last executing test programs: 6.59951922s ago: executing program 4 (id=407): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) syz_emit_ethernet(0x14a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r5, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x4040800, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"}) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pipe(0x0) getpid() r9 = socket(0x10, 0x80003, 0x6) close(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 5.307103546s ago: executing program 3 (id=412): socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7200000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 5.189410686s ago: executing program 1 (id=414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000315"], 0x0, 0x0, 0x0}, 0x0) 5.12742304s ago: executing program 3 (id=415): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 3.709817057s ago: executing program 2 (id=422): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000ac0)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0}) 3.535331761s ago: executing program 2 (id=423): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.431487929s ago: executing program 2 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581032000000000090582020800000000090503"], 0x0) 3.315033339s ago: executing program 4 (id=425): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 3.268210283s ago: executing program 3 (id=426): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x90) listen(0xffffffffffffffff, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe3}], 0x6, 0x0, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x10) 3.231829456s ago: executing program 4 (id=427): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYRES32], 0x64}}, 0x0) 3.083121818s ago: executing program 4 (id=428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.739024906s ago: executing program 0 (id=429): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@u}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)={'sit0\x00', 0x0}) 2.526457253s ago: executing program 1 (id=430): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000002180)={"dbb741496cf081473c63141d5d45880c94970f2f6bdb5c5f2fc394fcf0ab5603", 0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0xb99f000) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f00000000c0), &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000740)=0x205, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb802, 0x0, "ec28a144f13d0700"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0) fstat(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) poll(&(0x7f0000004200)=[{}, {r3}], 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c8a12000000000000004084000000101d600400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001200ffffffff"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 2.311487251s ago: executing program 1 (id=431): r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 2.19795125s ago: executing program 1 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0xc}}}, 0x32) 2.186024311s ago: executing program 4 (id=433): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r3, 0x40047435, 0x0) 2.065516871s ago: executing program 0 (id=434): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000ac0)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0}) 1.942421441s ago: executing program 0 (id=435): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4], 0x64}}, 0x0) 1.800023113s ago: executing program 2 (id=436): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000004c0)="0f01c80f320f20e035010000000f4522e0e0c738f3afb8901e00000f23d80f21f835000000500f23f8c447c279478e8d80574320432000c74ccc00000d49f605bb0066ba4100ed", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.687359792s ago: executing program 0 (id=437): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x6}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setregid(0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x24}}, 0x0) 1.499775568s ago: executing program 2 (id=438): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 1.399701226s ago: executing program 1 (id=439): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40485404, 0x0) 1.261492837s ago: executing program 1 (id=440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "9df9"}]}}, 0x0}, 0x0) 1.095764301s ago: executing program 4 (id=441): r0 = socket(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3}, 0x48) select(0x40, &(0x7f0000000340)={0x1f}, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0xfff5, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x18, 0x0, 0x20000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.083053021s ago: executing program 3 (id=442): r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 970.058591ms ago: executing program 3 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 744.712079ms ago: executing program 0 (id=444): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 467.455052ms ago: executing program 0 (id=445): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000010280)='net/fib_trie\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) mq_notify(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x7d, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) 33.883238ms ago: executing program 3 (id=446): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)=0x5) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getpid() ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 0s ago: executing program 2 (id=447): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 50.097786][ T3624] cgroup: Unknown subsys name 'net' [ 50.235375][ T3624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.484194][ T3624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.680695][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.691099][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.699016][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.699838][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.707580][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.714631][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.721904][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.729275][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.736030][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.742544][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.750494][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.756479][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.763136][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.777597][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.779173][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.785635][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.793372][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.799043][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.806124][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.813469][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.820946][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.827637][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.833980][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.840946][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.848242][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.854608][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.862010][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.868413][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.882517][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.890523][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.279799][ T3637] chnl_net:caif_netlink_parms(): no params data found [ 53.349579][ T3635] chnl_net:caif_netlink_parms(): no params data found [ 53.411393][ T3636] chnl_net:caif_netlink_parms(): no params data found [ 53.429547][ T3647] chnl_net:caif_netlink_parms(): no params data found [ 53.509399][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.517669][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.526207][ T3637] device bridge_slave_0 entered promiscuous mode [ 53.537496][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.544979][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.553023][ T3637] device bridge_slave_1 entered promiscuous mode [ 53.578454][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.585598][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.593650][ T3635] device bridge_slave_0 entered promiscuous mode [ 53.619719][ T3644] chnl_net:caif_netlink_parms(): no params data found [ 53.629699][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.636915][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.644710][ T3635] device bridge_slave_1 entered promiscuous mode [ 53.682879][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.690027][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.697813][ T3647] device bridge_slave_0 entered promiscuous mode [ 53.720116][ T3637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.731955][ T3637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.753191][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.760465][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.768137][ T3647] device bridge_slave_1 entered promiscuous mode [ 53.792081][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.799177][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.807183][ T3636] device bridge_slave_0 entered promiscuous mode [ 53.835115][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.844879][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.852506][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.860126][ T3636] device bridge_slave_1 entered promiscuous mode [ 53.868845][ T3637] team0: Port device team_slave_0 added [ 53.887391][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.904743][ T3637] team0: Port device team_slave_1 added [ 53.915627][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.950841][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.968060][ T3636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.002328][ T3635] team0: Port device team_slave_0 added [ 54.018234][ T3636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.028168][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.035367][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.061301][ T3637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.080493][ T3635] team0: Port device team_slave_1 added [ 54.088371][ T3647] team0: Port device team_slave_0 added [ 54.102642][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.109592][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.135778][ T3637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.148706][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.155862][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.163941][ T3644] device bridge_slave_0 entered promiscuous mode [ 54.178484][ T3647] team0: Port device team_slave_1 added [ 54.197913][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.206886][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.216138][ T3644] device bridge_slave_1 entered promiscuous mode [ 54.246310][ T3636] team0: Port device team_slave_0 added [ 54.270676][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.277636][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.303613][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.324155][ T3636] team0: Port device team_slave_1 added [ 54.330639][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.337589][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.363846][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.383000][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.392735][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.399681][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.426372][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.444033][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.451178][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.477282][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.500187][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.513456][ T3637] device hsr_slave_0 entered promiscuous mode [ 54.520087][ T3637] device hsr_slave_1 entered promiscuous mode [ 54.583167][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.590139][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.616335][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.636194][ T3635] device hsr_slave_0 entered promiscuous mode [ 54.646265][ T3635] device hsr_slave_1 entered promiscuous mode [ 54.652991][ T3635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.663763][ T3635] Cannot create hsr debugfs directory [ 54.671607][ T3644] team0: Port device team_slave_0 added [ 54.677824][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.685019][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.710945][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.732445][ T3647] device hsr_slave_0 entered promiscuous mode [ 54.739402][ T3647] device hsr_slave_1 entered promiscuous mode [ 54.745956][ T3647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.753659][ T3647] Cannot create hsr debugfs directory [ 54.769361][ T3644] team0: Port device team_slave_1 added [ 54.846351][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.853376][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.879410][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.894780][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.904805][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.931164][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.960812][ T3651] Bluetooth: hci1: command tx timeout [ 54.960822][ T3649] Bluetooth: hci4: command tx timeout [ 54.961011][ T3649] Bluetooth: hci3: command tx timeout [ 54.966392][ T3651] Bluetooth: hci0: command tx timeout [ 54.972015][ T3649] Bluetooth: hci2: command tx timeout [ 55.002950][ T3636] device hsr_slave_0 entered promiscuous mode [ 55.010072][ T3636] device hsr_slave_1 entered promiscuous mode [ 55.017032][ T3636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.024782][ T3636] Cannot create hsr debugfs directory [ 55.099562][ T3644] device hsr_slave_0 entered promiscuous mode [ 55.106505][ T3644] device hsr_slave_1 entered promiscuous mode [ 55.114249][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.121959][ T3644] Cannot create hsr debugfs directory [ 55.316600][ T3637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.336182][ T3637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.355389][ T3637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.374606][ T3637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.417795][ T3635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.436096][ T3635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.451509][ T3635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.466186][ T3635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.514448][ T3647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.524725][ T3647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.553839][ T3647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.563774][ T3647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.621157][ T3644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.633621][ T3644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.645562][ T3644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.654300][ T3644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.693006][ T3637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.739193][ T3636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.771886][ T3637] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.793407][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.801059][ T3636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.811979][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.820107][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.843056][ T3636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.852532][ T3636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.862452][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.872009][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.881242][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.888425][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.896983][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.905884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.914781][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.921858][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.929494][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.938488][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.955861][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.976646][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.984913][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.994649][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.003676][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.012626][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.022570][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.055797][ T3647] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.074931][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.084396][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.092350][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.100028][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.107727][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.116031][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.124940][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.133647][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.142161][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.149215][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.160579][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.174876][ T3637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.186629][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.203724][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.211956][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.222023][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.230983][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.238120][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.245921][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.255110][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.290359][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.298303][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.315114][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.324336][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.331444][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.339106][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.348305][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.357128][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.365554][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.372620][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.380134][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.388883][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.397336][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.406299][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.414848][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.423596][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.432450][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.457549][ T3644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.478144][ T3647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.497823][ T3647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.510576][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.519057][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.527527][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.536543][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.545271][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.554254][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.563263][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.572212][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.580923][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.589163][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.597647][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.605954][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.617722][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.625548][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.634233][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.671417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.679420][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.703000][ T3644] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.716165][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.724955][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.738793][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.758460][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.785706][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.811062][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.821330][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.828464][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.851212][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.859931][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.880871][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.887973][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.927093][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.941850][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.951590][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.971496][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.982973][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.991947][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.000998][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.019113][ T3644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.031473][ T3644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.041546][ T3649] Bluetooth: hci2: command tx timeout [ 57.045599][ T3638] Bluetooth: hci0: command tx timeout [ 57.047169][ T3649] Bluetooth: hci3: command tx timeout [ 57.052595][ T3651] Bluetooth: hci1: command tx timeout [ 57.052639][ T3651] Bluetooth: hci4: command tx timeout [ 