last executing test programs: 5m35.305380506s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m34.078274845s ago: executing program 2 (id=8): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x9, 0x10000, 0x4, 0x5, 0x5, 0x8, 0x7, 0xa, 0xfd, 0x2, 0x1, 0x201, 0x1, 0x6, 0x101, 0x8, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) r3 = gettid() r4 = eventfd(0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c040}, 0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306032c00000085b00cf92f84aaad00"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x800}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x81, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='block_plug\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.712348441s ago: executing program 32 (id=8): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x9, 0x10000, 0x4, 0x5, 0x5, 0x8, 0x7, 0xa, 0xfd, 0x2, 0x1, 0x201, 0x1, 0x6, 0x101, 0x8, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) r3 = gettid() r4 = eventfd(0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c040}, 0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306032c00000085b00cf92f84aaad00"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x800}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x81, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='block_plug\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 12.794492283s ago: executing program 1 (id=781): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.886873463s ago: executing program 4 (id=785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x10020, &(0x7f0000000380)='GPL\x00') 10.749951375s ago: executing program 5 (id=786): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x72, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0xfe}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) sendfile(r2, r0, 0x0, 0x2) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket(0x400000000010, 0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 10.152755374s ago: executing program 0 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000010000000c0000000000000069dce751e3b29124490f0a5ac5bbb3ab4cf88107367800c8c449b816c53f833e79", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x101) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562cb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd054cb0e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa0fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d211522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10, 0x0, 0xa1}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x18) 9.095374801s ago: executing program 5 (id=788): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r3, 0x0) write(r3, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 9.035021762s ago: executing program 3 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a0500"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 9.034363171s ago: executing program 0 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.757083156s ago: executing program 3 (id=791): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0xfffffc7a) ioctl$TUNSETCARRIER(r7, 0x400454e2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffffff, &(0x7f00000045c0)='./file0\x00', 0x6000, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a31000000000800"], 0x90}}, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.720850022s ago: executing program 3 (id=792): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205838cc607bf341d25"], 0x0}, 0x0) 7.688704552s ago: executing program 5 (id=793): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x114) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 7.633340013s ago: executing program 0 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom(r3, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) pread64(r1, &(0x7f0000000100)=""/78, 0x4e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 7.572622124s ago: executing program 1 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000179500000000000300"], 0x0, 0x0, 0xfe86, 0x0, 0x41000, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x3, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xff, 0xa533, 0x0, 0x0, 0x34d6}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x80000006}) fsopen(&(0x7f0000000000)='pstore\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xbb, &(0x7f0000001580)="$eJzs1zFKA0EUBuDfRXALQWxEsLC22TPoUcRSG7FSBD2CF/EqHmF7CwvbELIhmQ0bCKQJ2SJ8XzHM459hXjnvZ/J99XXzmeLy+bcbvLy+Pd4/lTUcpCrJSZI6yfV5qf/uSnbUZ+3/+0NbbVw9Hb9bAABgF1WaoVh8+GddkxwnmZYh8HaZXKyO1Oubfk782PpCd7afzgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGMQ8AAP//0pYswg==") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x60a10, 0x10809}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f626172726965722c677944ce", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) unshare(0x20040600) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r6}}, 0x18) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000008c0)) recvfrom(r2, 0x0, 0x0, 0x10022, 0x0, 0x0) 7.368316867s ago: executing program 4 (id=796): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60c240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 6.675502797s ago: executing program 1 (id=797): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x4a08, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 5.83410531s ago: executing program 4 (id=798): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x72, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0xfe}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) sendfile(r2, r0, 0x0, 0x2) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket(0x400000000010, 0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 5.818009991s ago: executing program 3 (id=799): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x5b42}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x30}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="011c9bf2a79c0800"], 0x8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5.764851962s ago: executing program 1 (id=800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r0, 0x8004745a, &(0x7f00000000c0)) 5.750328271s ago: executing program 5 (id=801): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 5.150065761s ago: executing program 1 (id=802): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xf30e, 0x10, 0xfffffffd, 0x40000333}, &(0x7f00000006c0), &(0x7f00000000c0)) socket$qrtr(0x2a, 0x2, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000000)=0x8) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff13, &(0x7f0000000000)='cgroup\x00'}, 0x7c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/138, 0x8a}], 0x1) 5.149285741s ago: executing program 3 (id=803): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r3, 0x0) write(r3, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 5.111721242s ago: executing program 0 (id=804): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0xb8f7cfc7068256f1) 4.173307536s ago: executing program 0 (id=805): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.098676687s ago: executing program 4 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0x0, 0xc4, &(0x7f0000000300), &(0x7f0000000580)=""/196, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x6}]}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socket$inet6(0xa, 0x80801, 0xfffffffd) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100), 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) 3.27033587s ago: executing program 3 (id=807): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b733d192394", 0x49, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001380)={'macvtap0\x00', 0x1}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_redirect(0x0, &(0x7f0000001300), &(0x7f0000001340)='./file1\x00', 0x8, 0x0) 3.145507252s ago: executing program 4 (id=808): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60c240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 2.973076184s ago: executing program 1 (id=809): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205838cc607bf341d25"], 0x0}, 0x0) 1.147158842s ago: executing program 5 (id=810): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x4a08, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 956.871175ms ago: executing program 4 (id=811): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x114) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 176.037537ms ago: executing program 5 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6, 0x0, 0xd, 0x0, 0xfd, 0x0, 0x6, 0x3, 0x6, 0x25, 0x4, 0x7f, 0x0, 0x7, 0xd, 0x4, 0x55, 0xcb, 0xc, '\x00', 0x8, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=813): signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000300)={0x1}, 0x8, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, 0x0, 0x0, 0x44840) recvmsg$can_j1939(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/128, 0x80}], 0x1}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 49.824863][ T4170] cgroup: Unknown subsys name 'net' [ 49.957954][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.159896][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.489638][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.505510][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.542256][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.573527][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.626612][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.690124][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.697480][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.706072][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.734715][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.741778][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.750404][ T4194] device bridge_slave_0 entered promiscuous mode [ 52.758403][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.765594][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.773811][ T4194] device bridge_slave_1 entered promiscuous mode [ 52.781133][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.788409][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.796743][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.814292][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.821365][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.829850][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.857276][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.864626][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.872275][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.914697][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.921892][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.930432][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.939455][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.951189][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.974142][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.981212][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.989005][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.997258][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.007863][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.017267][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.024364][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.031952][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.040644][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.069960][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.077596][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.085996][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.095292][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.138017][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.149414][ T4194] team0: Port device team_slave_0 added [ 53.157718][ T4182] team0: Port device team_slave_0 added [ 53.179339][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.189597][ T4194] team0: Port device team_slave_1 added [ 53.196521][ T4182] team0: Port device team_slave_1 added [ 53.209245][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.220353][ T4183] team0: Port device team_slave_0 added [ 53.246317][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.256752][ T4183] team0: Port device team_slave_1 added [ 53.282247][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.289322][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.315611][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.342219][ T4188] team0: Port device team_slave_0 added [ 