.92: inode #1: comm syz.1.92: iget: illegal inode # [ 94.558873][ T4641] EXT4-fs (loop1): no journal found [ 94.565047][ T4641] EXT4-fs (loop1): can't get journal size [ 94.966747][ T4641] EXT4-fs error (device loop1): ext4_fill_super:4839: inode #2: comm syz.1.92: iget: special inode unallocated [ 94.983115][ T4641] EXT4-fs (loop1): get root inode failed [ 94.989050][ T4641] EXT4-fs (loop1): mount failed [ 96.844626][ T4640] loop4: detected capacity change from 0 to 512 [ 97.016156][ T4640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 97.024223][ T4640] System zones: 1-3, 19-19, 35-38 [ 97.036733][ T4640] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.051143][ T4640] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.339973][ T4647] loop3: detected capacity change from 0 to 32768 [ 97.397902][ T4647] XFS: ikeep mount option is deprecated. [ 97.415637][ T4649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.542903][ T4647] XFS (loop3): Mounting V5 Filesystem [ 97.689723][ T4647] XFS (loop3): Ending clean mount [ 97.757209][ T4647] XFS (loop3): Quotacheck needed: Please wait. [ 97.973491][ T4647] XFS (loop3): Quotacheck: Done. [ 98.227719][ T4184] XFS (loop3): Unmounting Filesystem [ 99.969769][ T4685] overlayfs: invalid origin (00000079004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 101.178840][ T4695] loop1: detected capacity change from 0 to 512 [ 101.393670][ T4695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 101.402237][ T4695] System zones: 1-3, 19-19, 35-38 [ 101.411613][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.422716][ T4695] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.122506][ T4713] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 102.124617][ T4715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.111'. [ 102.141946][ T4713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 102.250722][ T4715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 102.682859][ T4713] team0: Port device geneve0 added [ 102.848761][ T4710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.116542][ T4710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.277949][ T4710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.450293][ T4710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.857960][ T4710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.934248][ T4710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.049706][ T4710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.157994][ T4710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.967078][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.228178][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 106.817252][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.055614][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.064284][ T4231] usb 3-1: Product: syz [ 109.068780][ T4231] usb 3-1: Manufacturer: syz [ 109.073517][ T4231] usb 3-1: SerialNumber: syz [ 109.107228][ T4231] usb 3-1: can't set config #1, error -71 [ 109.131116][ T4231] usb 3-1: USB disconnect, device number 3 [ 109.369979][ T4771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 109.887034][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 109.903000][ T4774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.415954][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 113.022303][ T4808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.274476][ T4811] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.456111][ T4811] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.754458][ T4811] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.191790][ T4811] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.582268][ T4811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.633004][ T4811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.653111][ T4811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.704668][ T4826] loop0: detected capacity change from 0 to 512 [ 114.715307][ T4811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.785221][ T4826] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.805791][ T4827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.141'. [ 114.847706][ T4827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 114.856721][ T4826] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 115.005232][ T4826] loop0: detected capacity change from 0 to 8 [ 115.878724][ T4826] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 115.923418][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 116.362371][ T4838] cramfs: Error -3 while decompressing! [ 116.479777][ T4838] cramfs: ffffffff961ea042(26)->ffff8880709d5000(4096) [ 116.489910][ T4838] cramfs: Error -3 while decompressing! [ 116.495474][ T4838] cramfs: ffffffff961ea05c(16)->ffff8880716e8000(4096) [ 116.506477][ T26] audit: type=1800 audit(1754004202.022:7): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.140" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 116.697691][ T4840] loop1: detected capacity change from 0 to 32768 [ 116.729384][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 116.807630][ T4840] XFS: ikeep mount option is deprecated. [ 117.941366][ T4840] XFS (loop1): Mounting V5 Filesystem [ 118.455260][ T4840] XFS (loop1): Ending clean mount [ 118.470787][ T4840] XFS (loop1): Quotacheck needed: Please wait. [ 119.119191][ T4840] XFS (loop1): Quotacheck: Done. [ 119.828400][ T4182] XFS (loop1): Unmounting Filesystem [ 120.093367][ T4260] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.667318][ T4260] usb 4-1: config 0 has no interfaces? [ 120.780874][ T4260] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.794255][ T4260] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.063160][ T4260] usb 4-1: Manufacturer: syz [ 122.036009][ T4260] usb 4-1: config 0 descriptor?? [ 122.709649][ T4892] tipc: Started in network mode [ 122.722367][ T4892] tipc: Node identity 7, cluster identity 4711 [ 122.764683][ T4892] tipc: Node number set to 7 [ 123.162243][ T4896] loop1: detected capacity change from 0 to 512 [ 123.203723][ T4896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 123.467921][ T4896] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 123.586630][ T4896] loop1: detected capacity change from 0 to 8 [ 123.611624][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 123.637227][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop1 [ 123.648843][ T4896] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 123.669439][ T4904] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.028953][ T4903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.055826][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop1 [ 124.063630][ T7] usb 4-1: USB disconnect, device number 2 [ 124.198998][ T26] audit: type=1800 audit(1754004209.722:8): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 124.252160][ T4906] device macsec0 entered promiscuous mode [ 124.734688][ T4914] loop1: detected capacity change from 0 to 32768 [ 124.787473][ T4914] XFS: ikeep mount option is deprecated. [ 125.976658][ T4920] loop3: detected capacity change from 0 to 1024 [ 126.037512][ T4920] EXT4-fs (loop3): filesystem is read-only [ 126.048201][ T4920] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 126.059127][ T4920] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 126.069138][ T4920] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.165: inode #1: comm syz.3.165: iget: illegal inode # [ 126.103406][ T4920] EXT4-fs (loop3): no journal found [ 126.108721][ T4920] EXT4-fs (loop3): can't get journal size [ 126.117984][ T4930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.166'. [ 126.137678][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 126.154622][ T4920] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.165: iget: special inode unallocated [ 126.172691][ T4920] EXT4-fs (loop3): get root inode failed [ 126.178594][ T4920] EXT4-fs (loop3): mount failed [ 126.184957][ T4914] XFS (loop1): Mounting V5 Filesystem [ 126.324281][ T4914] XFS (loop1): Ending clean mount [ 126.342016][ T4914] XFS (loop1): Quotacheck needed: Please wait. [ 126.499958][ T4914] XFS (loop1): Quotacheck: Done. [ 128.823862][ T4182] XFS (loop1): Unmounting Filesystem [ 128.873183][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 129.417714][ T4951] loop3: detected capacity change from 0 to 512 [ 129.490241][ T4951] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.568292][ T4951] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 129.709518][ T4951] loop3: detected capacity change from 0 to 8 [ 129.790174][ T4308] udevd[4308]: incorrect cramfs checksum on /dev/loop3 [ 129.811030][ T4951] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 129.943479][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop3 [ 130.288303][ T4955] cramfs: Error -3 while decompressing! [ 130.400073][ T4955] cramfs: ffffffff961ea042(26)->ffff88805c122000(4096) [ 130.408016][ T4955] cramfs: Error -3 while decompressing! [ 130.413669][ T4955] cramfs: ffffffff961ea05c(16)->ffff88805c124000(4096) [ 130.453090][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop3 [ 130.470958][ T26] audit: type=1800 audit(1754004215.942:9): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.173" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 130.634133][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop3 [ 130.951958][ T4967] netlink: 'syz.4.177': attribute type 10 has an invalid length. [ 131.099409][ T4967] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.289481][ T4969] loop3: detected capacity change from 0 to 1024 [ 131.349881][ T4969] EXT4-fs (loop3): filesystem is read-only [ 131.368671][ T4969] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 131.379674][ T4969] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 131.389413][ T4969] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.178: inode #1: comm syz.3.178: iget: illegal inode # [ 131.407925][ T4969] EXT4-fs (loop3): no journal found [ 131.413161][ T4969] EXT4-fs (loop3): can't get journal size [ 131.601724][ T4969] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.178: iget: special inode unallocated [ 131.618053][ T4969] EXT4-fs (loop3): get root inode failed [ 131.623730][ T4969] EXT4-fs (loop3): mount failed [ 131.813336][ T4975] tmpfs: Unknown parameter 'grpquota' [ 131.840880][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 132.741812][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752261][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761908][ T4986] tipc: Failed to obtain node identity [ 132.768180][ T4986] tipc: Enabling of bearer rejected, failed to enable media [ 132.938843][ T4992] loop2: detected capacity change from 0 to 512 [ 133.022477][ T4992] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.052509][ T4992] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 133.137534][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.467056][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 134.597173][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.642583][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.643798][ T5013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.193'. [ 134.662923][ T5013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 134.683180][ T5011] loop2: detected capacity change from 0 to 1024 [ 134.722442][ T5011] EXT4-fs (loop2): filesystem is read-only [ 134.752323][ T5011] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 134.763246][ T5011] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 134.773543][ T5011] EXT4-fs error (device loop2): ext4_get_journal_inode:5158: comm syz.2.194: inode #1: comm syz.2.194: iget: illegal inode # [ 134.788168][ T5011] EXT4-fs (loop2): no journal found [ 134.793386][ T5011] EXT4-fs (loop2): can't get journal size [ 134.805959][ T5011] EXT4-fs error (device loop2): ext4_fill_super:4839: inode #2: comm syz.2.194: iget: special inode unallocated [ 134.819438][ T5011] EXT4-fs (loop2): get root inode failed [ 134.825114][ T5011] EXT4-fs (loop2): mount failed [ 134.968854][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.979123][ T4232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.993114][ T4232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.008221][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.297783][ T4232] usb 5-1: GET_CAPABILITIES returned 0 [ 135.304152][ T4232] usbtmc 5-1:16.0: can't read capabilities [ 135.506166][ T4245] usb 5-1: USB disconnect, device number 2 [ 135.537036][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.962696][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.111509][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.167334][ T4232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.372249][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.407973][ T4232] usb 1-1: config 0 descriptor?? [ 138.175164][ T4232] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 138.850004][ T5048] loop3: detected capacity change from 0 to 512 [ 139.158773][ T5048] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.173938][ T5048] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 139.237177][ T4260] usb 1-1: USB disconnect, device number 2 [ 139.538621][ T4301] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 139.627395][ T4301] Bluetooth: hci4: Injecting HCI hardware error event [ 139.636104][ T4194] Bluetooth: hci4: hardware error 0x00 [ 139.830304][ T5059] loop0: detected capacity change from 0 to 1024 [ 139.953287][ T5059] EXT4-fs (loop0): filesystem is read-only [ 139.959594][ T5059] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 139.970457][ T5059] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 139.980142][ T5059] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.207: inode #1: comm syz.0.207: iget: illegal inode # [ 139.994101][ T5059] EXT4-fs (loop0): no journal found [ 139.999362][ T5059] EXT4-fs (loop0): can't get journal size [ 140.071680][ T5059] EXT4-fs error (device loop0): ext4_fill_super:4839: inode #2: comm syz.0.207: iget: special inode unallocated [ 140.084288][ T5059] EXT4-fs (loop0): get root inode failed [ 140.090043][ T5059] EXT4-fs (loop0): mount failed [ 144.603653][ T5110] loop0: detected capacity change from 0 to 512 [ 144.660096][ T5110] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.694009][ T5110] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 144.796251][ T5113] loop1: detected capacity change from 0 to 1024 [ 145.173261][ T5113] EXT4-fs (loop1): filesystem is read-only [ 145.186107][ T5113] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 145.207454][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.214095][ T5113] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 145.226810][ T5113] EXT4-fs error (device loop1): ext4_get_journal_inode:5158: comm syz.1.221: inode #1: comm syz.1.221: iget: illegal inode # [ 145.276688][ T5110] loop0: detected capacity change from 0 to 8 [ 145.309950][ T5113] EXT4-fs (loop1): no journal found [ 145.315263][ T5113] EXT4-fs (loop1): can't get journal size [ 145.328766][ T5113] EXT4-fs error (device loop1): ext4_fill_super:4839: inode #2: comm syz.1.221: iget: special inode unallocated [ 145.344201][ T5113] EXT4-fs (loop1): get root inode failed [ 145.350058][ T5113] EXT4-fs (loop1): mount failed [ 145.479003][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 145.498873][ T5110] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 145.508983][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 145.777663][ T5130] cramfs: Error -3 while decompressing! [ 145.897226][ T5130] cramfs: ffffffff961e6042(26)->ffff88805a0ad000(4096) [ 145.912963][ T5130] cramfs: Error -3 while decompressing! [ 145.977494][ T5130] cramfs: ffffffff961e605c(16)->ffff88805a0bb000(4096) [ 145.984863][ T26] audit: type=1800 audit(1754004231.502:10): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.220" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 147.033380][ T5141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.228'. [ 147.047093][ T5141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 147.605115][ T5150] loop4: detected capacity change from 0 to 512 [ 148.601940][ T5150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 148.668112][ T5150] System zones: 1-3, 19-19, 35-38 [ 148.751101][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.837835][ T5162] tipc: Started in network mode [ 148.842779][ T5162] tipc: Node identity 36cd0b32ab83, cluster identity 4711 [ 148.853467][ T5166] 9pnet_virtio: no channels available for device syz [ 148.868050][ T5150] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.907229][ T5162] tipc: Enabled bearer , priority 0 [ 149.141337][ T5168] device syzkaller0 entered promiscuous mode [ 149.343094][ T5173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 149.362298][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 149.382251][ T5161] tipc: Resetting bearer [ 149.474241][ T5161] tipc: Disabling bearer [ 150.104088][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 150.956409][ T5190] loop2: detected capacity change from 0 to 512 [ 151.022526][ T5188] device gre1 entered promiscuous mode [ 151.152191][ T5190] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.181485][ T5190] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 152.078268][ T5195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.244'. [ 152.088492][ T5195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 154.976212][ T5214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.251'. [ 154.987396][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 156.053862][ T5223] loop0: detected capacity change from 0 to 512 [ 156.082985][ T5223] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.117236][ T5223] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 156.253926][ T5223] loop0: detected capacity change from 0 to 8 [ 156.324500][ T5223] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 156.347405][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 156.380440][ T5223] cramfs: Error -3 while decompressing! [ 156.386028][ T5223] cramfs: ffffffff961ea042(26)->ffff888056cf1000(4096) [ 156.393341][ T5223] cramfs: Error -3 while decompressing! [ 156.398980][ T5223] cramfs: ffffffff961ea05c(16)->ffff888056c44000(4096) [ 156.405885][ T5223] cramfs: Error -3 while decompressing! [ 156.411458][ T5223] cramfs: ffffffff961ea042(26)->ffff888056cf1000(4096) [ 156.419856][ T26] audit: type=1800 audit(1754004241.942:11): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.253" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 156.466382][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 156.488260][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 156.741342][ T5241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.749160][ T5241] IPv6: NLM_F_CREATE should be set when creating new route [ 156.943899][ T5241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.615732][ T5254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.258'. [ 157.626518][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 158.897177][ T5266] MPTCP: kernel_bind error, err=-98 [ 161.065998][ T5290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 161.093858][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 161.250279][ T5297] capability: warning: `syz.0.275' uses 32-bit capabilities (legacy support in use) [ 161.252443][ T5292] block device autoloading is deprecated and will be removed. [ 161.496438][ T5305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.576587][ T26] audit: type=1326 audit(1754004247.092:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 163.497075][ T26] audit: type=1326 audit(1754004247.122:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 163.621170][ T26] audit: type=1326 audit(1754004247.132:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.192515][ T26] audit: type=1326 audit(1754004247.262:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.296429][ T26] audit: type=1326 audit(1754004247.262:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.318883][ T26] audit: type=1326 audit(1754004247.262:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.356255][ T26] audit: type=1326 audit(1754004247.262:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.384624][ T26] audit: type=1326 audit(1754004247.272:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.485633][ T26] audit: type=1326 audit(1754004247.272:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.526735][ T26] audit: type=1326 audit(1754004247.272:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fce89d10b69 code=0x7ffc0000 [ 164.779712][ T5331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 164.825547][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 165.123317][ T4605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.405869][ T4605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.553620][ T4605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.686480][ T4605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.807289][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 166.222877][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.286661][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.328233][ T5326] device bridge_slave_0 entered promiscuous mode [ 166.398295][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.424296][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.522641][ T5326] device bridge_slave_1 entered promiscuous mode [ 166.667200][ T4245] Bluetooth: hci5: command 0x0409 tx timeout [ 166.810136][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.873231][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.995535][ T5326] team0: Port device team_slave_0 added [ 167.025873][ T5326] team0: Port device team_slave_1 added [ 167.216607][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.233879][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.316447][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.438571][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.453341][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.561556][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.781545][ T5326] device hsr_slave_0 entered promiscuous mode [ 167.840369][ T5326] device hsr_slave_1 entered promiscuous mode [ 167.881349][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.937278][ T5326] Cannot create hsr debugfs directory [ 168.737155][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 168.759180][ T4605] device hsr_slave_0 left promiscuous mode [ 168.792502][ T4605] device hsr_slave_1 left promiscuous mode [ 168.819194][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.826721][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.834390][ T4301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.863968][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.873185][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.882938][ T4605] device bridge_slave_1 left promiscuous mode [ 168.892882][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.915709][ T4605] device bridge_slave_0 left promiscuous mode [ 168.922161][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.944400][ T4605] device veth1_macvtap left promiscuous mode [ 168.950990][ T4605] device veth0_macvtap left promiscuous mode [ 168.958595][ T4605] device veth1_vlan left promiscuous mode [ 168.964613][ T4605] device veth0_vlan left promiscuous mode [ 169.089279][ T4301] usb 1-1: Using ep0 maxpacket: 32 [ 169.137196][ T4185] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.153316][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 169.169582][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 169.190849][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.207319][ T4301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.221774][ T4301] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 169.222270][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.292483][ T4605] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 169.307226][ T4301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.316446][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.325458][ T4301] usb 1-1: SerialNumber: syz [ 169.343291][ T4605] bond0 (unregistering): Released all slaves [ 169.378519][ T4301] cdc_acm 1-1:1.0: Zero length descriptor references [ 169.385451][ T4301] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 169.423023][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 169.432268][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 169.527366][ T4185] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.536054][ T4185] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.565267][ T4185] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.575619][ T5326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.595708][ T21] usb 1-1: USB disconnect, device number 3 [ 169.623743][ T4185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 169.625733][ T5326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.646984][ T4185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.680062][ T5326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.750623][ T5326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.807300][ T4185] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.816487][ T4185] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.855280][ T4185] usb 4-1: Product: syz [ 169.882202][ T4185] usb 4-1: Manufacturer: syz [ 170.005014][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.040681][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.075865][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.093121][ T4185] cdc_wdm 4-1:1.0: skipping garbage [ 170.098526][ T4185] cdc_wdm 4-1:1.0: skipping garbage [ 170.105937][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.116347][ T4185] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 170.132596][ T4185] cdc_wdm 4-1:1.0: Unknown control protocol [ 170.300157][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.555258][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.723835][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.731056][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.817066][ T4245] Bluetooth: hci5: command 0x040f tx timeout [ 170.888151][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.933697][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.004891][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.159175][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.166309][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.213827][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.748067][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.779118][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.963805][ T1109] usb 4-1: USB disconnect, device number 3 [ 171.975868][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.336261][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.391187][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.498092][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.550381][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.611876][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.694991][ T5326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.760625][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.821752][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.863472][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.897103][ T1109] Bluetooth: hci5: command 0x0419 tx timeout [ 173.592936][ T5470] loop1: detected capacity change from 0 to 32768 [ 173.667466][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.667726][ T5470] XFS: ikeep mount option is deprecated. [ 173.690645][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.707417][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.756484][ T5470] XFS (loop1): Mounting V5 Filesystem [ 174.018237][ T5470] XFS (loop1): Ending clean mount [ 174.026089][ T5470] XFS (loop1): Quotacheck needed: Please wait. [ 174.055852][ T5489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'. [ 174.107449][ T5470] XFS (loop1): Quotacheck: Done. [ 174.181822][ T5492] overlayfs: missing 'lowerdir' [ 174.360698][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 174.527278][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.536757][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.558505][ T4182] XFS (loop1): Unmounting Filesystem [ 174.600693][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.683632][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.729556][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.745171][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.790807][ T5326] device veth0_vlan entered promiscuous mode [ 174.917724][ T5326] device veth1_vlan entered promiscuous mode [ 175.114730][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.278277][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.946567][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.956506][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.976861][ T5326] device veth0_macvtap entered promiscuous mode [ 176.083375][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.133070][ T5326] device veth1_macvtap entered promiscuous mode [ 176.304303][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.366937][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.435666][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.446732][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.464211][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.685225][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.696140][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.707327][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.720510][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.752257][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.789477][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.837154][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.886282][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.915469][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.938774][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.964302][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.991633][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.054157][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.096590][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.155259][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.353438][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.733309][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.816144][ T5326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.020785][ T5534] loop2: detected capacity change from 0 to 32768 [ 178.047002][ T5326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.123434][ T5326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.152971][ T5326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.194561][ T5534] XFS: ikeep mount option is deprecated. [ 178.240017][ T5540] loop3: detected capacity change from 0 to 512 [ 178.299347][ T5540] EXT4-fs (loop3): Test dummy encryption mode enabled [ 178.337105][ T5540] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 178.400901][ T5534] XFS (loop2): Mounting V5 Filesystem [ 178.453013][ T5540] loop3: detected capacity change from 0 to 8 [ 178.527601][ T5540] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 178.603826][ T5540] cramfs: Error -3 while decompressing! [ 178.610258][ T5540] cramfs: ffffffff961e6042(26)->ffff888059f44000(4096) [ 178.617181][ T5540] cramfs: Error -3 while decompressing! [ 178.622720][ T5540] cramfs: ffffffff961e605c(16)->ffff8880713a6000(4096) [ 178.629689][ T5540] cramfs: Error -3 while decompressing! [ 178.635250][ T5540] cramfs: ffffffff961e6042(26)->ffff888059f44000(4096) [ 178.644879][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 178.645004][ T26] audit: type=1800 audit(1754004264.162:55): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.328" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 179.212336][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.235607][ T5534] XFS (loop2): Ending clean mount [ 179.242159][ T5534] XFS (loop2): Quotacheck needed: Please wait. [ 179.282981][ T4308] udevd[4308]: incorrect cramfs checksum on /dev/loop3 [ 179.330949][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.406376][ T5534] XFS (loop2): Quotacheck: Done. [ 179.490531][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.517801][ T5562] overlayfs: missing 'lowerdir' [ 179.528763][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.748846][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.855790][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.972781][ T4190] XFS (loop2): Unmounting Filesystem [ 180.296515][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 180.424772][ T5581] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 181.274087][ T5590] loop1: detected capacity change from 0 to 32768 [ 181.327514][ T5590] XFS: ikeep mount option is deprecated. [ 181.516437][ T5590] XFS (loop1): Mounting V5 Filesystem [ 181.800030][ T5590] XFS (loop1): Ending clean mount [ 181.807875][ T5590] XFS (loop1): Quotacheck needed: Please wait. [ 181.904113][ T5590] XFS (loop1): Quotacheck: Done. [ 183.998207][ T4182] XFS (loop1): Unmounting Filesystem [ 184.489830][ T5623] loop2: detected capacity change from 0 to 32768 [ 184.527685][ T5623] XFS: ikeep mount option is deprecated. [ 184.744903][ T5623] XFS (loop2): Mounting V5 Filesystem [ 185.013064][ T5639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.346'. [ 185.022432][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 185.483017][ T5623] XFS (loop2): Ending clean mount [ 185.490445][ T5623] XFS (loop2): Quotacheck needed: Please wait. [ 185.591842][ T5623] XFS (loop2): Quotacheck: Done. [ 185.845245][ T5623] overlayfs: missing 'lowerdir' [ 186.017076][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 186.050564][ T4245] Bluetooth: hci3: command 0x0406 tx timeout [ 186.583653][ T4190] XFS (loop2): Unmounting Filesystem [ 189.034864][ T5681] tmpfs: Bad value for 'mpol' [ 190.790710][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 192.566221][ T5713] netlink: 60 bytes leftover after parsing attributes in process `syz.5.363'. [ 192.581445][ T5713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.363'. [ 194.183954][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.190372][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.550145][ T5733] hub 6-0:1.0: USB hub found [ 194.558563][ T5733] hub 6-0:1.0: 1 port detected [ 198.361546][ T5763] loop3: detected capacity change from 0 to 512 [ 198.399431][ T5765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 198.552190][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 198.624970][ T5763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.659496][ T5763] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 198.811660][ T5763] loop3: detected capacity change from 0 to 8 [ 198.977595][ T5763] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 199.000689][ T5763] cramfs: Error -3 while decompressing! [ 199.006314][ T5763] cramfs: ffffffff961ea042(26)->ffff88805c599000(4096) [ 199.013242][ T5763] cramfs: Error -3 while decompressing! [ 199.018831][ T5763] cramfs: ffffffff961ea05c(16)->ffff8880718a5000(4096) [ 199.025759][ T5763] cramfs: Error -3 while decompressing! [ 199.031494][ T5763] cramfs: ffffffff961ea042(26)->ffff88805c599000(4096) [ 199.039222][ T26] audit: type=1800 audit(1754004284.562:56): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.376" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 199.113990][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop3 [ 202.911802][ T5828] loop0: detected capacity change from 0 to 32768 [ 202.957824][ T5828] XFS: ikeep mount option is deprecated. [ 203.261656][ T5828] XFS (loop0): Mounting V5 Filesystem [ 203.310965][ T5842] loop3: detected capacity change from 0 to 512 [ 203.512269][ T5842] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.561121][ T5828] XFS (loop0): Ending clean mount [ 203.571079][ T5828] XFS (loop0): Quotacheck needed: Please wait. [ 203.603336][ T5842] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 203.660061][ T4185] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 203.677382][ T5828] XFS (loop0): Quotacheck: Done. [ 203.772511][ T5847] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 203.782652][ T5847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.111776][ T5842] loop3: detected capacity change from 0 to 8 [ 204.138325][ T5842] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 204.161193][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop3 [ 204.178869][ T4185] usb 2-1: Using ep0 maxpacket: 16 [ 204.186773][ T5842] cramfs: Error -3 while decompressing! [ 204.193288][ T5842] cramfs: ffffffff961e6042(26)->ffff888059767000(4096) [ 204.200362][ T5842] cramfs: Error -3 while decompressing! [ 204.205927][ T5842] cramfs: ffffffff961e605c(16)->ffff888059768000(4096) [ 204.213193][ T5842] cramfs: Error -3 while decompressing! [ 204.218806][ T5842] cramfs: ffffffff961e6042(26)->ffff888059767000(4096) [ 204.226661][ T26] audit: type=1800 audit(1754004289.742:57): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.392" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 204.310190][ T4181] XFS (loop0): Unmounting Filesystem [ 204.337713][ T4185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.358872][ T4185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.397291][ T4185] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 204.435344][ T4185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.502196][ T4185] usb 2-1: config 0 descriptor?? [ 204.864700][ T5859] process 'syz.3.395' launched './file0' with NULL argv: empty string added [ 206.249572][ T4185] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 206.437423][ T4185] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: e7. [ 206.553664][ T3560] udevd[3560]: worker [4307] terminated by signal 33 (Unknown signal 33) [ 206.572550][ T3560] udevd[3560]: worker [4307] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1B02.0001/hidraw/hidraw0' [ 206.643799][ T4185] usb 2-1: USB disconnect, device number 2 [ 206.777015][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.040545][ T5888] tipc: Started in network mode [ 207.059232][ T5888] tipc: Node identity 2206d36f3411, cluster identity 4711 [ 207.087105][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 207.104008][ T5888] tipc: Enabled bearer , priority 0 [ 207.165070][ T5890] device syzkaller0 entered promiscuous mode [ 207.227703][ T7] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 207.258604][ T5888] tipc: Resetting bearer [ 207.274802][ T7] usb 3-1: config 0 has no interface number 0 [ 207.933640][ T7] usb 3-1: config 0 interface 180 has no altsetting 0 [ 208.136980][ T5618] tipc: Node number set to 370660207 [ 208.181734][ T5887] tipc: Resetting bearer [ 208.250124][ T5887] tipc: Disabling bearer [ 208.327450][ T7] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 208.343728][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.375647][ T7] usb 3-1: Product: syz [ 208.388368][ T7] usb 3-1: Manufacturer: syz [ 