57.072612][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.090973][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.099426][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.122145][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.134620][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.157109][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.166183][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.179823][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.187858][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.199092][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.206800][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.217877][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.256023][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.271711][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.291072][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.299550][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.306684][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.342691][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.363640][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.373002][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.382488][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.391137][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.398221][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.405936][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.414739][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.422371][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.429770][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.438432][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.467189][ T3647] device veth0_vlan entered promiscuous mode [ 57.477849][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.492868][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.507131][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.516928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.532770][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.546007][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.555745][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.568804][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.577312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.587533][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.607134][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.616557][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.627246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.636505][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.655136][ T3636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.666186][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.686510][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.694897][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.716855][ T3647] device veth1_vlan entered promiscuous mode [ 57.735544][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.750925][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.759606][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.767822][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.790161][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.798490][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.810368][ T3635] device veth0_vlan entered promiscuous mode [ 57.827296][ T3635] device veth1_vlan entered promiscuous mode [ 57.848669][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.857222][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.865750][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.873749][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.882219][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.891170][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.898931][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.913234][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.934517][ T3637] device veth0_vlan entered promiscuous mode [ 57.958130][ T3647] device veth0_macvtap entered promiscuous mode [ 57.984133][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.992484][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.010983][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.024627][ T3637] device veth1_vlan entered promiscuous mode [ 58.038921][ T3647] device veth1_macvtap entered promiscuous mode [ 58.061548][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.069985][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.078547][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.098608][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.109627][ T3635] device veth0_macvtap entered promiscuous mode [ 58.117436][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.125762][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.134787][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.143379][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.151878][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.160465][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.167858][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.176281][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.203605][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.213750][ T3635] device veth1_macvtap entered promiscuous mode [ 58.226454][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.235235][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.244780][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.253878][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.262588][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.281823][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.290022][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.306380][ T3644] device veth0_vlan entered promiscuous mode [ 58.315731][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.324848][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.336569][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.345569][ T3647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.356842][ T3647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.366454][ T3647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.377536][ T3647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.391995][ T3644] device veth1_vlan entered promiscuous mode [ 58.406517][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.414489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.425928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.437417][ T3637] device veth0_macvtap entered promiscuous mode [ 58.458674][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.469696][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.482083][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.493032][ T3637] device veth1_macvtap entered promiscuous mode [ 58.505091][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.516294][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.524454][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.533007][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.541691][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.552807][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.572366][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.584949][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.619218][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.628173][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.639534][ T3635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.650896][ T3635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.659590][ T3635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.668464][ T3635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.697894][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.708909][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.722933][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.734330][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.745669][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.754374][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.764054][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.778226][ T3644] device veth0_macvtap entered promiscuous mode [ 58.788663][ T3644] device veth1_macvtap entered promiscuous mode [ 58.815210][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.824856][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.835381][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.844465][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.854725][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.868861][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.880953][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.891488][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.901950][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.915549][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.938673][ T3637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.948127][ T3637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.960031][ T3637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.969864][ T3637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.982719][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.991026][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.999457][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.018719][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.027040][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.033449][ T3636] device veth0_vlan entered promiscuous mode [ 59.052939][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.064636][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.073462][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.088257][ T3636] device veth1_vlan entered promiscuous mode [ 59.107565][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.118560][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.127082][ T3638] Bluetooth: hci3: command tx timeout [ 59.131634][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.134020][ T3649] Bluetooth: hci0: command tx timeout [ 59.144258][ T3642] Bluetooth: hci4: command tx timeout [ 59.149784][ T3638] Bluetooth: hci1: command tx timeout [ 59.156953][ T3651] Bluetooth: hci2: command tx timeout [ 59.162842][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.175751][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.186197][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.197491][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.208520][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.216885][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.224970][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.233382][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.242399][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.291157][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.308699][ T3636] device veth0_macvtap entered promiscuous mode [ 59.318111][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.329040][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.332749][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.349686][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.349833][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.360963][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.381346][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.391627][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.404321][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.415650][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.426786][ T3644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.435713][ T3644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.444811][ T3644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.454834][ T3644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.466684][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.475020][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.483194][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.491352][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.499756][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.508536][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.517221][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.527191][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.548125][ T3636] device veth1_macvtap entered promiscuous mode [ 59.676409][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.701194][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.713422][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.724541][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.735478][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.750994][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.766602][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.777776][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.794615][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.822572][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.852688][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.857138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.862102][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.868662][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.889283][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.912460][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.925437][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.943821][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.954798][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.968446][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.980394][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.991835][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.006158][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.021709][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.029686][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.068449][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.089617][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.104765][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.116230][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.133442][ T3636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.142581][ T3636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151693][ T3636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.161502][ T3636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.196553][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.213599][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.230769][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.233115][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.252108][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.325371][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.357953][ T3722] tipc: Started in network mode [ 60.368442][ T3722] tipc: Node identity aaa102ef0e43, cluster identity 4711 [ 60.376591][ T3722] tipc: Enabled bearer , priority 10 [ 60.410843][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.418834][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.456340][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.469606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.502161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.569417][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.580472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.593838][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.615295][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.707368][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.748052][ T27] audit: type=1326 audit(1721984925.475:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3728 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 60.827647][ T3730] fuse: Bad value for 'fd' [ 61.030107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 61.038685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.260461][ T3638] Bluetooth: hci4: command tx timeout [ 61.267120][ T3684] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.275257][ T3638] Bluetooth: hci2: command tx timeout [ 61.303517][ T3638] Bluetooth: hci1: command tx timeout [ 61.310108][ T3638] Bluetooth: hci0: command tx timeout [ 61.338340][ T3638] Bluetooth: hci3: command tx timeout [ 61.420422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.790176][ T22] tipc: Node number set to 2766275311 [ 62.021355][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 62.250656][ T3681] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.300775][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.375687][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.508948][ T3684] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.637384][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.871278][ T3684] usb 3-1: config 0 descriptor?? [ 63.255820][ T3681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 63.276029][ T3681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 63.470647][ T3681] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 63.476260][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.490846][ T3684] usbhid 3-1:0.0: can't add hid device: -32 [ 63.497455][ T3684] usbhid: probe of 3-1:0.0 failed with error -32 [ 63.497459][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.534732][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.550350][ T3681] usb 2-1: Product: syz [ 63.560926][ T3681] usb 2-1: Manufacturer: syz [ 63.575902][ T3681] usb 2-1: SerialNumber: syz [ 63.617927][ T3681] usb 2-1: config 0 descriptor?? [ 63.651057][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.665291][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.914064][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.925463][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.050411][ T3684] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.150303][ T3682] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.350381][ T3684] usb 4-1: device descriptor read/64, error -71 [ 64.600703][ T3682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.630363][ T3684] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.666656][ T3682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.840605][ T3684] usb 4-1: device descriptor read/64, error -71 [ 64.931117][ T3682] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.961945][ T3684] usb usb4-port1: attempt power cycle [ 64.978374][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.019600][ T3681] dm9601: No valid MAC address in EEPROM, using e6:f8:5a:66:e4:73 [ 65.104743][ T27] audit: type=1326 audit(1721984929.855:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3777 comm="syz.2.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f97b77299 code=0x0 [ 65.117725][ T3682] usb 1-1: Product: syz [ 65.130613][ T3682] usb 1-1: Manufacturer: syz [ 65.147393][ T3682] usb 1-1: SerialNumber: syz [ 65.186230][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 65.189210][ T946] usb 3-1: USB disconnect, device number 2 [ 65.202266][ T3682] usb 1-1: selecting invalid altsetting 1 [ 65.216813][ T3781] fuse: Bad value for 'fd' [ 65.313479][ T3681] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 65.400415][ T3684] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.522680][ T3684] usb 4-1: device descriptor read/8, error -71 [ 65.800484][ T3684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.925230][ T3684] usb 4-1: device descriptor read/8, error -71 [ 66.071535][ T3684] usb usb4-port1: unable to enumerate USB device [ 66.161401][ T3681] usb 2-1: USB disconnect, device number 2 [ 66.242717][ T3792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23'. [ 66.375187][ T3682] cdc_ncm 1-1:1.0: bind() failure [ 66.388078][ T3682] usb 1-1: USB disconnect, device number 2 [ 67.441746][ T3803] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.101600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.306397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.570547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.743249][ T27] audit: type=1326 audit(1721985189.495:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3822 comm="syz.4.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 68.844959][ T3831] fuse: Bad value for 'fd' [ 69.427656][ T3817] dccp_close: ABORT with 374 bytes unread [ 69.546481][ T3682] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.561468][ T3834] kvm: emulating exchange as write [ 69.737624][ T3841] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'. [ 70.163369][ T3848] loop3: detected capacity change from 0 to 128 [ 70.737816][ T3848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.747649][ T3848] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 70.871797][ T3681] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.954703][ T3682] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 70.964667][ T3682] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 71.019648][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 71.180331][ T3681] usb 5-1: device descriptor read/64, error -71 [ 71.213444][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219933][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.787986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.841380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.100483][ T3682] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 72.139341][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.169231][ T3682] usb 1-1: Product: syz [ 72.180479][ T3681] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.191445][ T3682] usb 1-1: Manufacturer: syz [ 72.209015][ T3682] usb 1-1: config 0 descriptor?? [ 72.246119][ T3682] usb 1-1: can't set config #0, error -71 [ 72.280931][ T3682] usb 1-1: USB disconnect, device number 3 [ 72.400337][ T3681] usb 5-1: device descriptor read/64, error -71 [ 72.520466][ T3681] usb usb5-port1: attempt power cycle [ 72.967873][ T27] audit: type=1326 audit(1721985449.718:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.4.