53.348568][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.355794][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.381731][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.395206][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.402164][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.428234][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.439847][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.446917][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.473179][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.493725][ T4181] team0: Port device team_slave_0 added [ 53.501025][ T4188] team0: Port device team_slave_1 added [ 53.518707][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.526010][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.552889][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.565199][ T4181] team0: Port device team_slave_1 added [ 53.571381][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.578404][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.604549][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.664068][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.671190][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.697403][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.719873][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.726570][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.733951][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.740913][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.767295][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.786337][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.793399][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.819433][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.834831][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.841792][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.867824][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.880644][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.887979][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.894670][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.902362][ T4182] Cannot create hsr debugfs directory [ 53.977867][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.985395][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.991931][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.999601][ T4183] Cannot create hsr debugfs directory [ 54.014601][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.021179][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.027857][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.035467][ T4188] Cannot create hsr debugfs directory [ 54.052352][ T4181] device hsr_slave_0 entered promiscuous mode [ 54.059050][ T4181] device hsr_slave_1 entered promiscuous mode [ 54.065899][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.073536][ T4181] Cannot create hsr debugfs directory [ 54.184003][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.184616][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 54.190577][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 54.202464][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.208749][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 54.370298][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.381127][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.390613][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.402571][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.459252][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.470371][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.483087][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.499162][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.547748][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.575326][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.589472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.599431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.607466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.616795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.626379][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.633579][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.646877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.655870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.668419][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.675507][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.683615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.693683][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.713579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.722374][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.754719][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.768139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.782043][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.799809][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.812562][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.830563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.839751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.848525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.860177][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.886505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.896011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.907918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.918016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.927826][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.941234][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.963989][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.982493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.991191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.000805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.009532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.019655][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.028717][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.040376][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.052496][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.062515][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.086894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.097277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.106442][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.113660][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.122193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.134019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.148911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.157901][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.165005][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.191057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.228615][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.236547][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.288480][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.300794][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.309571][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.321379][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.330004][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.338999][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.347453][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.355351][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.364769][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.384486][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.395880][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.406933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.415969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.427715][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.448809][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.459422][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.473424][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.480608][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.490547][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.498639][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.506525][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.525007][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.532078][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.541435][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.551402][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.558534][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.582500][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.621456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.631491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.640506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.650078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.659977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.668812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.680739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.701909][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.713580][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.729978][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.737798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.747091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.756708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.765462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.775467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.785321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.794458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.809418][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.823832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.831357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.845738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.857742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.876261][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.894726][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.904033][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.912548][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.919665][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.928544][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.937826][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.946843][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.953947][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.961625][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.970149][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.978529][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.986741][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.994628][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.006923][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.017799][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.026565][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.043428][ T4182] device veth0_vlan entered promiscuous mode [ 56.054289][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.075529][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.096798][ T4182] device veth1_vlan entered promiscuous mode [ 56.107193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.118458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.126821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.136480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.145296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.154524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.163259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.203609][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.212456][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.222226][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.231242][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.241623][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.248733][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.256830][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.265640][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.273433][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 56.273848][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 56.280299][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.290547][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 56.294321][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.299387][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 56.311893][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.312589][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 