208.403610][ T7] usb 3-1: SerialNumber: syz [ 208.443411][ T7] usb 3-1: config 0 descriptor?? [ 208.866671][ T5907] xt_HMARK: proto mask must be zero with L3 mode [ 210.037384][ T7] kvaser_usb 3-1:0.180: Cannot get usb endpoint(s) [ 210.532197][ T7] usb 3-1: USB disconnect, device number 4 [ 214.907143][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 215.717084][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.789203][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.923308][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.954112][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.995402][ T5989] team0: No ports can be present during mode change [ 216.032914][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 216.137871][ T5971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.594181][ T5998] netlink: 'syz.3.416': attribute type 2 has an invalid length. [ 216.628062][ T5998] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 216.676605][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 217.799593][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 218.208424][ T4245] usb 4-1: USB disconnect, device number 4 [ 223.099888][ T5618] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.557192][ T5618] usb 6-1: Using ep0 maxpacket: 32 [ 224.454919][ T5618] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 225.196950][ T5618] usb 6-1: config 0 has no interface number 0 [ 225.204443][ T5618] usb 6-1: config 0 interface 180 has no altsetting 0 [ 225.287036][ T5618] usb 6-1: string descriptor 0 read error: -71 [ 225.293419][ T5618] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 225.521024][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.587969][ T5618] usb 6-1: config 0 descriptor?? [ 225.652567][ T5618] usb 6-1: can't set config #0, error -71 [ 225.677203][ T5618] usb 6-1: USB disconnect, device number 2 [ 228.927094][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.186133][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 230.460507][ T23] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 230.505785][ T23] usb 4-1: config 0 has no interface number 0 [ 230.542364][ T23] usb 4-1: config 0 interface 180 has no altsetting 0 [ 230.747739][ T23] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 230.765357][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.784689][ T23] usb 4-1: Product: syz [ 230.796490][ T23] usb 4-1: Manufacturer: syz [ 230.801540][ T23] usb 4-1: SerialNumber: syz [ 230.844618][ T23] usb 4-1: config 0 descriptor?? [ 231.352192][ T6164] xt_HMARK: proto mask must be zero with L3 mode [ 233.253777][ C1] hrtimer: interrupt took 48478 ns [ 233.396254][ T23] kvaser_usb 4-1:0.180: Cannot get usb endpoint(s) [ 233.500567][ T23] usb 4-1: USB disconnect, device number 5 [ 233.860488][ T6180] loop1: detected capacity change from 0 to 32768 [ 234.847700][ T6180] XFS: ikeep mount option is deprecated. [ 235.464460][ T6180] XFS (loop1): Mounting V5 Filesystem [ 236.368858][ T6180] XFS (loop1): Ending clean mount [ 236.405449][ T6180] XFS (loop1): Quotacheck needed: Please wait. [ 236.656709][ T6180] XFS (loop1): Quotacheck: Done. [ 237.108518][ T4182] XFS (loop1): Unmounting Filesystem [ 239.016961][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 239.446286][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 239.487227][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 240.177320][ T23] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 240.336967][ T23] usb 1-1: config 0 has no interface number 0 [ 240.344288][ T23] usb 1-1: config 0 interface 180 has no altsetting 0 [ 240.728625][ T23] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 240.747693][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.767042][ T23] usb 1-1: Product: syz [ 240.772213][ T23] usb 1-1: Manufacturer: syz [ 240.778087][ T23] usb 1-1: SerialNumber: syz [ 240.787314][ T23] usb 1-1: config 0 descriptor?? [ 240.877106][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.173713][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.195285][ T7] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 241.206235][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.231252][ T7] usb 3-1: config 0 descriptor?? [ 241.413850][ T6274] loop1: detected capacity change from 0 to 32768 [ 241.628147][ T6274] XFS: ikeep mount option is deprecated. [ 241.944472][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 241.944660][ T6274] XFS (loop1): Mounting V5 Filesystem [ 241.960573][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 241.980312][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.018131][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 242.030730][ T7] usb 3-1: media controller created [ 242.047473][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.083303][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 242.101093][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 242.126400][ T6274] XFS (loop1): Ending clean mount [ 242.138394][ T6274] XFS (loop1): Quotacheck needed: Please wait. [ 242.159000][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 242.213533][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 242.221335][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 242.226588][ T6274] XFS (loop1): Quotacheck: Done. [ 242.232875][ T7] usb 3-1: USB disconnect, device number 5 [ 242.375670][ T6291] overlayfs: missing 'workdir' [ 242.627449][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 242.675379][ T4182] XFS (loop1): Unmounting Filesystem [ 242.897537][ T23] kvaser_usb 1-1:0.180: Cannot get usb endpoint(s) [ 243.832021][ T23] usb 1-1: USB disconnect, device number 4 [ 244.936088][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 246.106502][ T6324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'. [ 246.454055][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 248.377806][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 248.627108][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 248.747070][ T4231] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 248.773451][ T4231] usb 1-1: config 0 has no interface number 0 [ 248.804666][ T4231] usb 1-1: config 0 interface 180 has no altsetting 0 [ 248.999182][ T4231] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 249.023744][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.052614][ T4231] usb 1-1: Product: syz [ 249.068553][ T4231] usb 1-1: Manufacturer: syz [ 249.088630][ T4231] usb 1-1: SerialNumber: syz [ 249.127880][ T6373] loop5: detected capacity change from 0 to 512 [ 249.142920][ T4231] usb 1-1: config 0 descriptor?? [ 249.236012][ T6373] EXT4-fs (loop5): Test dummy encryption mode enabled [ 249.273578][ T6373] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 249.648197][ T6373] loop5: detected capacity change from 0 to 8 [ 250.483426][ T6373] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 250.518715][ T6311] udevd[6311]: incorrect cramfs checksum on /dev/loop5 [ 251.404209][ T6373] cramfs: Error -3 while decompressing! [ 251.409871][ T6373] cramfs: ffffffff961ea042(26)->ffff8880727e9000(4096) [ 251.417232][ T6373] cramfs: Error -3 while decompressing! [ 251.422781][ T6373] cramfs: ffffffff961ea05c(16)->ffff8880727ea000(4096) [ 251.429852][ T6373] cramfs: Error -3 while decompressing! [ 251.435999][ T6373] cramfs: ffffffff961ea042(26)->ffff8880727e9000(4096) [ 251.444263][ T26] audit: type=1800 audit(1754004336.962:58): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.498" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 251.527467][ T4231] kvaser_usb 1-1:0.180: Cannot get usb endpoint(s) [ 251.567858][ T4231] usb 1-1: USB disconnect, device number 5 [ 251.572750][ T6311] udevd[6311]: incorrect cramfs checksum on /dev/loop5 [ 254.529812][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 255.621068][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661473][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.439828][ T4254] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 256.697001][ T4254] usb 3-1: Using ep0 maxpacket: 32 [ 256.845633][ T4254] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 257.002893][ T4254] usb 3-1: config 0 has no interface number 0 [ 257.352246][ T4254] usb 3-1: config 0 interface 180 has no altsetting 0 [ 257.583500][ T4254] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 257.597619][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.629861][ T4254] usb 3-1: Product: syz [ 257.683393][ T4254] usb 3-1: Manufacturer: syz [ 257.754259][ T4254] usb 3-1: SerialNumber: syz [ 258.428863][ T4254] usb 3-1: config 0 descriptor?? [ 258.690685][ T6448] netlink: 60 bytes leftover after parsing attributes in process `syz.3.514'. [ 258.700313][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 260.121136][ T4231] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 260.527150][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.548200][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.557293][ T4231] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.566505][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.588020][ T4231] usb 4-1: config 0 descriptor?? [ 260.687569][ T4254] kvaser_usb 3-1:0.180: Cannot get usb endpoint(s) [ 260.704121][ T4231] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 260.711336][ T4231] dvb-usb: bulk message failed: -22 (3/0) [ 260.727750][ T4231] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 260.755184][ T4231] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.767145][ T4254] usb 3-1: USB disconnect, device number 6 [ 260.825122][ T4231] usb 4-1: media controller created [ 260.868071][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.904919][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 261.087236][ T4231] dvb-usb: bulk message failed: -22 (6/0) [ 261.147227][ T4231] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 261.322363][ T6465] loop0: detected capacity change from 0 to 32768 [ 261.367698][ T6465] XFS: ikeep mount option is deprecated. [ 261.374773][ T4231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 261.593789][ T4231] dvb-usb: schedule remote query interval to 150 msecs. [ 261.708245][ T4231] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.745333][ T6465] XFS (loop0): Mounting V5 Filesystem [ 261.800945][ T4231] usb 4-1: USB disconnect, device number 6 [ 261.995176][ T6465] XFS (loop0): Ending clean mount [ 262.002411][ T6465] XFS (loop0): Quotacheck needed: Please wait. [ 263.032612][ T4231] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.217227][ T6465] XFS (loop0): Quotacheck: Done. [ 264.271339][ T6491] loop2: detected capacity change from 0 to 512 [ 264.521594][ T6491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 264.567048][ T6491] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 264.622924][ T4181] XFS (loop0): Unmounting Filesystem [ 265.337072][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 265.676953][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 267.431505][ T4231] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 268.468073][ T4231] usb 2-1: config 0 has no interface number 0 [ 268.474318][ T4231] usb 2-1: config 0 interface 180 has no altsetting 0 [ 268.518009][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 268.525878][ T4231] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 268.557820][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.571720][ T4231] usb 2-1: config 0 descriptor?? [ 268.588447][ T4231] usb 2-1: can't set config #0, error -71 [ 268.607134][ T4231] usb 2-1: USB disconnect, device number 3 [ 270.908846][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.5.535'. [ 270.917874][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.535'. [ 271.051203][ T6540] loop0: detected capacity change from 0 to 512 [ 271.110913][ T6540] EXT4-fs (loop0): Test dummy encryption mode enabled [ 271.153180][ T6540] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 271.482759][ T6540] loop0: detected capacity change from 0 to 8 [ 271.495556][ T6540] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 271.506012][ T6311] udevd[6311]: incorrect cramfs checksum on /dev/loop0 [ 271.887785][ T6311] udevd[6311]: incorrect cramfs checksum on /dev/loop0 [ 272.625718][ T6311] udevd[6311]: incorrect cramfs checksum on /dev/loop0 [ 278.422320][ T6581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.547'. [ 278.431290][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 281.445392][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 281.747296][ T6595] loop1: detected capacity change from 0 to 512 [ 282.023408][ T6595] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.133682][ T6595] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 287.096940][ T4254] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 287.507043][ T4254] usb 2-1: Using ep0 maxpacket: 8 [ 288.297123][ T4254] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 288.307039][ T4254] usb 2-1: config 0 has no interface number 0 [ 288.313257][ T4254] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 288.324784][ T4254] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 288.370946][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.560'. [ 288.379906][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 288.391383][ T4254] usb 2-1: config 0 interface 49 has no altsetting 0 [ 288.707276][ T4254] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 288.723314][ T4254] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 288.798662][ T4254] usb 2-1: Product: syz [ 288.803049][ T4254] usb 2-1: Manufacturer: syz [ 289.078327][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 289.230938][ T4254] usb 2-1: SerialNumber: syz [ 289.246241][ T4254] usb 2-1: config 0 descriptor?? [ 289.426083][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.487185][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.517065][ T6622] device bridge_slave_0 entered promiscuous mode [ 289.530285][ T6642] loop2: detected capacity change from 0 to 512 [ 289.549277][ T4254] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 289.565095][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.572513][ T4254] gspca_zc3xx: reg_w_i err -71 [ 289.579885][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.587386][ T6642] EXT4-fs (loop2): Test dummy encryption mode enabled [ 289.595525][ T4254] gspca_zc3xx: probe of 2-1:0.49 failed with error -71 [ 289.605008][ T6642] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 290.470613][ T4231] Bluetooth: hci2: command 0x0409 tx timeout [ 291.189733][ T6622] device bridge_slave_1 entered promiscuous mode [ 291.315933][ T6651] [U] : [ 291.319199][ T6651] [U] [ 291.321928][ T6651] [U] [ 291.324650][ T6651] [U] [ 291.328498][ T6651] [U] [ 291.331232][ T6651] [U] [ 291.333951][ T6651] [U] [ 291.336682][ T6651] [U] [ 291.340119][ T6651] [U] [ 291.342850][ T6651] [U] [ 291.345572][ T6651] [U] [ 291.348290][ T6651] [U] [ 291.352481][ T6651] [U] [ 291.355236][ T6651] [U] [ 291.358004][ T6651] [U] [ 291.360724][ T6651] [U] [ 291.364155][ T6651] [U] [ 291.366878][ T6651] [U] [ 291.369597][ T6651] [U] [ 291.372314][ T6651] [U] [ 291.540317][ T6652] [U] [ 292.013912][ T4254] usb 2-1: USB disconnect, device number 4 [ 292.283211][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.528099][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.575183][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 294.514666][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.571'. [ 294.523705][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 294.624192][ T6622] team0: Port device team_slave_0 added [ 294.839864][ T26] audit: type=1326 audit(1754004380.362:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f546c845b69 code=0x0 [ 294.888048][ T6622] team0: Port device team_slave_1 added [ 295.000683][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.016931][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.048365][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.082163][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.089623][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.143667][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.276719][ T6622] device hsr_slave_0 entered promiscuous mode [ 295.295787][ T6622] device hsr_slave_1 entered promiscuous mode [ 295.314786][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.338451][ T6622] Cannot create hsr debugfs directory [ 296.269351][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 297.543816][ T6622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.370626][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 298.479772][ T6622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.808684][ T6622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.065804][ T6622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.445976][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.584'. [ 302.455274][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.584'. [ 303.505491][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.582136][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.598709][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.762824][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.792439][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.810353][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.841886][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.849034][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.878759][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.920640][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.064949][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.107365][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.114467][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.964176][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.989062][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.004729][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.016440][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.167150][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.216037][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.463195][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.596'. [ 307.472381][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 307.886484][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.935216][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.981401][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.029063][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.082713][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.134933][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.428328][ T6760] vivid-000: disconnect [ 309.484162][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.517309][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.574344][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.260961][ T6759] vivid-000: reconnect [ 312.708129][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.742142][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.036406][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.062598][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.116333][ T6622] device veth0_vlan entered promiscuous mode [ 313.131929][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.149294][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.190927][ T6622] device veth1_vlan entered promiscuous mode [ 313.306259][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.342991][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.360841][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.376141][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.395799][ T6622] device veth0_macvtap entered promiscuous mode [ 313.453170][ T6622] device veth1_macvtap entered promiscuous mode [ 314.992904][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.082478][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.167272][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.500905][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.616445][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.772902][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.956198][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.181291][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.306457][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.388381][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.556230][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.705031][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.784825][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.905904][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.009282][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.059355][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070915][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.120847][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.283098][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.293531][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.312739][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.323054][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.344167][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.354830][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.432465][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.469717][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.949971][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.728124][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.740984][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.750495][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.762164][ T6622] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.771424][ T6622] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.780516][ T6622] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.789762][ T6622] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.476154][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.181532][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.199414][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.205017][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.220396][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.250463][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.386508][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 321.508913][ T6847] netlink: 108 bytes leftover after parsing attributes in process `syz.1.619'. [ 321.530482][ T6844] vivid-002: disconnect [ 321.636950][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 321.683904][ T4198] Bluetooth: unknown link type 130 [ 321.698186][ T6843] vivid-002: reconnect [ 321.767142][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.467778][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.182947][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 324.397265][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 324.457703][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.820396][ T23] usb 3-1: config 0 descriptor?? [ 325.847111][ T23] usb 3-1: can't set config #0, error -71 [ 326.121837][ T23] usb 3-1: USB disconnect, device number 7 [ 329.387980][ T6889] vivid-001: disconnect [ 330.199851][ T6888] vivid-001: reconnect [ 333.136568][ T26] audit: type=1326 audit(1754004418.652:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.6.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4c37d7b69 code=0x0 [ 338.405407][ T6942] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 339.204270][ T6945] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 339.210853][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 339.258970][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 339.402263][ T6947] vhci_hcd: connection closed [ 339.403715][ T4601] vhci_hcd: stop threads [ 339.419966][ T4601] vhci_hcd: release socket [ 339.441472][ T4601] vhci_hcd: disconnect device [ 339.567087][ T1109] vhci_hcd: vhci_device speed not set [ 346.074947][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 346.295584][ T6984] vivid-003: disconnect [ 346.665516][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 347.122479][ T6983] vivid-003: reconnect [ 355.839585][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.677'. [ 360.134986][ T7085] ODEBUG: Out of memory. ODEBUG disabled [ 363.455728][ T7120] MPTCP: kernel_bind error, err=-98 [ 363.640785][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.604926][ T7132] vivid-003: disconnect [ 364.616261][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.781837][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.954706][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.476545][ T7131] vivid-003: reconnect [ 366.129914][ T9] tipc: Left network mode [ 368.343323][ T9] device hsr_slave_0 left promiscuous mode [ 368.379030][ T9] device hsr_slave_1 left promiscuous mode [ 368.426054][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.434551][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.466174][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.504527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.582750][ T9] device bridge_slave_1 left promiscuous mode [ 368.638319][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.820844][ T9] device bridge_slave_0 left promiscuous mode [ 368.840321][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.921465][ T9] device veth1_macvtap left promiscuous mode [ 369.035281][ T9] device veth0_macvtap left promiscuous mode [ 369.130590][ T9] device veth1_vlan left promiscuous mode [ 369.200586][ T9] device veth0_vlan left promiscuous mode [ 369.788465][ T7200] vivid-003: disconnect [ 370.629537][ T7198] vivid-003: reconnect [ 371.476783][ T26] audit: type=1326 audit(1754004456.992:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.0.