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 73.068993][ T3881] fuse: Bad value for 'fd' [ 73.850739][ T3879] dccp_close: ABORT with 374 bytes unread [ 73.994300][ T3902] loop1: detected capacity change from 0 to 128 [ 74.458538][ T3902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.472620][ T3902] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 75.012723][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 75.089532][ T3913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.57'. [ 75.110515][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.320532][ T3683] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.400461][ T3681] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.470374][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.490306][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.660302][ T3681] usb 2-1: Using ep0 maxpacket: 8 [ 75.673305][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.683266][ T3683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 75.699646][ T3683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 75.709573][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.730416][ T22] usb 1-1: Product: syz [ 75.734604][ T22] usb 1-1: Manufacturer: syz [ 75.739206][ T22] usb 1-1: SerialNumber: syz [ 75.781917][ T22] usb 1-1: selecting invalid altsetting 1 [ 75.790506][ T3681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.810438][ T3681] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.900465][ T3683] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 75.909555][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.927972][ T3681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 75.931660][ T3683] usb 5-1: Product: syz [ 75.937455][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.947579][ T3683] usb 5-1: Manufacturer: syz [ 75.950328][ T3681] usb 2-1: SerialNumber: syz [ 75.954053][ T27] audit: type=1326 audit(1721985452.698:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3933 comm="syz.3.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 75.990497][ T22] cdc_ncm 1-1:1.0: bind() failure [ 76.003058][ T3683] usb 5-1: SerialNumber: syz [ 76.011636][ T22] usb 1-1: USB disconnect, device number 4 [ 76.011724][ T3681] usb 2-1: bad CDC descriptors [ 76.019885][ T3683] usb 5-1: config 0 descriptor?? [ 76.030984][ T3681] usb-storage 2-1:1.0: USB Mass Storage device detected [ 76.040666][ T3911] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.055277][ T3935] fuse: Bad value for 'fd' [ 76.055612][ T3911] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.072517][ T3681] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 76.241179][ T3681] usb 2-1: USB disconnect, device number 3 [ 76.288064][ T3911] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.300459][ T3911] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.332653][ T152] cfg80211: failed to load regulatory.db [ 76.760496][ T3683] dm9601: No valid MAC address in EEPROM, using e6:f8:5a:66:e4:73 [ 77.311193][ T3954] loop3: detected capacity change from 0 to 128 [ 77.635635][ T3938] dccp_close: ABORT with 374 bytes unread [ 77.660616][ T3683] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 77.688832][ T3954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.701383][ T3954] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 77.749280][ T3683] usb 5-1: USB disconnect, device number 5 [ 77.896264][ T3963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.70'. [ 77.896667][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 77.991001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.967773][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 79.256178][ T27] audit: type=1326 audit(1721985712.006:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3985 comm="syz.3.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 79.353916][ T3996] fuse: Bad value for 'fd' [ 79.550333][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.790966][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 79.983636][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.994120][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.416823][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 80.556542][ T3990] dccp_close: ABORT with 374 bytes unread [ 80.611557][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.816067][ T22] usb 5-1: SerialNumber: syz [ 80.885537][ T4012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 81.031084][ T22] usb 5-1: bad CDC descriptors [ 81.037008][ T22] usb-storage 5-1:1.0: USB Mass Storage device detected [ 81.109595][ T4018] loop3: detected capacity change from 0 to 128 [ 81.359265][ T22] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 81.377720][ T4018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.388833][ T4018] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 81.429713][ T22] usb 5-1: USB disconnect, device number 6 [ 81.500414][ T946] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.789914][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 81.950619][ T946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 81.966331][ T946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 82.150815][ T946] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 82.160639][ T946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.187273][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 82.215406][ T946] usb 2-1: Product: syz [ 82.237321][ T946] usb 2-1: Manufacturer: syz [ 82.261362][ T946] usb 2-1: SerialNumber: syz [ 82.320445][ T946] usb 2-1: config 0 descriptor?? [ 82.340602][ T4014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 82.350704][ T4014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 82.525247][ T27] audit: type=1326 audit(1721985971.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4040 comm="syz.3.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 82.689382][ T27] audit: type=1326 audit(1721985971.442:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4013 comm="syz.1.84" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0140d77299 code=0x0 [ 82.694282][ T4046] fuse: Bad value for 'fd' [ 83.525213][ T4053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.570439][ T4053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.677007][ T4058] fuse: Unknown parameter 'group_id00000000000000000000' [ 83.969415][ T4065] loop0: detected capacity change from 0 to 128 [ 83.995131][ T4065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.005078][ T4065] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 84.240345][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.430340][ T22] usb 5-1: device descriptor read/64, error -71 [ 84.449021][ T4073] loop2: detected capacity change from 0 to 128 [ 84.708155][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 84.750327][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.920450][ T946] Error reading MAC address [ 84.941371][ T946] usb 2-1: USB disconnect, device number 4 [ 84.960576][ T22] usb 5-1: device descriptor read/64, error -71 [ 85.082363][ T22] usb usb5-port1: attempt power cycle [ 85.292397][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 85.490329][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.580676][ T22] usb 5-1: device descriptor read/8, error -71 [ 85.993123][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.090807][ T22] usb 5-1: device descriptor read/8, error -71 [ 86.211242][ T22] usb usb5-port1: unable to enumerate USB device [ 86.863522][ T4097] fuse: Unknown parameter 'group_id00000000000000000000' [ 86.883020][ T27] audit: type=1326 audit(1721986231.641:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4093 comm="syz.3.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 86.984726][ T4103] fuse: Bad value for 'fd' [ 87.194323][ T4107] loop4: detected capacity change from 0 to 128 [ 87.235306][ T4107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.245073][ T4107] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 87.924625][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 87.979111][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 88.030618][ T3683] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.634766][ T4126] Zero length message leads to an empty skb [ 89.904156][ T4124] sched: RT throttling activated [ 90.160791][ T3683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 91.916133][ T3683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 92.080377][ T3683] usb 4-1: string descriptor 0 read error: -71 [ 92.090749][ T3683] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 92.099821][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.169560][ T4140] loop2: detected capacity change from 0 to 128 [ 92.178452][ T3683] usb 4-1: config 0 descriptor?? [ 92.220831][ T3683] usb 4-1: can't set config #0, error -71 [ 92.249110][ T3683] usb 4-1: USB disconnect, device number 6 [ 92.321285][ T4144] fuse: Unknown parameter 'group_id00000000000000000000' [ 92.360846][ T27] audit: type=1326 audit(1721986493.097:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4145 comm="syz.3.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 92.448340][ T4149] fuse: Bad value for 'fd' [ 92.470538][ T3681] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.700304][ T3681] usb 1-1: device descriptor read/64, error -71 [ 92.990342][ T3681] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.190310][ T3681] usb 1-1: device descriptor read/64, error -71 [ 93.323831][ T3681] usb usb1-port1: attempt power cycle [ 93.544514][ T4161] loop3: detected capacity change from 0 to 128 [ 93.586284][ T4161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.595863][ T4161] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff) [ 94.495304][ T3681] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.142501][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 98.150639][ T3681] usb 1-1: device descriptor read/8, error -71 [ 98.186250][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 98.371400][ T4185] fuse: Bad value for 'user_id' [ 98.447449][ T27] audit: type=1326 audit(1721986755.196:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.4.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 98.546355][ T4193] loop1: detected capacity change from 0 to 128 [ 98.554759][ T4195] fuse: Bad value for 'fd' [ 98.640418][ T3681] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.911363][ T3681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.964143][ T3681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.052641][ T3681] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.134662][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.325923][ T3681] usb 1-1: config 0 descriptor?? [ 99.757404][ T4211] loop3: detected capacity change from 0 to 128 [ 99.802328][ T4211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.811227][ T4211] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 99.990358][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.180970][ T22] usb 3-1: device descriptor read/64, error -71 [ 100.211279][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.228976][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.245501][ T3681] usbhid 1-1:0.0: can't add hid device: -32 [ 100.255705][ T3681] usbhid: probe of 1-1:0.0 failed with error -32 [ 100.297011][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 100.468675][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 100.476947][ T4226] fuse: Bad value for 'user_id' [ 100.520328][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.566692][ T27] audit: type=1326 audit(1721986757.316:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4230 comm="syz.4.