56.321077][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.335889][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.345480][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.359245][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.368090][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.377033][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.384132][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.391726][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.399826][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.408341][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.419701][ T4183] device veth0_vlan entered promiscuous mode [ 56.428607][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.449017][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.456392][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.466362][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.475188][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.489332][ T4183] device veth1_vlan entered promiscuous mode [ 56.506364][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.514623][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.522651][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.531944][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.542650][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.552467][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.582343][ T4183] device veth0_macvtap entered promiscuous mode [ 56.591847][ T4182] device veth0_macvtap entered promiscuous mode [ 56.603608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.617894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.628369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.661055][ T4183] device veth1_macvtap entered promiscuous mode [ 56.673550][ T4182] device veth1_macvtap entered promiscuous mode [ 56.692111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.701782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.716608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.726399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.736617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.758560][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.770006][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.785882][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.798366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.806970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.816433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.825340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.834653][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.845815][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.857271][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.878452][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.892974][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.905694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.914890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.924780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.932265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.940351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.949358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.958871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.968254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.982308][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.993583][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.005421][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.016760][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.025988][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.034819][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.044757][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.056197][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.066771][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.075812][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.084775][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.100818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.116211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.163283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.172352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.199890][ T4194] device veth0_vlan entered promiscuous mode [ 57.210459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.219582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.228414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.237594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.257926][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.298855][ T4194] device veth1_vlan entered promiscuous mode [ 57.320580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.336041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.344570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.356776][ T4188] device veth0_vlan entered promiscuous mode [ 57.378519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.388932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.398136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.423886][ T4188] device veth1_vlan entered promiscuous mode [ 57.436695][ T4194] device veth0_macvtap entered promiscuous mode [ 57.446641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.456434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.465717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.474994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.485157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.494756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.514547][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.523327][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.532363][ T4194] device veth1_macvtap entered promiscuous mode [ 57.584682][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.595529][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.610676][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.619301][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.628332][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.644605][ T4188] device veth0_macvtap entered promiscuous mode [ 57.655581][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.669107][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.689574][ T4188] device veth1_macvtap entered promiscuous mode [ 57.700905][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.715229][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.725742][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.736275][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.747344][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.759599][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.770671][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.780800][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.792404][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.805007][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.812358][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.820524][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.829147][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.838039][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.848256][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.857098][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.866559][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.893192][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.901173][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.918248][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927697][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.937830][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.947107][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.964917][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.988643][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.004621][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.015734][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.027624][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.037553][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.049513][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.061629][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.077924][ T4181] device veth0_vlan entered promiscuous mode [ 58.089096][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.099060][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.109632][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.118833][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.128478][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.136354][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.152491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.165102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.175295][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.186600][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.196658][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.207616][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.219045][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.230206][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.239319][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.240053][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.253087][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.256750][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.273338][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.376155][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.396471][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.434451][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.449570][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.455442][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 58.460099][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.464817][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 58.477997][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 58.484329][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 58.490508][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 58.500620][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.542117][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.544398][ T4181] device veth1_vlan entered promiscuous mode [ 58.557018][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.326141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.339392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.397898][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.421005][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.521290][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.627305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.738420][ T4181] device veth0_macvtap entered promiscuous mode [ 59.832071][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.843090][ T4181] device veth1_macvtap entered promiscuous mode [ 59.873106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.934480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.943789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.985408][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.015937][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.024504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.036934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 60.046110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.055249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.064351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.157332][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.222691][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.407221][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.476718][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.493863][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.506129][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 60.512478][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 60.523417][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 60.532865][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 60.533843][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.542685][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 