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22d150db69 code=0x0 [ 371.864061][ T9] team0 (unregistering): Port device team_slave_1 removed [ 371.883436][ T9] team0 (unregistering): Port device team_slave_0 removed [ 371.900257][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.922369][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.035831][ T9] bond0 (unregistering): Released all slaves [ 372.226938][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 374.243711][ T7264] netlink: 60 bytes leftover after parsing attributes in process `syz.6.728'. [ 374.999208][ T7266] block device autoloading is deprecated and will be removed. [ 378.762369][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.768935][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.485953][ T7299] hub 6-0:1.0: USB hub found [ 379.486786][ T7299] hub 6-0:1.0: 1 port detected [ 380.855729][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.741'. [ 381.639453][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 381.926627][ T7325] bridge0: port 3(team0) entered blocking state [ 381.932985][ T7325] bridge0: port 3(team0) entered disabled state [ 381.940781][ T7325] device team0 entered promiscuous mode [ 381.946359][ T7325] device team_slave_0 entered promiscuous mode [ 381.952798][ T7325] device team_slave_1 entered promiscuous mode [ 381.959742][ T7325] bridge0: port 3(team0) entered blocking state [ 381.966381][ T7325] bridge0: port 3(team0) entered forwarding state [ 383.006935][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.247705][ T7] usb 3-1: config 176 has an invalid interface number: 218 but max is 0 [ 383.269801][ T7] usb 3-1: config 176 has no interface number 0 [ 383.276915][ T7] usb 3-1: config 176 interface 218 has no altsetting 0 [ 384.857088][ T4245] Bluetooth: hci2: command 0x0405 tx timeout [ 385.297049][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 385.376928][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.415500][ T7] usb 3-1: Product: syz [ 385.548100][ T7352] ksmbd: Unknown IPC event: 6, ignore. [ 387.190452][ T7] usb 3-1: Manufacturer: syz [ 388.346965][ T7] usb 3-1: can't set config #176, error -71 [ 388.354170][ T7] usb 3-1: USB disconnect, device number 8 [ 389.462674][ T7372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.753'. [ 389.835642][ T7368] device wlan0 entered promiscuous mode [ 406.566300][ T7556] bridge0: port 3(team0) entered blocking state [ 406.572696][ T7556] bridge0: port 3(team0) entered disabled state [ 406.580380][ T7556] device team0 entered promiscuous mode [ 406.585946][ T7556] device team_slave_0 entered promiscuous mode [ 406.592298][ T7556] device team_slave_1 entered promiscuous mode [ 406.599009][ T7556] bridge0: port 3(team0) entered blocking state [ 406.605290][ T7556] bridge0: port 3(team0) entered forwarding state [ 410.732353][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 412.426392][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 412.796963][ T23] usb 4-1: device descriptor read/all, error -71 [ 414.106667][ T7616] fuse: Unknown parameter 'fd0x0000000000000003' [ 414.126093][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 415.965909][ T26] audit: type=1326 audit(1754004501.482:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.0.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22d150db69 code=0x0 [ 417.643933][ T7635] hub 6-0:1.0: USB hub found [ 417.649570][ T7635] hub 6-0:1.0: 1 port detected [ 419.270467][ T7641] wg1 speed is unknown, defaulting to 1000 [ 419.837872][ T7641] wg1 speed is unknown, defaulting to 1000 [ 419.845977][ T7641] wg1 speed is unknown, defaulting to 1000 [ 420.982668][ T7666] loop0: detected capacity change from 0 to 1024 [ 422.248157][ T7666] EXT4-fs (loop0): filesystem is read-only [ 422.257889][ T7666] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 422.269023][ T7666] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 422.280327][ T7666] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.820: inode #1: comm syz.0.820: iget: illegal inode # [ 422.298196][ T7666] EXT4-fs (loop0): no journal found [ 422.303596][ T7666] EXT4-fs (loop0): can't get journal size [ 422.408835][ T7666] EXT4-fs error (device loop0): ext4_fill_super:4839: inode #2: comm syz.0.820: iget: special inode unallocated [ 422.422189][ T7666] EXT4-fs (loop0): get root inode failed [ 422.428291][ T7666] EXT4-fs (loop0): mount failed [ 423.375191][ T4185] wg1 speed is unknown, defaulting to 1000 [ 423.385732][ T7641] infiniband syz0: set active [ 423.447039][ T7641] infiniband syz0: added wg1 [ 423.560336][ T7641] infiniband syz0: Couldn't open port 1 [ 423.788295][ T7641] RDS/IB: syz0: added [ 423.808766][ T7641] smc: adding ib device syz0 with port count 1 [ 423.828429][ T7641] smc: ib device syz0 port 1 has pnetid [ 423.836585][ T4185] wg1 speed is unknown, defaulting to 1000 [ 423.863256][ T7641] wg1 speed is unknown, defaulting to 1000 [ 426.871807][ T7641] wg1 speed is unknown, defaulting to 1000 [ 428.263425][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 428.280632][ T7641] wg1 speed is unknown, defaulting to 1000 [ 428.518980][ T7701] device gre1 entered promiscuous mode [ 428.600656][ T7641] wg1 speed is unknown, defaulting to 1000 [ 429.048505][ T7641] wg1 speed is unknown, defaulting to 1000 [ 429.132210][ T26] audit: type=1326 audit(1754004514.652:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22d150db69 code=0x0 [ 432.126945][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.830'. [ 432.698200][ T7735] loop3: detected capacity change from 0 to 1024 [ 432.715640][ T7735] EXT4-fs (loop3): filesystem is read-only [ 432.722695][ T7735] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 432.733697][ T7735] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 432.743983][ T7735] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.831: inode #1: comm syz.3.831: iget: illegal inode # [ 432.762445][ T7735] EXT4-fs (loop3): no journal found [ 432.768291][ T7735] EXT4-fs (loop3): can't get journal size [ 433.932128][ T7735] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.831: iget: special inode unallocated [ 433.946613][ T7735] EXT4-fs (loop3): get root inode failed [ 433.952611][ T7735] EXT4-fs (loop3): mount failed [ 435.087412][ T7757] program syz.2.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.514646][ T7794] loop0: detected capacity change from 0 to 1024 [ 439.940513][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946991][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.449143][ T7794] EXT4-fs (loop0): filesystem is read-only [ 440.455939][ T7794] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 440.466922][ T7794] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 440.477118][ T7794] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.844: inode #1: comm syz.0.844: iget: illegal inode # [ 440.494882][ T7794] EXT4-fs (loop0): no journal found [ 440.500409][ T7794] EXT4-fs (loop0): can't get journal size [ 440.528261][ T7794] EXT4-fs error (device loop0): ext4_fill_super:4839: inode #2: comm syz.0.844: iget: special inode unallocated [ 440.541332][ T7794] EXT4-fs (loop0): get root inode failed [ 440.547164][ T7794] EXT4-fs (loop0): mount failed [ 441.676021][ T7817] hub 6-0:1.0: USB hub found [ 441.682149][ T7817] hub 6-0:1.0: 1 port detected [ 444.828053][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 446.308137][ T7853] tmpfs: Unknown parameter 'grpquota' [ 446.320318][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 448.857562][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 449.252457][ T26] audit: type=1326 audit(1754004534.772:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22d150db69 code=0x0 [ 449.346949][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 449.410371][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.517358][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 449.710334][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.907060][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.922810][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.976837][ T7] usb 2-1: Product: syz [ 450.013659][ T7] usb 2-1: Manufacturer: syz [ 450.117347][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 451.047630][ T7] usb 2-1: USB disconnect, device number 5 [ 452.706974][ T7931] tmpfs: Unknown parameter 'grpquota' [ 455.007858][ T7941] netlink: 88 bytes leftover after parsing attributes in process `syz.2.873'. [ 460.255290][ T7982] blktrace: Concurrent blktraces are not allowed on sg0 [ 462.021283][ T7988] tmpfs: Unknown parameter 'grpquota' [ 462.027549][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 468.973612][ T8048] wg1 speed is unknown, defaulting to 1000 [ 470.550598][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 470.816928][ T7683] Bluetooth: hci4: command 0x0409 tx timeout [ 471.562049][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.580424][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.601276][ T8048] device bridge_slave_0 entered promiscuous mode [ 471.621927][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.642524][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.727016][ T8048] device bridge_slave_1 entered promiscuous mode [ 471.789153][ T8090] MPTCP: kernel_bind error, err=-98 [ 471.851020][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.421799][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 473.578279][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.394718][ T8048] team0: Port device team_slave_0 added [ 474.446348][ T8048] team0: Port device team_slave_1 added [ 474.523331][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.580723][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.606673][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.997102][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.018366][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.047092][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.087699][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.349031][ T8048] device hsr_slave_0 entered promiscuous mode [ 475.696857][ T4288] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 475.708975][ T8048] device hsr_slave_1 entered promiscuous mode [ 475.715928][ T8048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.723691][ T8048] Cannot create hsr debugfs directory [ 475.731732][ T7683] Bluetooth: hci4: command 0x040f tx timeout [ 476.036895][ T4288] usb 2-1: Using ep0 maxpacket: 8 [ 476.496940][ T4288] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 476.926929][ T4288] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 476.991327][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.150210][ T4288] usb 2-1: Product: syz [ 477.174707][ T4288] usb 2-1: Manufacturer: syz [ 477.203456][ T4288] usb 2-1: SerialNumber: syz [ 477.255751][ T4288] usb 2-1: config 0 descriptor?? [ 477.330074][ T4288] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 477.371492][ T4288] usb 2-1: setting power ON [ 477.377355][ T4288] dvb-usb: bulk message failed: -22 (2/0) [ 477.424644][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.492199][ T8048] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 477.522588][ T8048] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 477.532330][ T8107] dvb-usb: bulk message failed: -22 (3/0) [ 477.542838][ T8107] cxusb: i2c wr: len=79 is too big! [ 477.542838][ T8107] [ 477.557589][ T8048] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.576530][ T8048] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 477.600217][ T4288] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 477.638335][ T4288] usb 2-1: media controller created [ 477.690081][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.787191][ T8017] Bluetooth: hci4: command 0x0419 tx timeout [ 477.978335][ T4288] usb 2-1: selecting invalid altsetting 6 [ 477.984463][ T4288] usb 2-1: digital interface selection failed (-22) [ 478.011948][ T4288] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 478.080753][ T4288] usb 2-1: setting power OFF [ 478.085807][ T4288] dvb-usb: bulk message failed: -22 (2/0) [ 478.128456][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.209538][ T4288] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 478.272514][ T4288] (NULL device *): no alternate interface [ 478.304744][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.316498][ T4288] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 478.444718][ T8157] MPTCP: kernel_bind error, err=-98 [ 478.465883][ T4288] usb 2-1: USB disconnect, device number 6 [ 478.575593][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.570301][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.750862][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.135907][ T4240] Bluetooth: hci4: command 0x0405 tx timeout [ 481.244263][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.413961][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.421137][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.697685][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.899274][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.988648][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.995844][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.135559][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.197346][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.238076][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.282830][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.476959][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.516548][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.467871][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.576199][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.585792][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.621584][ T8048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.696972][ T8185] tmpfs: Unknown parameter 'grpquota' [ 484.993515][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 485.503782][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.676271][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.688078][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.699446][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.063338][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 486.951103][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 487.003219][ T8210] rdma_rxe: rxe_register_device failed with error -23 [ 487.036592][ T8210] rdma_rxe: failed to add wg1 [ 487.557430][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 489.875436][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.901870][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.098558][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.418694][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.441672][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.498176][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.534283][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.620117][ T8048] device veth0_vlan entered promiscuous mode [ 492.634733][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.680172][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.712472][ T8048] device veth1_vlan entered promiscuous mode [ 493.476930][ T8263] tmpfs: Unknown parameter 'grpquota' [ 493.735692][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 493.758704][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 494.098795][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.147684][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.354420][ T8048] device veth0_macvtap entered promiscuous mode [ 494.399816][ T8048] device veth1_macvtap entered promiscuous mode [ 494.528381][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.741701][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.568081][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.629304][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.662872][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.701942][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.761665][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.830086][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.840147][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.851091][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.235375][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.269474][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.303810][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.353064][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.388918][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.413496][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.430291][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.446026][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.458123][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.475031][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.486966][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.523358][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.547640][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.555843][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.583307][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.592863][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.602615][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.612305][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.623568][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.935'. [ 496.677226][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.935'. [ 496.799749][ T8048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.855175][ T8048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.864379][ T8048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.873891][ T8048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.877889][ T8303] MPTCP: kernel_bind error, err=-98 [ 497.056998][ T8305] usb usb8: usbfs: process 8305 (syz.3.937) did not claim interface 0 before use [ 497.477311][ T8312] tmpfs: Unknown parameter 'grpquota' [ 497.483814][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 498.984342][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.741571][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.352597][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 500.433668][ T7209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.449209][ T7209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.598928][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.948'. [ 500.608200][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 500.621418][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.379758][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.386127][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.489333][ T8353] rdma_rxe: rxe_register_device failed with error -23 [ 501.497021][ T8353] rdma_rxe: failed to add wg1 [ 503.684403][ T8368] MPTCP: addr_signal error, add_addr=1, echo=0 [ 504.897947][ T8390] netlink: 32 bytes leftover after parsing attributes in process `syz.6.961'. [ 504.997727][ T8395] rdma_rxe: rxe_register_device failed with error -23 [ 505.036990][ T8395] rdma_rxe: failed to add wg1 [ 506.793496][ T8415] MPTCP: kernel_bind error, err=-98 [ 506.842256][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.971'. [ 507.900013][ T8431] rdma_rxe: rxe_register_device failed with error -23 [ 507.947006][ T8433] netlink: 68 bytes leftover after parsing attributes in process `syz.1.978'. [ 507.947163][ T8431] rdma_rxe: failed to add wg1 [ 508.127944][ T8435] netlink: 165 bytes leftover after parsing attributes in process `syz.0.980'. [ 509.045370][ T4603] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.174042][ T4603] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.336021][ T4603] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.563076][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 509.643680][ T8457] input: syz1 as /devices/virtual/input/input16 [ 509.655159][ T4603] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.795436][ T8461] wg1 speed is unknown, defaulting to 1000 [ 511.427538][ T8485] hub 6-0:1.0: USB hub found [ 511.433050][ T8485] hub 6-0:1.0: 1 port detected [ 512.061875][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 513.124306][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 514.344753][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 514.519920][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.557019][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.588839][ T8461] device bridge_slave_0 entered promiscuous mode [ 514.677238][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.684336][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.699634][ T8461] device bridge_slave_1 entered promiscuous mode [ 515.463168][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.529500][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.645890][ T8461] team0: Port device team_slave_0 added [ 516.416828][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 516.536359][ T8461] team0: Port device team_slave_1 added [ 516.778662][ T4603] device hsr_slave_0 left promiscuous mode [ 517.743148][ T4603] device hsr_slave_1 left promiscuous mode [ 517.835311][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.848741][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.937567][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.946989][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.965863][ T4603] device bridge_slave_1 left promiscuous mode [ 517.977065][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.002780][ T4603] device bridge_slave_0 left promiscuous mode [ 518.041799][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.088599][ T4603] device veth1_macvtap left promiscuous mode [ 518.105926][ T4603] device veth0_macvtap left promiscuous mode [ 518.115598][ T4603] device veth1_vlan left promiscuous mode [ 518.127218][ T4603] device veth0_vlan left promiscuous mode [ 518.497285][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 519.324437][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 519.346572][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 519.368362][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.416298][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.561649][ T4603] bond0 (unregistering): Released all slaves [ 519.863889][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.879267][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.996512][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.136415][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.210880][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.441222][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.577541][ T13] Bluetooth: hci2: command 0x0405 tx timeout [ 520.869621][ T8461] device hsr_slave_0 entered promiscuous mode [ 520.876975][ T8461] device hsr_slave_1 entered promiscuous mode [ 520.956853][ T8461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.966200][ T8461] Cannot create hsr debugfs directory [ 521.857347][ T4240] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 522.253435][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.625499][ T4240] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 522.655121][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.706650][ T4240] usb 4-1: config 0 descriptor?? [ 522.716154][ T8637] MPTCP: kernel_bind error, err=-98 [ 523.211198][ T4240] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 523.310742][ T4240] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input17 [ 523.456915][ T4586] Bluetooth: hci5: command 0x1003 tx timeout [ 523.463823][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 523.778813][ T4240] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 523.796359][ T8461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 523.865850][ T4240] usb 4-1: USB disconnect, device number 9 [ 523.924028][ T8461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 523.968648][ T8461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 524.039809][ T8461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.144581][ T8650] fido_id[8650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 525.040363][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.103737][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.118724][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.187264][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.234287][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.257714][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.293975][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.301140][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.405389][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.537228][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 525.546371][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 526.554361][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.563443][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.572568][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.579720][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.923401][ T8688] loop7: detected capacity change from 0 to 1024 [ 527.918203][ T4301] Bluetooth: hci5: command 0x1009 tx timeout [ 528.124755][ T8688] EXT4-fs (loop7): filesystem is read-only [ 528.131623][ T8688] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 528.142622][ T8688] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 528.153079][ T8688] EXT4-fs error (device loop7): ext4_get_journal_inode:5158: comm syz.7.1036: inode #1: comm syz.7.1036: iget: illegal inode # [ 528.169620][ T8688] EXT4-fs (loop7): no journal found [ 528.175162][ T8688] EXT4-fs (loop7): can't get journal size [ 528.212453][ T8688] EXT4-fs error (device loop7): ext4_fill_super:4839: inode #2: comm syz.7.1036: iget: special inode unallocated [ 528.226944][ T8688] EXT4-fs (loop7): get root inode failed [ 528.232747][ T8688] EXT4-fs (loop7): mount failed [ 528.281053][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 528.338018][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 529.481269][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 529.797309][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 529.838119][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 529.907422][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 