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 100.666095][ T4235] fuse: Bad value for 'fd' [ 100.710356][ T22] usb 3-1: device descriptor read/64, error -71 [ 100.830437][ T22] usb usb3-port1: attempt power cycle [ 101.240478][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.301092][ T3681] usb 1-1: USB disconnect, device number 8 [ 101.330625][ T22] usb 3-1: device descriptor read/8, error -71 [ 101.475990][ T4249] loop4: detected capacity change from 0 to 128 [ 101.600359][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.695654][ T22] usb 3-1: device descriptor read/8, error -71 [ 101.756737][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 101.820737][ T22] usb usb3-port1: unable to enumerate USB device [ 102.154810][ T4266] loop4: detected capacity change from 0 to 128 [ 102.190831][ T4266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.199584][ T4266] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 102.237688][ T4272] fuse: Bad value for 'user_id' [ 102.376994][ T27] audit: type=1326 audit(1721986759.126:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab86b77299 code=0x0 [ 102.440526][ T152] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.478605][ T4278] fuse: Bad value for 'fd' [ 102.787582][ T4281] loop2: detected capacity change from 0 to 128 [ 102.830828][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.849674][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 102.854364][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.871350][ T152] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.881060][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.937887][ T152] usb 4-1: config 0 descriptor?? [ 102.971410][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 102.979634][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 102.997737][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 103.009145][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 103.019021][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 103.030043][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 103.051513][ T4284] netlink: 'syz.4.168': attribute type 29 has an invalid length. [ 103.109812][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 103.347819][ T4301] fuse: Bad value for 'fd' [ 103.680473][ T3714] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.708839][ T4269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.736135][ T152] usbhid 4-1:0.0: can't add hid device: -32 [ 103.755902][ T4269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.764269][ T152] usbhid: probe of 4-1:0.0 failed with error -32 [ 103.848448][ T4309] loop1: detected capacity change from 0 to 128 [ 103.860885][ T4309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.874710][ T4309] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 103.910473][ T3714] usb 5-1: device descriptor read/64, error -71 [ 104.191108][ T3714] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.249423][ T4313] loop2: detected capacity change from 0 to 128 [ 104.520572][ T3714] usb 5-1: device descriptor read/64, error -71 [ 104.576602][ T4319] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 104.647003][ T3714] usb usb5-port1: attempt power cycle [ 105.090624][ T3714] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 105.215818][ T3714] usb 5-1: device descriptor read/8, error -71 [ 105.226022][ T152] usb 4-1: USB disconnect, device number 7 [ 105.267254][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 105.410319][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.494566][ T3714] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 105.505956][ T27] audit: type=1326 audit(1721986762.256:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.0.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab86b77299 code=0x0 [ 105.607374][ T4332] fuse: Bad value for 'fd' [ 105.620749][ T3714] usb 5-1: device descriptor read/8, error -71 [ 105.755908][ T3714] usb usb5-port1: unable to enumerate USB device [ 105.780400][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 105.790528][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 105.960442][ T22] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 105.969636][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.977866][ T22] usb 3-1: Product: syz [ 105.982330][ T22] usb 3-1: Manufacturer: syz [ 105.986935][ T22] usb 3-1: SerialNumber: syz [ 105.994524][ T22] usb 3-1: config 0 descriptor?? [ 106.010741][ T4317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 106.018227][ T4317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 106.236993][ T4317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 106.244688][ T4317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 106.255069][ T4338] fuse: Bad value for 'fd' [ 106.537413][ T4346] loop4: detected capacity change from 0 to 128 [ 106.710457][ T22] dm9601: No valid MAC address in EEPROM, using e6:f8:5a:66:e4:73 [ 107.020734][ T3714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.140439][ T22] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 107.143585][ T4362] tipc: Started in network mode [ 107.181731][ T4362] tipc: Node identity d650af5a30a9, cluster identity 4711 [ 107.189226][ T4362] tipc: Enabled bearer , priority 10 [ 107.343682][ T22] usb 3-1: USB disconnect, device number 7 [ 107.400798][ T3714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.416996][ T3714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.435447][ T3714] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.453949][ T3714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.485936][ T3714] usb 2-1: config 0 descriptor?? [ 107.579323][ T27] audit: type=1326 audit(1721986764.326:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.0.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab86b77299 code=0x0 [ 107.682994][ T4369] fuse: Bad value for 'fd' [ 107.692667][ T4370] fuse: Bad value for 'fd' [ 108.141134][ T4380] loop4: detected capacity change from 0 to 128 [ 108.181451][ T152] tipc: Node number set to 3875123034 [ 108.205584][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.262888][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.279407][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.290640][ T3714] usbhid 2-1:0.0: can't add hid device: -32 [ 108.296885][ T3714] usbhid: probe of 2-1:0.0 failed with error -32 [ 108.400684][ T22] usb 4-1: device descriptor read/64, error -71 [ 108.550562][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 108.670341][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.755802][ T3638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.766657][ T3638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.774801][ T3638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.789761][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.797877][ T3638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.807780][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 108.815543][ T3638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.880627][ T22] usb 4-1: device descriptor read/64, error -71 [ 108.930479][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.964239][ T1118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.000515][ T22] usb usb4-port1: attempt power cycle [ 109.067772][ T1118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.100533][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 109.112986][ T4388] chnl_net:caif_netlink_parms(): no params data found [ 109.120699][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.140666][ T26] usb 5-1: Product: syz [ 109.144864][ T26] usb 5-1: Manufacturer: syz [ 109.149476][ T26] usb 5-1: SerialNumber: syz [ 109.156686][ T1118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.162402][ T26] usb 5-1: config 0 descriptor?? [ 109.202764][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.209909][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.212305][ T26] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.219100][ T4388] device bridge_slave_0 entered promiscuous mode [ 109.232997][ T26] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 109.254465][ T1118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.267125][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.274907][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.283541][ T4388] device bridge_slave_1 entered promiscuous mode [ 109.306970][ T4388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.320062][ T4388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.354620][ T4388] team0: Port device team_slave_0 added [ 109.363039][ T4388] team0: Port device team_slave_1 added [ 109.387406][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.394499][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.410383][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.422439][ T4388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.457280][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.464427][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.491091][ T4388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.520623][ T22] usb 4-1: device descriptor read/8, error -71 [ 109.558629][ T4388] device hsr_slave_0 entered promiscuous mode [ 109.566324][ T4388] device hsr_slave_1 entered promiscuous mode [ 109.573132][ T4388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.580987][ T4388] Cannot create hsr debugfs directory [ 109.790338][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.806660][ T152] usb 2-1: USB disconnect, device number 5 [ 109.880555][ T26] em28xx 5-1:0.0: chip ID is em2750 [ 109.891010][ T22] usb 4-1: device descriptor read/8, error -71 [ 110.020970][ T22] usb usb4-port1: unable to enumerate USB device [ 110.061242][ T4413] fuse: Bad value for 'fd' [ 110.230756][ T26] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.239599][ T26] em28xx 5-1:0.0: board has no eeprom [ 110.396810][ T26] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.409681][ T26] em28xx 5-1:0.0: dvb set to bulk mode. [ 110.456486][ T946] em28xx 5-1:0.0: Binding DVB extension [ 110.506707][ T26] usb 5-1: USB disconnect, device number 15 [ 110.515319][ T4388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.529569][ T26] em28xx 5-1:0.0: Disconnecting em28xx [ 110.597898][ T4388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.653362][ T4388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.668734][ T946] em28xx 5-1:0.0: Registering input extension [ 110.689833][ T26] em28xx 5-1:0.0: Closing input extension [ 110.721110][ T26] em28xx 5-1:0.0: Freeing device [ 110.879781][ T4388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.886926][ T3638] Bluetooth: hci1: command tx timeout [ 111.189743][ T1118] device hsr_slave_0 left promiscuous mode [ 111.221365][ T1118] device hsr_slave_1 left promiscuous mode [ 111.250857][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.278694][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.301185][ T27] audit: type=1326 audit(1721986768.046:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.2.