60.575645][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.646747][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.659868][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.716328][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.921142][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.362606][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.402860][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.423044][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.458653][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.484470][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.500941][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.511084][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.521664][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.534270][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.545943][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.558725][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.651097][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.660248][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.669074][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.687922][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.701646][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.964319][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.989796][ T4337] Zero length message leads to an empty skb [ 63.000535][ T4327] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 63.008394][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.059029][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.092840][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.192530][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.392426][ T4343] loop1: detected capacity change from 0 to 64 [ 63.432452][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.484266][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.579186][ T4348] minix_free_block (loop1:1): bit already cleared [ 63.586648][ T4348] minix_free_block (loop1:4): bit already cleared [ 63.593841][ T4348] minix_free_block (loop1:3): bit already cleared [ 63.600335][ T4348] minix_free_block (loop1:2): bit already cleared [ 63.606902][ T4348] minix_free_block (loop1:1): bit already cleared [ 64.224188][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.744615][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.791773][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.861110][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.009077][ T4361] netlink: 'syz.1.14': attribute type 2 has an invalid length. [ 65.391975][ T4363] process 'syz.0.12' launched './file0' with NULL argv: empty string added [ 67.293635][ T4378] loop2: detected capacity change from 0 to 7 [ 67.514997][ T4378] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 67.528136][ T4378] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 67.536155][ T4376] loop3: detected capacity change from 0 to 64 [ 67.544983][ T4378] Dev loop2: unable to read RDB block 7 [ 67.550649][ T4378] loop2: AHDI p2 p3 [ 67.586505][ T4378] loop2: partition table partially beyond EOD, truncated [ 67.598099][ T4382] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 67.606923][ T4378] loop2: p3 start 335544320 is beyond EOD, truncated [ 67.647707][ T4376] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 68.185802][ T4388] loop3: detected capacity change from 0 to 1024 [ 68.226984][ T4388] hfsplus: unable to parse mount options [ 68.243598][ T4386] device gretap1 entered promiscuous mode [ 68.617101][ T4394] QAT: failed to copy from user cfg_data. [ 71.306579][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324185][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.880504][ T4425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 72.887263][ T4425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.895798][ T4425] vhci_hcd vhci_hcd.0: Device attached [ 72.963475][ T4426] vhci_hcd: connection closed [ 72.967595][ T154] vhci_hcd: stop threads [ 73.085293][ T154] vhci_hcd: release socket [ 73.090926][ T154] vhci_hcd: disconnect device [ 73.113265][ T4428] vhci_hcd: vhci_device speed not set [ 74.484961][ T4445] netlink: 96 bytes leftover after parsing attributes in process `syz.4.35'. [ 76.106803][ T4456] loop4: detected capacity change from 0 to 256 [ 76.339174][ T4456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 76.429538][ T13] cfg80211: failed to load regulatory.db [ 80.665771][ T4493] loop0: detected capacity change from 0 to 40427 [ 80.677621][ T4493] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 80.685542][ T4493] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.698001][ T4493] F2FS-fs (loop0): invalid crc value [ 81.177983][ T4428] Bluetooth: hci5: command 0x0409 tx timeout [ 81.280923][ T4493] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.356753][ T4493] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.364654][ T4493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.366538][ T4501] loop4: detected capacity change from 0 to 64 [ 81.397462][ T4464] chnl_net:caif_netlink_parms(): no params data found [ 81.644371][ T26] audit: type=1800 audit(1752901902.215:2): pid=4507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.51" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 81.995731][ T4508] minix_free_block (loop4:1): bit already cleared [ 82.002199][ T4508] minix_free_block (loop4:4): bit already cleared [ 82.008730][ T4508] minix_free_block (loop4:3): bit already cleared [ 82.015219][ T4508] minix_free_block (loop4:2): bit already cleared [ 82.021660][ T4508] minix_free_block (loop4:1): bit already cleared [ 83.227683][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 83.393927][ T4526] netlink: 72 bytes leftover after parsing attributes in process `syz.4.59'. [ 83.506152][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.538331][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.587143][ T4464] device bridge_slave_0 entered promiscuous mode [ 83.820175][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.892832][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.132852][ T4464] device bridge_slave_1 entered promiscuous mode [ 84.980921][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.031383][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.291484][ T4464] team0: Port device team_slave_0 added [ 85.401772][ T4464] team0: Port device team_slave_1 added [ 85.407843][ T4428] Bluetooth: hci5: command 0x040f tx timeout [ 85.454454][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.504659][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.572807][ T4305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.858541][ T4464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.871425][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.879781][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.906300][ T4464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.722056][ T4464] device hsr_slave_0 entered promiscuous mode [ 86.933459][ T4305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.192470][ T4464] device hsr_slave_1 entered promiscuous mode [ 87.213508][ T4464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.221080][ T4464] Cannot create hsr debugfs directory [ 87.232819][ T4305] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.316956][ T4305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.481206][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 88.163662][ T4305] usb 5-1: config 0 descriptor?? [ 88.233051][ T4305] usb 5-1: can't set config #0, error -71 [ 88.722965][ T4305] usb 5-1: USB disconnect, device number 2 [ 89.020849][ T4464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.037119][ T4464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.051397][ T4464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.084635][ T4464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.209412][ T4300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.386467][ T4300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.571958][ T4300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.615127][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.657517][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.675855][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.708672][ T4464] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.738546][ T4300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.804843][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.821025][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.848501][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.855698][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.070750][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.096477][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.107222][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.134775][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.141876][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.341792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.302044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.754712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.774042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.834772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.847308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.859666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.868445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.898520][ T4464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.915596][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.937480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.948689][ T4614] ODEBUG: Out of memory. ODEBUG disabled [ 94.137847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.201583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.292618][ T4614] syz.1.78 (4614): drop_caches: 2 [ 96.822350][ T4634] loop3: detected capacity change from 0 to 64 [ 96.898316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.918741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.037857][ T4640] loop1: detected capacity change from 0 to 64 [ 97.144602][ T4640] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 97.476465][ T4464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.756277][ T4650] loop4: detected capacity change from 0 to 256 [ 97.785448][ T4644] loop1: detected capacity change from 0 to 1024 [ 97.812343][ T4644] hfsplus: unable to parse mount options [ 97.845413][ T4650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 98.723203][ T4672] loop6: detected capacity change from 0 to 524287999 [ 98.735630][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.746822][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.755766][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.766673][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.192648][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.203736][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.251569][ T4676] block device autoloading is deprecated and will be removed. [ 99.753673][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.776558][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.846046][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.857076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.005398][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.017762][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.028749][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.080073][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.137525][ T4464] device veth0_vlan entered promiscuous mode [ 100.147877][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.169725][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.177707][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.188667][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.216698][ T4464] device veth1_vlan entered promiscuous mode [ 100.229038][ T4674] loop3: detected capacity change from 0 to 4096 [ 100.253375][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.264540][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.273256][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.284163][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.292388][ T4672] ldm_validate_partition_table(): Disk read failed. [ 100.457844][ T4464] device veth0_macvtap entered promiscuous mode [ 100.483281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.491697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.499899][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 0 [ 100.511147][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 0 [ 100.523615][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.563164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.586048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.624353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.633832][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.645419][ T4672] Dev loop6: unable to read RDB block 0 [ 100.658392][ T4672] loop6: unable to read partition table [ 100.671577][ T4672] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 100.743029][ T4464] device