529.976815][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.001885][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.018832][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.081014][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.120781][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 530.142956][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.189492][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.049280][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.094059][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.383601][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.840865][ T8752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1049'. [ 536.337475][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.368662][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.422537][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.500718][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.238288][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.246127][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.264627][ T8461] device veth0_vlan entered promiscuous mode [ 537.359714][ T8461] device veth1_vlan entered promiscuous mode [ 538.842311][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.867962][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.005286][ T8808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1061'. [ 539.019254][ T8461] device veth0_macvtap entered promiscuous mode [ 539.861960][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 540.690857][ T8461] device veth1_macvtap entered promiscuous mode [ 540.852170][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.897177][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.132240][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.749304][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.759598][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.776758][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.786599][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.797398][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.807414][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.817928][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.830938][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.843779][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.854369][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.866707][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.877901][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.888024][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.898693][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.056904][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.067435][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.077433][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.091056][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.102358][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.110362][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.128440][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.245276][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.284087][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.308396][ T8461] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.494208][ T8461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.718363][ T8461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.829044][ T8461] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.999320][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.004385][ T7209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.040381][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.046664][ T8879] overlayfs: missing 'lowerdir' [ 544.074589][ T7209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.097073][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 544.139844][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.526966][ T7683] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 545.287097][ T7683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.357227][ T7683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.477090][ T7683] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 546.655801][ T7683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.664045][ T7683] usb 1-1: SerialNumber: syz [ 547.059663][ T7683] usb 1-1: 0:2 : does not exist [ 547.276890][ T7683] usb 1-1: USB disconnect, device number 6 [ 547.371040][ T8911] bridge0: port 3(team0) entered blocking state [ 547.377530][ T8911] bridge0: port 3(team0) entered disabled state [ 547.385199][ T8911] device team0 entered promiscuous mode [ 547.390871][ T8911] device team_slave_0 entered promiscuous mode [ 547.397202][ T8911] device team_slave_1 entered promiscuous mode [ 547.403893][ T8911] bridge0: port 3(team0) entered blocking state [ 547.410235][ T8911] bridge0: port 3(team0) entered forwarding state [ 548.210789][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.660428][ T8935] hub 6-0:1.0: USB hub found [ 550.667725][ T8935] hub 6-0:1.0: 1 port detected [ 551.427026][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 551.696916][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 551.847081][ T23] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 551.855551][ T23] usb 2-1: config 0 has no interface number 0 [ 551.871445][ T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 551.881826][ T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 552.186924][ T23] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 552.979730][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.124607][ T23] usb 2-1: Product: syz [ 553.136945][ T23] usb 2-1: Manufacturer: syz [ 553.147002][ T23] usb 2-1: SerialNumber: syz [ 553.667153][ T23] usb 2-1: config 0 descriptor?? [ 554.373829][ T23] usb 2-1: can't set config #0, error -71 [ 554.388103][ T23] usb 2-1: USB disconnect, device number 7 [ 558.924299][ T9001] tmpfs: Unknown parameter 'grpquota' [ 558.930479][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 559.199317][ T9006] hub 6-0:1.0: USB hub found [ 559.254882][ T9006] hub 6-0:1.0: 1 port detected [ 562.851636][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.858156][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.395763][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 565.714039][ T9065] hub 6-0:1.0: USB hub found [ 565.719871][ T9065] hub 6-0:1.0: 1 port detected [ 566.859630][ T9087] rdma_rxe: rxe_register_device failed with error -23 [ 566.881495][ T9087] rdma_rxe: failed to add wg1 [ 568.499938][ T9102] MPTCP: kernel_bind error, err=-98 [ 568.721916][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 568.845774][ T9112] hub 6-0:1.0: USB hub found [ 568.851683][ T9112] hub 6-0:1.0: 1 port detected [ 569.836811][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 569.922291][ T9123] ------------[ cut here ]------------ [ 569.942628][ T9123] WARNING: CPU: 0 PID: 9123 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 569.963932][ T9123] Modules linked in: [ 569.968777][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.996831][ T9123] CPU: 0 PID: 9123 Comm: syz.3.1158 Not tainted 5.15.189-syzkaller #0 [ 570.005177][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.032096][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.042458][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.063597][ T9123] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 570.070595][ T4231] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.087930][ T9123] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 570.116784][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.144308][ T4231] usb 7-1: config 0 descriptor?? [ 570.167122][ T9123] RSP: 0018:ffffc9000411fc30 EFLAGS: 00010283 [ 570.191348][ T9129] rdma_rxe: rxe_register_device failed with error -23 [ 570.198440][ T9129] rdma_rxe: failed to add wg1 [ 570.203343][ T9123] RAX: ffffffff810eefd4 RBX: ffff8880443a0000 RCX: 0000000000080000 [ 570.223841][ T9123] RDX: ffffc9000cb51000 RSI: 00000000000003f7 RDI: 00000000000003f8 [ 570.262244][ T9123] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 570.302470][ T9123] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff888043de2001 [ 570.359288][ T9123] R13: 1ffff1100887401e R14: ffff8880443a00f0 R15: ffff888043de2000 [ 570.376916][ T9123] FS: 00007f546a6ad6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 570.390795][ T9123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.412135][ T9123] CR2: 0000200000028000 CR3: 0000000041e40000 CR4: 00000000003526e0 [ 570.429710][ T9123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.453868][ T9123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.484450][ T9123] Call Trace: [ 570.496983][ T9123] [ 570.500095][ T9123] ? __lock_acquire+0x7c60/0x7c60 [ 570.510243][ T9123] kvm_vcpu_ioctl+0x887/0xb80 [ 570.530455][ T9123] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 570.536276][ T9123] ? bpf_lsm_file_ioctl+0x5/0x10 [ 570.551528][ T9123] ? security_file_ioctl+0x7c/0xa0 [ 570.556813][ T9123] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 570.572769][ T9123] __se_sys_ioctl+0xfa/0x170 [ 570.578784][ T9123] do_syscall_64+0x4c/0xa0 [ 570.593211][ T9123] ? clear_bhb_loop+0x30/0x80 [ 570.640358][ T4231] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 570.648493][ T9123] ? clear_bhb_loop+0x30/0x80 [ 570.653213][ T9123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.662055][ T4231] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 570.680055][ T9123] RIP: 0033:0x7f546c845b69 [ 570.684527][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.712680][ T4231] microsoft 0003:045E:07DA.0003: no inputs found [ 570.720617][ T4231] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 570.753789][ T9123] RSP: 002b:00007f546a6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.763635][ T9123] RAX: ffffffffffffffda RBX: 00007f546ca6cfa0 RCX: 00007f546c845b69 [ 570.778584][ T9123] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 570.786607][ T9123] RBP: 00007f546c8c8df1 R08: 0000000000000000 R09: 0000000000000000 [ 570.799587][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.816927][ T9123] R13: 0000000000000000 R14: 00007f546ca6cfa0 R15: 00007fffade6b7c8 [ 570.825129][ T9123] [ 570.834626][ T9123] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 570.841936][ T9123] CPU: 0 PID: 9123 Comm: syz.3.1158 Not tainted 5.15.189-syzkaller #0 [ 570.850111][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.860373][ T9123] Call Trace: [ 570.863677][ T9123] [ 570.866630][ T9123] dump_stack_lvl+0x168/0x230 [ 570.871338][ T9123] ? show_regs_print_info+0x20/0x20 [ 570.876567][ T9123] ? load_image+0x3b0/0x3b0 [ 570.881109][ T9123] panic+0x2c9/0x7f0 [ 570.885039][ T9123] ? bpf_jit_dump+0xd0/0xd0 [ 570.889580][ T9123] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 570.895416][ T9123] __warn+0x248/0x2b0 [ 570.899430][ T9123] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 570.905271][ T9123] report_bug+0x1b7/0x2e0 [ 570.909637][ T9123] handle_bug+0x3a/0x70 [ 570.913825][ T9123] exc_invalid_op+0x16/0x40 [ 570.918371][ T9123] asm_exc_invalid_op+0x16/0x20 [ 570.923349][ T9123] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 570.929797][ T9123] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 570.949429][ T9123] RSP: 0018:ffffc9000411fc30 EFLAGS: 00010283 [ 570.955535][ T9123] RAX: ffffffff810eefd4 RBX: ffff8880443a0000 RCX: 0000000000080000 [ 570.963536][ T9123] RDX: ffffc9000cb51000 RSI: 00000000000003f7 RDI: 00000000000003f8 [ 570.971528][ T9123] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 570.979537][ T9123] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff888043de2001 [ 570.987531][ T9123] R13: 1ffff1100887401e R14: ffff8880443a00f0 R15: ffff888043de2000 [ 570.995534][ T9123] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 571.001378][ T9123] ? __lock_acquire+0x7c60/0x7c60 [ 571.006446][ T9123] kvm_vcpu_ioctl+0x887/0xb80 [ 571.011156][ T9123] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 571.016849][ T9123] ? bpf_lsm_file_ioctl+0x5/0x10 [ 571.021812][ T9123] ? security_file_ioctl+0x7c/0xa0 [ 571.026968][ T9123] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 571.032644][ T9123] __se_sys_ioctl+0xfa/0x170 [ 571.037266][ T9123] do_syscall_64+0x4c/0xa0 [ 571.041709][ T9123] ? clear_bhb_loop+0x30/0x80 [ 571.046414][ T9123] ? clear_bhb_loop+0x30/0x80 [ 571.051121][ T9123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 571.057041][ T9123] RIP: 0033:0x7f546c845b69 [ 571.061485][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.081115][ T9123] RSP: 002b:00007f546a6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.089555][ T9123] RAX: ffffffffffffffda RBX: 00007f546ca6cfa0 RCX: 00007f546c845b69 [ 571.097551][ T9123] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 571.105551][ T9123] RBP: 00007f546c8c8df1 R08: 0000000000000000 R09: 0000000000000000 [ 571.113548][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.121540][ T9123] R13: 0000000000000000 R14: 00007f546ca6cfa0 R15: 00007fffade6b7c8 [ 571.129548][ T9123] [ 571.132972][ T9123] Kernel Offset: disabled [ 571.137607][ T9123] Rebooting in 86400 seconds..