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f97b77299 code=0x0 [ 111.367441][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.375565][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.394642][ T1118] device bridge_slave_1 left promiscuous mode [ 111.409788][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.421841][ T4447] fuse: Bad value for 'fd' [ 111.439783][ T1118] device bridge_slave_0 left promiscuous mode [ 111.450563][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.505584][ T1118] device veth1_macvtap left promiscuous mode [ 111.517871][ T1118] device veth0_macvtap left promiscuous mode [ 111.527068][ T1118] device veth1_vlan left promiscuous mode [ 111.534260][ T1118] device veth0_vlan left promiscuous mode [ 112.460340][ T3684] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.648840][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 112.673891][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 112.702080][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.735467][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.833060][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.850596][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.870171][ T3684] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.889509][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.899426][ T3684] usb 4-1: config 0 descriptor?? [ 112.960916][ T3638] Bluetooth: hci1: command tx timeout [ 113.163818][ T1118] bond0 (unregistering): Released all slaves [ 113.237597][ T4444] tipc: Enabling of bearer rejected, already enabled [ 113.368244][ T4388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.404959][ T4388] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.431952][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.450046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.489700][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.498949][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.509157][ T4473] fuse: Bad value for 'fd' [ 113.520871][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.527968][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.562292][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.587738][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.597323][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.604460][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.619620][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.648990][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.651173][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.657448][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.670379][ T3684] usbhid 4-1:0.0: can't add hid device: -32 [ 113.680111][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.699178][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.699387][ T3684] usbhid: probe of 4-1:0.0 failed with error -32 [ 113.708104][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.722031][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.738343][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.753571][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.763212][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.777339][ T4388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.794728][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.846413][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.858641][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.867688][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.884356][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 114.496922][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.515703][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.547683][ T4388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.625966][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.646908][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.745668][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.773747][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.797024][ T4388] device veth0_vlan entered promiscuous mode [ 114.818423][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.828272][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.838518][ T27] audit: type=1326 audit(1721986771.586:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f97b77299 code=0x0 [ 114.930115][ T4388] device veth1_vlan entered promiscuous mode [ 114.939921][ T4500] fuse: Bad value for 'fd' [ 114.996786][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.014345][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.037863][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.040416][ T3638] Bluetooth: hci1: command tx timeout [ 115.084604][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.125295][ T4388] device veth0_macvtap entered promiscuous mode [ 115.174338][ T4388] device veth1_macvtap entered promiscuous mode [ 115.309497][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.309549][ T946] usb 4-1: USB disconnect, device number 12 [ 115.397027][ T4506] vxfs: WRONG superblock magic 00000000 at 1 [ 115.404065][ T4506] vxfs: WRONG superblock magic 00000000 at 8 [ 115.410540][ T4506] vxfs: can't find superblock. [ 115.424576][ T4506] syz.4.230 uses obsolete (PF_INET,SOCK_PACKET) [ 116.461194][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.483554][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.509101][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.519110][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.529684][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.539891][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.571678][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.613659][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.649286][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.681937][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.722298][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.753411][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.857142][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.884472][ T4521] fuse: Bad value for 'fd' [ 116.906143][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.936536][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.979800][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.000033][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.020853][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.058420][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.078792][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.094507][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.121211][ T3638] Bluetooth: hci1: command tx timeout [ 117.127399][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.180257][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.289047][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 117.384773][ T4525] tipc: Enabling of bearer rejected, already enabled [ 117.538762][ T4388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.558189][ T4388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.574709][ T4388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.597874][ T4388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.625108][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 117.791955][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.799974][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.867356][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.922193][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.956251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.994336][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.540406][ T3680] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 118.930847][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.070319][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.080150][ T3680] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.091248][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.138060][ T3680] usb 5-1: config 0 descriptor?? [ 119.246606][ T27] audit: type=1326 audit(1721986775.996:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f97b77299 code=0x0 [ 119.347960][ T4554] fuse: Bad value for 'fd' [ 119.747755][ T4562] fuse: Invalid rootmode [ 119.875863][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 119.921238][ T4542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.930409][ T3680] usbhid 5-1:0.0: can't add hid device: -32 [ 119.937654][ T3680] usbhid: probe of 5-1:0.0 failed with error -32 [ 119.960661][ T4542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.534419][ T4591] tipc: Enabling of bearer rejected, already enabled [ 121.090090][ T152] usb 5-1: USB disconnect, device number 16 [ 122.261891][ T4607] fuse: Invalid rootmode [ 123.403391][ T4616] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 125.837426][ T4650] fuse: Invalid rootmode [ 126.754600][ T4665] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 127.380317][ T3680] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.408238][ T4673] tipc: Enabling of bearer rejected, already enabled [ 127.650465][ T3680] usb 2-1: Using ep0 maxpacket: 16 [ 127.780504][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.807810][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.827289][ T3680] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 127.857073][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.907743][ T3680] usb 2-1: config 0 descriptor?? [ 129.120989][ T3680] usbhid 2-1:0.0: can't add hid device: -71 [ 129.127032][ T3680] usbhid: probe of 2-1:0.0 failed with error -71 [ 129.159842][ T3680] usb 2-1: USB disconnect, device number 6 [ 129.188237][ T4691] fuse: Bad value for 'rootmode' [ 129.440052][ T4696] netlink: 'syz.4.283': attribute type 5 has an invalid length. [ 129.450125][ T4696] netlink: 176 bytes leftover after parsing attributes in process `syz.4.283'. [ 129.792743][ T4702] loop1: detected capacity change from 0 to 1024 [ 129.860099][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 129.890512][ T3680] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.282581][ T3680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.307634][ T3680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.335049][ T4715] kvm: MONITOR instruction emulated as NOP! [ 130.350344][ T3680] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.365481][ T4719] fuse: Bad value for 'rootmode' [ 130.580588][ T3680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.589667][ T3680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.656444][ T3680] usb 1-1: Product: syz [ 130.679737][ T3680] usb 1-1: Manufacturer: syz [ 130.696100][ T3680] usb 1-1: SerialNumber: syz [ 130.781325][ T3680] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 130.788757][ T3680] cdc_ncm 1-1:1.0: bind() failure [ 130.882256][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 131.010537][ T3680] usb 1-1: USB disconnect, device number 9 [ 131.438529][ T4755] tipc: Enabling of bearer rejected, already enabled [ 131.659199][ T4759] fuse: Bad value for 'rootmode' [ 131.924313][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 132.316696][ T4774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.346015][ T4779] netlink: 'syz.1.310': attribute type 2 has an invalid length. [ 132.644011][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650686][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351935][ T4789] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 133.437179][ T4790] Â: renamed from pim6reg1 [ 133.557008][ T4799] loop2: detected capacity change from 0 to 256 [ 133.687469][ T3654] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.884346][ T4803] fuse: Unknown parameter 'use00000000000000000000' [ 134.273627][ T4808] loop2: detected capacity change from 0 to 4096 [ 134.356426][ T4808] NILFS (loop2): invalid segment: Checksum error in segment payload [ 134.369512][ T4808] NILFS (loop2): trying rollback from an earlier position [ 134.438162][ T4808] NILFS (loop2): recovery complete [ 134.460576][ T4819] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.550992][ T27] audit: type=1800 audit(1721988327.305:20): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.325" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 134.600448][ T3686] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.850465][ T3686] usb 4-1: Using ep0 maxpacket: 16 [ 