veth1_macvtap entered promiscuous mode [ 101.569573][ T4702] loop4: detected capacity change from 0 to 64 [ 101.616137][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.969788][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.044064][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.054087][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.070447][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.312753][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.336309][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.351047][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.361839][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.388227][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.417230][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.441255][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.464062][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.506185][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.529894][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.545312][ T4717] loop4: detected capacity change from 0 to 256 [ 102.561365][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.578989][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.591698][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.606847][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.618514][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.635042][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.652372][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.678020][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.697291][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.720261][ T4717] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 102.744139][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.790052][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.889654][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.939353][ T4464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.987856][ T4464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.490992][ T4464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530898][ T4464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.195416][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.214191][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.453173][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.493331][ T4730] binder_alloc: 4729: binder_alloc_buf, no vma [ 105.194483][ T4300] device hsr_slave_0 left promiscuous mode [ 105.221565][ T4300] device hsr_slave_1 left promiscuous mode [ 105.376134][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.093071][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.108608][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.116209][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.125955][ T4300] device bridge_slave_1 left promiscuous mode [ 106.134252][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.275324][ T4300] device bridge_slave_0 left promiscuous mode [ 106.281572][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.287116][ T4759] loop3: detected capacity change from 0 to 256 [ 106.588206][ T4300] device veth1_macvtap left promiscuous mode [ 106.620702][ T4300] device veth0_macvtap left promiscuous mode [ 106.627106][ T4300] device veth1_vlan left promiscuous mode [ 106.634693][ T4300] device veth0_vlan left promiscuous mode [ 106.960472][ T4759] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 110.338489][ T4803] QAT: failed to copy from user cfg_data. [ 111.345862][ T4809] loop0: detected capacity change from 0 to 2048 [ 111.434666][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 111.489350][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 111.568200][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.601591][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.909930][ T4300] bond0 (unregistering): Released all slaves [ 112.385487][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.551272][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.903731][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.112201][ T4825] loop3: detected capacity change from 0 to 256 [ 113.227924][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 113.251785][ T4825] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 116.284648][ T4864] QAT: failed to copy from user cfg_data. [ 118.167397][ T4867] delete_channel: no stack [ 119.004171][ T4895] loop3: detected capacity change from 0 to 256 [ 120.159267][ T4895] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 121.427498][ T4907] loop5: detected capacity change from 0 to 64 [ 122.604083][ T4907] ======================================================= [ 122.604083][ T4907] WARNING: The mand mount option has been deprecated and [ 122.604083][ T4907] and is ignored by this kernel. Remove the mand [ 122.604083][ T4907] option from the mount to silence this warning. [ 122.604083][ T4907] ======================================================= [ 122.640005][ T4907] hfs: unable to parse mount options [ 124.792671][ T4935] misc userio: The device must be registered before sending interrupts [ 124.850740][ T4933] loop5: detected capacity change from 0 to 2048 [ 127.505539][ T4961] loop0: detected capacity change from 0 to 2048 [ 127.822007][ T4972] loop1: detected capacity change from 0 to 256 [ 127.980175][ T4972] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 128.177650][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.972818][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 129.112940][ T4241] usb 5-1: config 0 has no interfaces? [ 129.283783][ T4241] usb 5-1: New USB device found, idVendor=0bda, idProduct=c82c, bcdDevice=d5.2f [ 129.307795][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.332796][ T4241] usb 5-1: Product: syz [ 129.337382][ T4241] usb 5-1: Manufacturer: syz [ 129.348040][ T4241] usb 5-1: SerialNumber: syz [ 129.370639][ T4241] usb 5-1: config 0 descriptor?? [ 129.957406][ T5003] binder: 4997:5003 ioctl 400c620e 200000000100 returned -22 [ 130.591992][ T5012] misc userio: The device must be registered before sending interrupts [ 130.896636][ T5021] netlink: 45 bytes leftover after parsing attributes in process `syz.4.156'. [ 132.614720][ T4428] usb 5-1: USB disconnect, device number 3 [ 132.755637][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759504][ T5042] loop0: detected capacity change from 0 to 256 [ 132.761995][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.229727][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 133.331375][ T5042] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 134.427508][ T5057] netlink: 'syz.5.170': attribute type 1 has an invalid length. [ 134.465522][ T5055] loop0: detected capacity change from 0 to 2048 [ 135.127616][ T4291] Bluetooth: hci5: command 0x0405 tx timeout [ 136.051569][ T5084] loop4: detected capacity change from 0 to 2048 [ 136.270442][ T5091] loop1: detected capacity change from 0 to 256 [ 136.298864][ T5090] misc userio: The device must be registered before sending interrupts [ 136.389553][ T5091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 140.537242][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 140.997672][ T5139] overlayfs: failed to set xattr on upper [ 141.016301][ T5139] overlayfs: ...falling back to index=off,metacopy=off. [ 141.103526][ T5139] overlayfs: failed to resolve './file0': -2 [ 141.252633][ T5148] syz.5.190 (5148): drop_caches: 2 [ 141.283653][ T5148] syz.5.190 (5148): drop_caches: 2 [ 141.401213][ T5151] loop0: detected capacity change from 0 to 256 [ 141.503969][ T5151] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 146.635547][ T5202] syz.5.203 (5202): drop_caches: 2 [ 146.643429][ T5202] syz.5.203 (5202): drop_caches: 2 [ 146.702143][ T5207] misc userio: The device must be registered before sending interrupts [ 147.337933][ T5217] loop0: detected capacity change from 0 to 256 [ 147.487742][ T5217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 152.006439][ T5248] loop5: detected capacity change from 0 to 2048 [ 153.201337][ T5274] syz.0.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.215531][ T5274] binder: 5266:5274 ioctl c0306201 2000000003c0 returned -14 [ 154.204354][ T5275] misc userio: The device must be registered before sending interrupts [ 154.737833][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 154.843387][ T5293] loop3: detected capacity change from 0 to 256 [ 154.881967][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.897658][ T5287] bond0: (slave rose0): Enslaving as an active interface with an up link [ 154.964912][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 154.965466][ T5293] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 157.269196][ T5311] sched: RT throttling activated [ 159.581607][ T5345] syz.4.228 (5345): drop_caches: 2 [ 159.589473][ T5345] syz.4.228 (5345): drop_caches: 2 [ 160.584201][ T5361] loop4: detected capacity change from 0 to 2048 [ 161.558754][ T5372] input: syz0 as /devices/virtual/input/input5 [ 161.750505][ T5378] loop0: detected capacity change from 0 to 256 [ 161.877044][ T5378] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 163.821222][ T5409] device vti0 entered promiscuous mode [ 164.398161][ T5379] dhcpcd-run-hook (5379) used greatest stack depth: 20776 bytes left [ 164.458245][ T5415] syz.0.241 (5415): drop_caches: 2 [ 164.463875][ T5415] syz.0.241 (5415): drop_caches: 2 [ 166.595511][ T5445] loop0: detected capacity change from 0 to 256 [ 166.722912][ T2238] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 167.308155][ T5445] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 167.605104][ T2238] usb 4-1: device descriptor read/64, error -71 [ 168.155567][ T2238] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 171.846059][ T5507] loop3: detected capacity change from 0 to 256 [ 171.942955][ T5507] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 172.248067][ T5512] loop1: detected capacity change from 0 to 64 [ 174.382266][ T5523] minix_free_block (loop1:1): bit already cleared [ 174.388847][ T5523] minix_free_block (loop1:4): bit already cleared [ 174.395333][ T5523] minix_free_block (loop1:3): bit already cleared [ 174.401836][ T5523] minix_free_block (loop1:2): bit already cleared [ 174.408344][ T5523] minix_free_block (loop1:1): bit already cleared [ 175.947230][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.956098][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 175.992967][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 176.698607][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 177.720250][ T5551] misc userio: The device must be registered before sending interrupts [ 178.677514][ T5567] loop0: detected capacity change from 0 to 256 [ 178.912413][ T5567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 180.965579][ T5584] loop1: detected capacity change from 0 to 64 [ 181.128758][ T5590] minix_free_block (loop1:1): bit already cleared [ 181.135316][ T5590] minix_free_block (loop1:4): bit already cleared [ 181.141802][ T5590] minix_free_block (loop1:3): bit already cleared [ 181.148671][ T5590] minix_free_block (loop1:2): bit already cleared [ 181.155176][ T5590] minix_free_block (loop1:1): bit already cleared [ 181.855194][ T5592] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.303940][ T5602] binder: 5598:5602 ioctl c0306201 0 returned -14 [ 183.392496][ T5600] loop4: detected capacity change from 0 to 2048 [ 184.680248][ T5626] loop3: detected capacity change from 0 to 256 [ 184.761362][ T5626] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 187.977105][ T5655] loop3: detected capacity change from 0 to 64 [ 188.704058][ T5667] minix_free_block (loop3:1): bit already cleared [ 188.710656][ T5667] minix_free_block (loop3:4): bit already cleared [ 188.717241][ T5667] minix_free_block (loop3:3): bit already cleared [ 188.723848][ T5667] minix_free_block (loop3:2): bit already cleared [ 188.730446][ T5667] minix_free_block (loop3:1): bit already cleared [ 192.226863][ T5709] loop3: detected capacity change from 0 to 64 [ 192.368551][ T5714] minix_free_block (loop3:1): bit already cleared [ 192.375192][ T5714] minix_free_block (loop3:4): bit already cleared [ 192.381634][ T5714] minix_free_block (loop3:3): bit already cleared [ 192.388145][ T5714] minix_free_block (loop3:2): bit already cleared [ 192.394629][ T5714] minix_free_block (loop3:1): bit already cleared [ 193.955643][ T5725] loop2: detected capacity change from 0 to 7 [ 194.230375][ T5725] Dev loop2: unable to read RDB block 7 [ 194.237658][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243946][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.623192][ T5483] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.925888][ T5725] loop2: unable to read partition table [ 194.931734][ T5725] loop2: partition table beyond EOD, truncated [ 195.038621][ T5725] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.473013][ T5483] usb 6-1: Using ep0 maxpacket: 8 [ 195.703371][ T5483] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 195.729094][ T5483] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.817632][ T5483] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.971617][ T5483] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.079969][ T5483] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.202900][ T5483] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.226918][ T5483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.072913][ T5483] usb 6-1: can't set config #16, error -71 [ 197.088080][ T5483] usb 6-1: USB disconnect, device number 2 [ 199.218559][ T5774] loop5: detected capacity change from 0 to 2048 [ 199.346863][ T4428] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 199.722989][ T4428] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.742796][ T4428] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.833288][ T4428] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.857105][ T4428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.880863][ T4428] usb 4-1: SerialNumber: syz [ 200.042905][ T4428] usb 4-1: can't set config #1, error -71 [ 200.059072][ T4428] usb 4-1: USB disconnect, device number 4 [ 200.959741][ T5802] fuse: Bad value for 'fd' [ 201.392914][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 211.244574][ T5894] misc userio: Invalid payload size [ 211.448137][ T5896] loop0: detected capacity change from 0 to 2048 [ 212.374650][ T5907] loop4: detected capacity change from 0 to 64 [ 212.875425][ T5910] minix_free_block (loop4:1): bit already cleared [ 212.881945][ T5910] minix_free_block (loop4:4): bit already cleared [ 212.888561][ T5910] minix_free_block (loop4:3): bit already cleared [ 212.895056][ T5910] minix_free_block (loop4:2): bit already cleared [ 212.901534][ T5910] minix_free_block (loop4:1): bit already cleared [ 218.152026][ T5965] netlink: 96 bytes leftover after parsing attributes in process `syz.1.356'. [ 218.485609][ T5962] loop4: detected capacity change from 0 to 64 [ 218.609549][ T5962] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4 [ 219.586086][ T5970] loop5: detected capacity change from 0 to 64 [ 219.784434][ T5962] loop4: detected capacity change from 0 to 1024 [ 219.853467][ T5962] hfsplus: unable to parse mount options [ 219.939936][ T5977] minix_free_block (loop5:1): bit already cleared [ 219.946581][ T5977] minix_free_block (loop5:4): bit already cleared [ 219.953202][ T5977] minix_free_block (loop5:3): bit already cleared [ 219.959758][ T5977] minix_free_block (loop5:2): bit already cleared [ 219.966395][ T5977] minix_free_block (loop5:1): bit already cleared [ 220.802856][ T5972] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 223.718992][ T6016] loop3: detected capacity change from 0 to 4096 [ 223.731080][ T6017] device vti0 entered promiscuous mode [ 223.749438][ T6028] loop5: detected capacity change from 0 to 64 [ 223.901578][ T6028] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 223.935565][ T6034] loop3: detected capacity change from 0 to 64 [ 224.156963][ T6028] loop5: detected capacity change from 0 to 1024 [ 224.565222][ T6028] hfsplus: unable to parse mount options [ 224.652641][ T6039] minix_free_block (loop3:1): bit already cleared [ 224.659168][ T6039] minix_free_block (loop3:4): bit already cleared [ 224.665599][ T6039] minix_free_block (loop3:3): bit already cleared [ 224.672019][ T6039] minix_free_block (loop3:2): bit already cleared [ 224.678625][ T6039] minix_free_block (loop3:1): bit already cleared [ 226.260292][ T6048] XFS (nullb0): Invalid superblock magic number [ 228.376548][ T6087] loop1: detected capacity change from 0 to 4096 [ 229.347580][ T6095] loop0: detected capacity change from 0 to 64 [ 229.395215][ T6095] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 229.625002][ T6095] loop0: detected capacity change from 0 to 1024 [ 229.649525][ T6095] hfsplus: unable to parse mount options [ 231.774387][ T6103] delete_channel: no stack [ 232.802831][ T5165] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 234.302853][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.743376][ T5165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.819101][ T6126] fuse: Bad value for 'fd' [ 235.029349][ T6130] netlink: zone id is out of range [ 235.092942][ T5165] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.115885][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.153910][ T5165] usb 2-1: SerialNumber: syz [ 235.351786][ T6134] loop5: detected capacity change from 0 to 4096 [ 235.354846][ T5165] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 235.442230][ T5165] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 235.480708][ T6142] loop1: detected capacity change from 0 to 2048 [ 235.503521][ T5165] usb 2-1: USB disconnect, device number 2 [ 235.623722][ T4240] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 236.124133][ T4240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.136335][ T4240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.146853][ T4240] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 236.156073][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.186441][ T4240] usb 5-1: config 0 descriptor?? [ 236.410419][ T6154] misc userio: The device must be registered before sending interrupts [ 236.703767][ T4240] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x7 [ 236.713193][ T6163] loop2: detected capacity change from 0 to 7 [ 236.734266][ T4240] hid-picolcd 0003:04D8:C002.0001: item fetching failed at offset 3/7 [ 236.758479][ T4240] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 236.761215][ T6163] Dev loop2: unable to read RDB block 7 [ 236.766427][ T4240] hid-picolcd: probe of 0003:04D8:C002.0001 failed with error -22 [ 236.772399][ T6163] loop2: AHDI p2 p3 [ 236.809697][ T6163] loop2: partition table partially beyond EOD, truncated [ 236.932863][ T6163] loop2: p3 start 335544320 is beyond EOD, truncated [ 237.185196][ T4240] usb 5-1: USB disconnect, device number 4 [ 237.764717][ T6167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 237.771268][ T6167] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 237.779113][ T6167] vhci_hcd vhci_hcd.0: Device attached [ 238.062899][ T5165] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 238.358074][ T6170] vhci_hcd: connection reset by peer [ 238.378727][ T4352] vhci_hcd: stop threads [ 238.383648][ T4352] vhci_hcd: release socket [ 238.431451][ T4352] vhci_hcd: disconnect device [ 239.223102][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 239.603097][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.830718][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.003024][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.054040][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.175036][ T13] usb 5-1: SerialNumber: syz [ 240.390510][ T13] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 240.481751][ T13] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 241.785020][ T4240] usb 5-1: USB disconnect, device number 5 [ 243.103377][ T6204] loop2: detected capacity change from 0 to 7 [ 243.663532][ T5165] vhci_hcd: vhci_device speed not set [ 243.749593][ T6204] Dev loop2: unable to read RDB block 7 [ 245.197981][ T6204] loop2: AHDI p2 p3 [ 245.201914][ T6204] loop2: partition table partially beyond EOD, truncated [ 245.238134][ T6211] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 245.244686][ T6211] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.252523][ T6211] vhci_hcd vhci_hcd.0: Device attached [ 245.259901][ T6212] vhci_hcd: connection closed [ 245.263494][ T4352] vhci_hcd: stop threads [ 245.274009][ T6204] loop2: p3 start 335544320 is beyond EOD, truncated [ 245.294066][ T4352] vhci_hcd: release socket [ 245.298602][ T4352] vhci_hcd: disconnect device [ 245.732809][ T6215] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 247.188545][ T6222] fuse: Bad value for 'fd' [ 247.399081][ T6226] loop0: detected capacity change from 0 to 2048 [ 247.596776][ T6229] misc userio: The device must be registered before sending interrupts [ 247.879321][ T6240] netlink: 96 bytes leftover after parsing attributes in process `syz.5.435'. [ 247.933108][ T6215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.947781][ T6215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.162895][ T6215] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.196335][ T6215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.222975][ T6215] usb 2-1: SerialNumber: syz [ 248.303757][ T6215] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 248.335984][ T6215] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 248.529699][ T6215] usb 2-1: USB disconnect, device number 3 [ 249.508786][ T6257] loop2: detected capacity change from 0 to 7 [ 249.565978][ T6257] Dev loop2: unable to read RDB block 7 [ 249.576356][ T6257] loop2: AHDI p2 p3 [ 249.583067][ T6257] loop2: partition table partially beyond EOD, truncated [ 249.621053][ T6257] loop2: p3 start 335544320 is beyond EOD, truncated [ 251.598351][ T6267] syz.4.443 (6267): drop_caches: 2 [ 251.605677][ T6267] syz.4.443 (6267): drop_caches: 2 [ 252.375401][ T6285] netlink: 96 bytes leftover after parsing attributes in process `syz.5.450'. [ 252.541473][ T6275] delete_channel: no stack [ 253.494194][ T6215] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 254.256128][ T4349] Bluetooth: (null): Too short H5 packet [ 254.267986][ T4349] Bluetooth: (null): Invalid header checksum [ 254.282557][ T4349] Bluetooth: (null): Invalid header checksum [ 255.377680][ T6304] loop2: detected capacity change from 0 to 7 [ 255.788693][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.795029][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.822945][ T6304] Dev loop2: unable to read RDB block 7 [ 255.831539][ T6304] loop2: AHDI p2 p3 [ 255.844746][ T6304] loop2: partition table partially beyond EOD, truncated [ 255.846961][ T4349] Bluetooth: (null): Invalid header checksum [ 255.870324][ T4349] Bluetooth: (null): Invalid header checksum [ 255.890196][ T6304] loop2: p3 start 335544320 is beyond EOD, truncated [ 255.942946][ T6215] usb 5-1: device descriptor read/all, error -71 [ 257.502500][ T6320] loop4: detected capacity change from 0 to 2048 [ 259.369380][ T6336] netlink: 96 bytes leftover after parsing attributes in process `syz.3.462'. [ 259.427797][ T6339] device vlan2 entered promiscuous mode [ 259.433585][ T6339] device bridge0 entered promiscuous mode [ 261.117352][ T6347] loop3: detected capacity change from 0 to 4096 [ 262.815267][ T6363] loop2: detected capacity change from 0 to 7 [ 262.936758][ T6363] Dev loop2: unable to read RDB block 7 [ 262.944341][ T6363] loop2: AHDI p2 p3 [ 262.964172][ T6363] loop2: partition table partially beyond EOD, [ 262.998531][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 263.228435][ T6363] truncated [ 263.293030][ T6363] loop2: p3 start 335544320 is beyond EOD, truncated [ 263.682942][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.248479][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.292861][ T7] usb 2-1: string descriptor 0 read error: -71 [ 264.299079][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.314304][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.342878][ T7] usb 2-1: can't set config #1, error -71 [ 264.354042][ T7] usb 2-1: USB disconnect, device number 4 [ 264.804558][ T6379] misc userio: The device must be registered before sending interrupts [ 266.020121][ T6377] netlink: 96 bytes leftover after parsing attributes in process `syz.4.475'. [ 266.864998][ T6396] loop4: detected capacity change from 0 to 2048 [ 267.275835][ T6404] syz.1.481 (6404): drop_caches: 2 [ 267.284726][ T6404] syz.1.481 (6404): drop_caches: 2 [ 270.845191][ T6427] loop3: detected capacity change from 0 to 64 [ 270.972921][ T6427] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 271.036322][ T6215] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 271.094848][ T6427] loop3: detected capacity change from 0 to 1024 [ 271.139527][ T6427] hfsplus: unable to parse mount options [ 271.502558][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.512875][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.303446][ T6215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.330764][ T6215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.504119][ T6215] usb 6-1: SerialNumber: syz [ 273.793748][ T6215] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 273.805250][ T6215] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 275.028303][ T4232] usb 6-1: USB disconnect, device number 3 [ 275.292405][ T6456] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 275.299055][ T6456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.307196][ T6456] vhci_hcd vhci_hcd.0: Device attached [ 275.361961][ T6457] vhci_hcd: connection closed [ 275.363104][ T144] vhci_hcd: stop threads [ 275.726112][ T144] vhci_hcd: release socket [ 275.768295][ T6460] syz.4.495 (6460): drop_caches: 2 [ 275.783910][ T144] vhci_hcd: disconnect device [ 275.799000][ T6460] syz.4.495 (6460): drop_caches: 2 [ 277.829924][ T6477] device vti0 entered promiscuous mode [ 282.914156][ T6525] loop5: detected capacity change from 0 to 64 [ 282.925915][ T6525] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 284.093958][ T6525] loop5: detected capacity change from 0 to 1024 [ 284.631466][ T6542] tipc: Can't bind to reserved service type 0 [ 284.762467][ T6544] netlink: 96 bytes leftover after parsing attributes in process `syz.1.517'. [ 285.133210][ T6525] hfsplus: unable to parse mount options [ 288.110560][ T6568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 288.117080][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.124824][ T6568] vhci_hcd vhci_hcd.0: Device attached [ 288.142804][ T4262] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 288.548585][ T6575] vhci_hcd: connection closed [ 288.556142][ T4700] vhci_hcd: stop threads [ 288.570827][ T4700] vhci_hcd: release socket [ 288.590909][ T4700] vhci_hcd: disconnect device [ 288.687054][ T4232] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 288.700893][ T4232] usb 33-1: enqueue for inactive port 0 [ 289.926422][ T4232] vhci_hcd: vhci_device speed not set [ 290.013004][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 290.122826][ T4262] usb 2-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 290.148029][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.223189][ T4262] usb 2-1: config 0 descriptor?? [ 290.947652][ T4262] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 291.286875][ T4262] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 291.355315][ T4262] ntrig 0003:1B96:0013.0002: unknown main item tag 0x0 [ 291.405128][ T4262] ntrig 0003:1B96:0013.0002: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.1-1/input0 [ 291.592920][ T4262] ntrig 0003:1B96:0013.0002: Firmware version: 7.11.24.1.3 (afae 2b18) [ 292.140044][ T7] usb 2-1: USB disconnect, device number 5 [ 293.380425][ T6611] loop1: detected capacity change from 0 to 64 [ 293.612607][ T6611] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 294.224026][ T6605] fido_id[6605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 294.244443][ T6611] loop1: detected capacity change from 0 to 1024 [ 294.305950][ T6611] hfsplus: unable to parse mount options [ 294.352063][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 294.537883][ T6623] syz.0.540 (6623): drop_caches: 2 [ 294.566866][ T6623] syz.0.540 (6623): drop_caches: 2 [ 295.944221][ T6628] loop2: detected capacity change from 0 to 7 [ 295.957408][ T6628] Dev loop2: unable to read RDB block 7 [ 295.963159][ T6628] loop2: AHDI p2 p3 [ 295.967476][ T6628] loop2: partition table partially beyond EOD, truncated [ 295.974680][ T6628] loop2: p3 start 335544320 is beyond EOD, truncated [ 297.460624][ T6646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 299.734931][ T6665] loop5: detected capacity change from 0 to 64 [ 299.877204][ T6675] device vti0 entered promiscuous mode [ 300.233855][ T6665] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 300.296010][ T6677] loop2: detected capacity change from 0 to 7 [ 300.602439][ T6677] Dev loop2: unable to read RDB block 7 [ 300.614861][ T6677] loop2: AHDI p2 p3 [ 300.627811][ T6677] loop2: partition table partially beyond EOD, truncated [ 300.649377][ T6665] loop5: detected capacity change from 0 to 1024 [ 300.652939][ T6677] loop2: p3 start 335544320 is beyond EOD, truncated [ 300.812487][ T6665] hfsplus: unable to parse mount options [ 302.612824][ T6215] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 303.842938][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.876880][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.592812][ T6215] usb 6-1: string descriptor 0 read error: -71 [ 304.693694][ T6215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.712347][ T6215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 304.793390][ T6215] usb 6-1: can't set config #1, error -71 [ 304.808115][ T6215] usb 6-1: USB disconnect, device number 4 [ 307.070611][ T6738] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 307.077349][ T6738] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 307.085067][ T6738] vhci_hcd vhci_hcd.0: Device attached [ 307.767512][ T6749] vhci_hcd: connection closed [ 307.769370][ T4300] vhci_hcd: stop threads [ 307.842748][ T4300] vhci_hcd: release socket [ 307.862589][ T4300] vhci_hcd: disconnect device [ 308.026281][ T6760] loop3: detected capacity change from 0 to 2048 [ 308.226705][ T6761] loop1: detected capacity change from 0 to 4096 [ 308.365352][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 309.593090][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.612142][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.452356][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.491971][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.572719][ T7] usb 6-1: SerialNumber: syz [ 311.112805][ T7] usb 6-1: can't set config #1, error -71 [ 311.120712][ T7] usb 6-1: USB disconnect, device number 5 [ 313.773534][ T6801] loop2: detected capacity change from 0 to 7 [ 313.948404][ T6801] Dev loop2: unable to read RDB block 7 [ 313.963746][ T6801] loop2: AHDI p2 p3 [ 313.973454][ T6801] loop2: partition table partially beyond EOD, truncated [ 313.987701][ T6801] loop2: p3 start 335544320 is beyond EOD, truncated [ 314.445778][ T6815] loop5: detected capacity change from 0 to 4096 [ 315.483433][ T4686] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 315.483523][ T6215] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 315.883214][ T6215] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.892018][ T4686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.910835][ T6215] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.921955][ T4686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.932489][ T6215] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.944082][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 315.955423][ T6215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 316.022902][ T4686] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.042313][ T4686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.063979][ T4686] usb 4-1: SerialNumber: syz [ 316.113098][ T6215] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.138825][ T6215] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.150384][ T6215] usb 6-1: Product: syz [ 316.158419][ T6215] usb 6-1: Manufacturer: syz [ 316.166953][ T4686] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 316.221213][ T4686] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 316.834264][ T4686] usb 4-1: USB disconnect, device number 5 [ 316.844755][ T6215] cdc_wdm 6-1:1.0: skipping garbage [ 316.849991][ T6215] cdc_wdm 6-1:1.0: skipping garbage [ 316.884016][ T6215] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 316.890225][ T6215] cdc_wdm 6-1:1.0: Unknown control protocol [ 317.099527][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.106106][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.172989][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 317.599724][ T6215] usb 6-1: USB disconnect, device number 6 [ 319.260550][ T6858] loop2: detected capacity change from 0 to 7 [ 320.149783][ T6858] Dev loop2: unable to read RDB block 7 [ 320.196958][ T6858] loop2: AHDI p2 p3 [ 320.217269][ T6858] loop2: partition table partially beyond EOD, truncated [ 320.232404][ T6858] loop2: p3 start 335544320 is beyond EOD, truncated [ 321.762887][ T6886] misc userio: The device must be registered before sending interrupts [ 322.039451][ T6892] loop4: detected capacity change from 0 to 4096 [ 322.051660][ T6888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 322.058289][ T6888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 322.067423][ T6888] vhci_hcd vhci_hcd.0: Device attached [ 322.080591][ T6895] vhci_hcd: connection closed [ 322.080794][ T4496] vhci_hcd: stop threads [ 322.106874][ T4496] vhci_hcd: release socket [ 322.131666][ T4496] vhci_hcd: disconnect device [ 333.639332][ T26] audit: type=1326 audit(1752904714.218:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.4.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dfe3c29a9 code=0x0 [ 333.647598][ T6987] overlayfs: unrecognized mount option "verity=on" or missing value [ 333.822760][ T6215] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 334.800028][ T6994] syz.0.643 (6994): drop_caches: 2 [ 334.809681][ T6994] syz.0.643 (6994): drop_caches: 2 [ 334.943515][ T6215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 335.486277][ T6215] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 335.526438][ T6215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 335.702752][ T6215] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 335.712538][ T6215] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 335.721986][ T6215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.732953][ T6215] usb 6-1: config 0 descriptor?? [ 335.881283][ T7006] device vti0 entered promiscuous mode [ 336.003006][ T6215] hdpvr 6-1:0.0: firmware version 0x0 dated [ 336.016929][ T6215] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 336.058647][ T7008] autofs4:pid:7008:autofs_fill_super: called with bogus options [ 336.539067][ T7013] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 336.554231][ T7013] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 337.000324][ T6215] hdpvr 6-1:0.0: Could not setup controls [ 337.109727][ T6215] hdpvr 6-1:0.0: registering videodev failed [ 337.454932][ T7020] loop3: detected capacity change from 0 to 64 [ 337.470120][ T6215] hdpvr: probe of 6-1:0.0 failed with error -71 [ 337.511307][ T6215] usb 6-1: USB disconnect, device number 7 [ 337.953570][ T7020] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 338.497736][ T7020] loop3: detected capacity change from 0 to 1024 [ 338.529061][ T7020] hfsplus: unable to parse mount options [ 340.361932][ T7035] loop0: detected capacity change from 0 to 64 [ 340.564834][ T7035] hfs: unable to parse mount options [ 341.230110][ T7050] netlink: 128 bytes leftover after parsing attributes in process `syz.5.658'. [ 341.435020][ T7059] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 342.406750][ T7069] autofs4:pid:7069:autofs_fill_super: called with bogus options [ 342.438107][ T7070] loop3: detected capacity change from 0 to 4096 [ 342.848715][ T7082] loop0: detected capacity change from 0 to 64 [ 344.104325][ T7085] lo speed is unknown, defaulting to 1000 [ 344.110396][ T7085] lo speed is unknown, defaulting to 1000 [ 344.117828][ T7085] lo speed is unknown, defaulting to 1000 [ 344.126514][ T7085] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 344.136796][ T7085] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 344.182893][ T7085] lo speed is unknown, defaulting to 1000 [ 344.189483][ T7085] lo speed is unknown, defaulting to 1000 [ 344.196068][ T7085] lo speed is unknown, defaulting to 1000 [ 344.202495][ T7085] lo speed is unknown, defaulting to 1000 [ 344.209216][ T7085] lo speed is unknown, defaulting to 1000 [ 344.505823][ T7082] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 345.574929][ T7082] loop0: detected capacity change from 0 to 1024 [ 345.665489][ T7082] hfsplus: unable to parse mount options [ 345.848369][ T7093] loop2: detected capacity change from 0 to 7 [ 346.290013][ T7093] Dev loop2: unable to read RDB block 7 [ 346.295625][ T7093] loop2: AHDI p2 p3 [ 346.299518][ T7093] loop2: partition table partially beyond EOD, truncated [ 346.306967][ T7093] loop2: p3 start 335544320 is beyond EOD, truncated [ 347.328590][ T7111] netlink: 'syz.1.675': attribute type 3 has an invalid length. [ 349.500191][ T7124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 349.506734][ T7124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.514616][ T7124] vhci_hcd vhci_hcd.0: Device attached [ 349.579989][ T7125] vhci_hcd: connection closed [ 349.580785][ T4300] vhci_hcd: stop threads [ 349.590377][ T4300] vhci_hcd: release socket [ 349.712976][ T4300] vhci_hcd: disconnect device [ 349.764574][ T13] vhci_hcd: vhci_device speed not set [ 350.985197][ T7141] loop2: detected capacity change from 0 to 7 [ 351.008318][ T7141] Dev loop2: unable to read RDB block 7 [ 351.019237][ T7141] loop2: AHDI p2 p3 [ 351.024087][ T7141] loop2: partition table partially beyond EOD, truncated [ 351.032405][ T7141] loop2: p3 start 335544320 is beyond EOD, truncated [ 351.343150][ T7156] syz.3.688 (7156): drop_caches: 2 [ 351.350808][ T7156] syz.3.688 (7156): drop_caches: 2 [ 352.653360][ T7162] fuse: Bad value for 'fd' [ 352.689653][ T7166] ax25_connect(): syz.5.691 uses autobind, please contact jreuter@yaina.de [ 352.732814][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 355.011256][ T7190] loop2: detected capacity change from 0 to 7 [ 355.486120][ T7190] Dev loop2: unable to read RDB block 7 [ 355.519909][ T7190] loop2: AHDI p2 p3 [ 355.524468][ T7190] loop2: partition table partially beyond EOD, truncated [ 355.559992][ T7190] loop2: p3 start 335544320 is beyond EOD, truncated [ 356.019476][ T7199] delete_channel: no stack [ 357.892818][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 358.154056][ T13] usb 4-1: device descriptor read/64, error -71 [ 358.441269][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 358.933230][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.162761][ T13] usb 4-1: device descriptor read/64, error -71 [ 359.169403][ T7244] loop2: detected capacity change from 0 to 7 [ 359.194815][ T4198] Dev loop2: unable to read RDB block 7 [ 359.214312][ T4198] loop2: AHDI p2 p3 [ 359.241827][ T4198] loop2: partition table partially beyond EOD, truncated [ 359.266100][ T4198] loop2: p3 start 335544320 is beyond EOD, truncated [ 359.278142][ T7244] Dev loop2: unable to read RDB block 7 [ 359.286491][ T13] usb usb4-port1: attempt power cycle [ 359.319681][ T7244] loop2: AHDI p2 p3 [ 359.324199][ T7244] loop2: partition table partially beyond EOD, truncated [ 359.338552][ T7244] loop2: p3 start 335544320 is beyond EOD, truncated [ 360.013077][ T21] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 360.582761][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.602936][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.636338][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.733690][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.813716][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.832959][ T21] usb 2-1: SerialNumber: syz [ 360.842959][ T13] usb 4-1: device not accepting address 8, error -71 [ 360.911044][ T21] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 360.989946][ T21] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 361.182909][ T4232] usb 2-1: USB disconnect, device number 6 [ 361.249320][ T26] audit: type=1326 audit(1752904741.828:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f888f2499a9 code=0x0 [ 363.577325][ T7273] block nbd4: shutting down sockets [ 365.276669][ T7292] loop5: detected capacity change from 0 to 64 [ 365.356364][ T7292] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 365.662544][ T7292] loop5: detected capacity change from 0 to 1024 [ 366.126790][ T7292] hfsplus: unable to parse mount options [ 366.608805][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 366.723790][ T7309] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.801255][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'. [ 369.770770][ T7336] loop4: detected capacity change from 0 to 64 [ 369.838197][ T7336] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4 [ 370.495334][ T7336] loop4: detected capacity change from 0 to 1024 [ 370.546286][ T7336] hfsplus: unable to parse mount options [ 370.795513][ T7328] JFS: discard option not supported on device [ 370.808804][ T7344] loop0: detected capacity change from 0 to 4096 [ 370.852791][ T7328] Mount JFS Failure: -22 [ 371.093750][ T7328] jfs_mount failed w/return code = -22 [ 371.168123][ T7352] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 371.174651][ T7352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.183126][ T7353] autofs4:pid:7353:autofs_fill_super: called with bogus options [ 371.195681][ T7352] vhci_hcd vhci_hcd.0: Device attached [ 371.332569][ T7355] vhci_hcd: connection closed [ 371.333680][ T4303] vhci_hcd: stop threads [ 371.343625][ T4303] vhci_hcd: release socket [ 371.360081][ T4303] vhci_hcd: disconnect device [ 371.799670][ T4232] vhci_hcd: vhci_device speed not set [ 372.023559][ T7372] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 373.402433][ T7378] delete_channel: no stack [ 375.195105][ T7395] loop5: detected capacity change from 0 to 64 [ 375.333972][ T7395] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5 [ 375.879004][ T7395] loop5: detected capacity change from 0 to 1024 [ 376.020546][ T7395] hfsplus: unable to parse mount options [ 376.613007][ T7415] device vti1 entered promiscuous mode [ 376.952085][ T7410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 376.958718][ T7410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.959776][ T4232] Bluetooth: hci5: command 0x0405 tx timeout [ 376.974893][ T7410] vhci_hcd vhci_hcd.0: Device attached [ 377.040866][ T7414] vhci_hcd: connection closed [ 377.042246][ T4496] vhci_hcd: stop threads [ 377.052365][ T4496] vhci_hcd: release socket [ 377.075844][ T4496] vhci_hcd: disconnect device [ 377.783117][ T7420] delete_channel: no stack [ 377.812465][ T7421] autofs4:pid:7421:autofs_fill_super: called with bogus options [ 378.505462][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514908][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.306710][ T7441] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 381.852812][ T5165] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 382.173022][ T5165] usb 1-1: Using ep0 maxpacket: 16 [ 382.583012][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.616353][ T7457] delete_channel: no stack [ 382.620929][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.644763][ T5165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.718678][ T5165] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.755654][ T5165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.805304][ T5165] usb 1-1: config 0 descriptor?? [ 383.122917][ T7468] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 383.129601][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.237643][ T7468] vhci_hcd vhci_hcd.0: Device attached [ 383.286330][ T7469] vhci_hcd: connection closed [ 383.288437][ T4300] vhci_hcd: stop threads [ 383.325787][ T5165] HID 045e:07da: Invalid code 65791 type 1 [ 383.329555][ T4300] vhci_hcd: release socket [ 383.341892][ T4300] vhci_hcd: disconnect device [ 383.356034][ T5165] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input9 [ 383.443507][ T5165] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 383.584309][ T5165] usb 1-1: USB disconnect, device number 2 [ 383.753441][ T7476] fido_id[7476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 385.619344][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 386.923719][ T7498] autofs4:pid:7498:autofs_fill_super: called with bogus options [ 387.032561][ T7507] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 387.145130][ T7511] loop1: detected capacity change from 0 to 64 [ 387.211112][ T7511] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 387.304393][ T7511] loop1: detected capacity change from 0 to 1024 [ 387.383446][ T7511] hfsplus: unable to parse mount options [ 387.493259][ T7515] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 387.499798][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 387.510510][ T7515] vhci_hcd vhci_hcd.0: Device attached [ 387.537550][ T7516] vhci_hcd: connection closed [ 387.538850][ T4260] vhci_hcd: stop threads [ 387.553916][ T4260] vhci_hcd: release socket [ 387.563086][ T4260] vhci_hcd: disconnect device [ 392.910244][ T7556] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 392.916791][ T7556] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.986828][ T7556] vhci_hcd vhci_hcd.0: Device attached [ 392.996958][ T7564] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.024362][ T7557] vhci_hcd: connection closed [ 393.024680][ T4260] vhci_hcd: stop threads [ 393.059034][ T4260] vhci_hcd: release socket [ 393.076864][ T4260] vhci_hcd: disconnect device [ 394.591150][ T7572] [ 394.599037][ T7572] ============================= [ 394.620860][ T7572] WARNING: suspicious RCU usage [ 394.627875][ T7572] 5.15.189-syzkaller #0 Not tainted [ 394.633366][ T7572] ----------------------------- [ 394.638225][ T7572] include/linux/kvm_host.h:889 suspicious rcu_dereference_check() usage! [ 394.651310][ T7572] [ 394.651310][ T7572] other info that might help us debug this: [ 394.651310][ T7572] [ 394.664255][ T7572] [ 394.664255][ T7572] rcu_scheduler_active = 2, debug_locks = 1 [ 394.673474][ T7572] 1 lock held by syz.5.812/7572: [ 394.687658][ T7572] #0: ffff88807bb540c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1c8/0xb80 [ 394.771396][ T7572] [ 394.771396][ T7572] stack backtrace: [ 395.171609][ T7572] CPU: 1 PID: 7572 Comm: syz.5.812 Not tainted 5.15.189-syzkaller #0 [ 395.179715][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.189770][ T7572] Call Trace: [ 395.193047][ T7572] [ 395.195994][ T7572] dump_stack_lvl+0x168/0x230 [ 395.200670][ T7572] ? load_image+0x3b0/0x3b0 [ 395.205175][ T7572] ? show_regs_print_info+0x20/0x20 [ 395.210382][ T7572] ? lockdep_rcu_suspicious+0x110/0x180 [ 395.215940][ T7572] kvm_vcpu_memslots+0x1b6/0x200 [ 395.220872][ T7572] kvm_vcpu_gfn_to_memslot+0x2b/0x3c0 [ 395.226238][ T7572] ? sync_vmcs02_to_vmcs12+0xd33/0x19a0 [ 395.231809][ T7572] kvm_vcpu_unmap+0x5b/0x80 [ 395.236333][ T7572] nested_vmx_vmexit+0x13f5/0x28d0 [ 395.241440][ T7572] ? nested_mark_vmcs12_pages_dirty+0x290/0x290 [ 395.247671][ T7572] ? __might_fault+0xb7/0x110 [ 395.252338][ T7572] ? __lock_acquire+0x7c60/0x7c60 [ 395.257353][ T7572] vmx_leave_nested+0x7e/0xc0 [ 395.262144][ T7572] kvm_vcpu_ioctl_x86_set_vcpu_events+0x95b/0x1190 [ 395.268667][ T7572] kvm_arch_vcpu_ioctl+0x1092/0x19d0 [ 395.274095][ T7572] ? kvm_arch_vcpu_put+0x840/0x840 [ 395.279265][ T7572] ? is_bpf_text_address+0x254/0x270 [ 395.284559][ T7572] ? __kernel_text_address+0x9a/0x100 [ 395.289923][ T7572] ? mark_lock+0x94/0x320 [ 395.294327][ T7572] ? __lock_acquire+0x13ad/0x7c60 [ 395.299456][ T7572] ? kfree+0xef/0x2a0 [ 395.303451][ T7572] ? __se_sys_ioctl+0x48/0x170 [ 395.308225][ T7572] ? kfree+0xef/0x2a0 [ 395.312289][ T7572] ? kasan_set_track+0x62/0x70 [ 395.317037][ T7572] ? kasan_set_track+0x4b/0x70 [ 395.321791][ T7572] ? kasan_set_free_info+0x1f/0x40 [ 395.326902][ T7572] ? verify_lock_unused+0x140/0x140 [ 395.332107][ T7572] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 395.337739][ T7572] ? __mutex_trylock_common+0x14f/0x250 [ 395.343270][ T7572] ? rcu_lock_release+0x20/0x20 [ 395.348108][ T7572] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 395.353729][ T7572] ? rcu_lock_release+0x5/0x20 [ 395.358482][ T7572] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 395.363435][ T7572] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 395.368284][ T7572] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 395.373135][ T7572] ? __mutex_lock_common+0x431/0x2390 [ 395.378505][ T7572] ? kfree+0xef/0x2a0 [ 395.382488][ T7572] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 395.388108][ T7572] ? verify_lock_unused+0x140/0x140 [ 395.393297][ T7572] ? mutex_lock_io_nested+0x60/0x60 [ 395.398487][ T7572] kvm_vcpu_ioctl+0x6b1/0xb80 [ 395.403154][ T7572] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 395.408786][ T7572] ? bpf_lsm_file_ioctl+0x5/0x10 [ 395.413702][ T7572] ? security_file_ioctl+0x7c/0xa0 [ 395.418794][ T7572] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 395.424411][ T7572] __se_sys_ioctl+0xfa/0x170 [ 395.429002][ T7572] do_syscall_64+0x4c/0xa0 [ 395.433400][ T7572] ? clear_bhb_loop+0x30/0x80 [ 395.438055][ T7572] ? clear_bhb_loop+0x30/0x80 [ 395.442716][ T7572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.448609][ T7572] RIP: 0033:0x7f9d2cdff9a9 [ 395.453174][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.473001][ T7572] RSP: 002b:00007f9d2ac67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.481517][ T7572] RAX: ffffffffffffffda RBX: 00007f9d2d026fa0 RCX: 00007f9d2cdff9a9 [ 395.489480][ T7572] RDX: 0000200000000080 RSI: 000000004040aea0 RDI: 0000000000000005 [ 395.497441][ T7572] RBP: 00007f9d2ce81d69 R08: 0000000000000000 R09: 0000000000000000 [ 395.505402][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.513365][ T7572] R13: 0000000000000000 R14: 00007f9d2d026fa0 R15: 00007ffde3754878 [ 395.521333][ T7572]