135.554406][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.615420][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.650384][ T3686] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 135.680700][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.717335][ T3686] usb 4-1: config 0 descriptor?? [ 136.250380][ T3686] usbhid 4-1:0.0: can't add hid device: -71 [ 136.256589][ T3686] usbhid: probe of 4-1:0.0 failed with error -71 [ 136.290567][ T3686] usb 4-1: USB disconnect, device number 13 [ 136.313227][ T4812] loop4: detected capacity change from 0 to 65536 [ 136.363973][ T4831] loop1: detected capacity change from 0 to 32768 [ 136.371981][ T4831] ======================================================= [ 136.371981][ T4831] WARNING: The mand mount option has been deprecated and [ 136.371981][ T4831] and is ignored by this kernel. Remove the mand [ 136.371981][ T4831] option from the mount to silence this warning. [ 136.371981][ T4831] ======================================================= [ 136.418783][ T4812] XFS (loop4): Mounting V5 Filesystem [ 136.435302][ T27] audit: type=1804 audit(1721988585.184:21): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.325" name="/newroot/70/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 136.477833][ T4831] XFS (loop1): Mounting V5 Filesystem [ 136.525904][ T4812] XFS (loop4): Ending clean mount [ 136.575910][ T4831] XFS (loop1): Ending clean mount [ 136.747049][ T3637] XFS (loop4): Unmounting Filesystem [ 136.857123][ T4857] fuse: Unknown parameter 'use00000000000000000000' [ 136.880698][ T4859] capability: warning: `syz.2.334' uses deprecated v2 capabilities in a way that may be insecure [ 137.534356][ T4872] tipc: Started in network mode [ 137.539275][ T4872] tipc: Node identity 5e9e93c52a82, cluster identity 4711 [ 137.624219][ T4872] tipc: Enabled bearer , priority 10 [ 137.695769][ T3636] XFS (loop1): Unmounting Filesystem [ 138.741235][ T4817] tipc: Node number set to 1948029893 [ 139.839585][ T4910] fuse: Unknown parameter 'use00000000000000000000' [ 141.421645][ T4944] loop3: detected capacity change from 0 to 512 [ 141.452187][ T4944] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.480674][ T4944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.509679][ T4944] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 141.593490][ T4944] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 141.621619][ T4944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.788928][ T4944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.360: Invalid block bitmap block 0 in block_group 0 [ 141.893923][ T4959] vxfs: WRONG superblock magic 00000000 at 1 [ 141.903054][ T4959] vxfs: WRONG superblock magic 00000000 at 8 [ 141.909136][ T4959] vxfs: can't find superblock. [ 141.952889][ T4944] Quota error (device loop3): write_blk: dquota write failed [ 142.204044][ T4962] loop1: detected capacity change from 0 to 512 [ 142.237400][ T4962] EXT4-fs: Ignoring removed i_version option [ 142.264628][ T4962] EXT4-fs: Ignoring removed nobh option [ 142.296565][ T4962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.314049][ T4944] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 142.454653][ T4944] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.360: Failed to acquire dquot type 1 [ 142.486294][ T4962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.553232][ T4944] EXT4-fs (loop3): 1 orphan inode deleted [ 142.684824][ T4780] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 142.714709][ T4962] EXT4-fs (loop1): 1 truncate cleaned up [ 142.736347][ T4962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.753286][ T4780] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:8: Failed to release dquot type 1 [ 142.796254][ T27] audit: type=1326 audit(1721989103.552:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc135977299 code=0x0 [ 142.803788][ T4944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.850954][ T4970] fuse: Bad value for 'fd' [ 142.912259][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 143.016605][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 143.038470][ T4944] syz.3.360 (4944) used greatest stack depth: 19704 bytes left [ 143.459302][ T4988] netlink: 'syz.1.372': attribute type 2 has an invalid length. [ 143.869010][ T5002] loop2: detected capacity change from 0 to 512 [ 143.919744][ T5002] EXT4-fs: Ignoring removed i_version option [ 143.938223][ T5002] EXT4-fs: Ignoring removed nobh option [ 144.317455][ T5008] vxfs: WRONG superblock magic 00000000 at 1 [ 144.324091][ T5008] vxfs: WRONG superblock magic 00000000 at 8 [ 144.330118][ T5008] vxfs: can't find superblock. [ 144.712594][ T5002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.922938][ T5002] EXT4-fs (loop2): 1 truncate cleaned up [ 144.928621][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.143157][ T5017] loop0: detected capacity change from 0 to 512 [ 145.162199][ T5017] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.178864][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 145.248206][ T5017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.302973][ T5017] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 145.361136][ T5017] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 145.390789][ T5017] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.411879][ T5017] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.381: Invalid block bitmap block 0 in block_group 0 [ 145.461929][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 145.484480][ T27] audit: type=1326 audit(1721989106.242:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0140d77299 code=0x0 [ 145.524762][ T5017] Quota error (device loop0): write_blk: dquota write failed [ 145.534131][ T5017] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 145.560349][ T5017] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.381: Failed to acquire dquot type 1 [ 145.580094][ T5017] EXT4-fs (loop0): 1 orphan inode deleted [ 145.584595][ T5033] fuse: Bad value for 'fd' [ 145.621066][ T1118] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 145.660755][ T1118] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:5: Failed to release dquot type 1 [ 145.733665][ T5017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.875882][ T4388] EXT4-fs (loop0): unmounting filesystem. [ 145.914164][ T5049] loop3: detected capacity change from 0 to 512 [ 145.966092][ T5049] EXT4-fs: Ignoring removed i_version option [ 145.995635][ T5049] EXT4-fs: Ignoring removed nobh option [ 146.013282][ T5049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.026808][ T5049] EXT4-fs (loop3): 1 truncate cleaned up [ 146.036075][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.186459][ T3647] EXT4-fs (loop3): unmounting filesystem. [ 146.697144][ T5078] loop4: detected capacity change from 0 to 512 [ 146.731236][ T5078] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.767625][ T5078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.797072][ T5078] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 146.835930][ T5078] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 146.848821][ T5078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.884903][ T3686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.892177][ T5078] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.405: Invalid block bitmap block 0 in block_group 0 [ 146.934441][ T5078] Quota error (device loop4): write_blk: dquota write failed [ 146.945228][ T5078] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 146.955899][ T5078] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.405: Failed to acquire dquot type 1 [ 146.970130][ T5078] EXT4-fs (loop4): 1 orphan inode deleted [ 146.977452][ T9] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 146.992903][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 147.009534][ T5078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.060324][ T3681] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.140329][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 147.190617][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 147.340893][ T3681] usb 1-1: Using ep0 maxpacket: 8 [ 147.414444][ T5089] random: crng reseeded on system resumption [ 147.432228][ T3686] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=74.98 [ 147.447889][ T3686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.470561][ T3681] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.496668][ T3681] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 147.510801][ T3686] usb 2-1: Product: syz [ 147.514951][ T3686] usb 2-1: Manufacturer: syz [ 147.519715][ T3681] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.542407][ T3686] usb 2-1: SerialNumber: syz [ 147.548408][ T3686] usb 2-1: config 0 descriptor?? [ 147.602427][ T3686] pxrc 2-1:0.0: Could not find endpoint [ 147.630737][ T3681] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 147.650119][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.658441][ T3681] usb 1-1: SerialNumber: syz [ 147.691161][ T5082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.711975][ T3681] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 147.723504][ T3681] usb-storage 1-1:1.0: USB Mass Storage device detected [ 147.760749][ T3681] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 147.804554][ T3686] usb 2-1: USB disconnect, device number 7 [ 147.934915][ T3681] usb 1-1: USB disconnect, device number 10 [ 148.257329][ T27] audit: type=1326 audit(1721989109.012:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f97b77299 code=0x0 [ 148.358726][ T5099] fuse: Bad value for 'fd' [ 148.370009][ T120] block nbd3: Attempted send on invalid socket [ 148.376541][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 148.444281][ T5102] loop1: detected capacity change from 0 to 512 [ 148.453952][ T5102] EXT4-fs: Ignoring removed i_version option [ 148.460762][ T5102] EXT4-fs: Ignoring removed nobh option [ 148.468859][ T5102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.511763][ T5102] EXT4-fs (loop1): 1 truncate cleaned up [ 148.517869][ T5102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.607888][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 149.000359][ T4818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.370933][ T4818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.504087][ T4818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.514724][ T4818] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.524578][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.537401][ T4818] usb 2-1: config 0 descriptor?? [ 149.845464][ T5133] EXT4-fs (sda1): shut down requested (1) [ 149.904093][ T5133] Aborting journal on device sda1-8. [ 150.442067][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.464515][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.597946][ T5145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.427'. [ 150.612251][ T5145] device vlan2 entered promiscuous mode [ 150.617966][ T5145] device syz_tun entered promiscuous mode [ 150.630335][ T4817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.730452][ T4818] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 150.741366][ T4818] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 150.760879][ T4818] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 150.775773][ T27] audit: type=1326 audit(1721989111.532:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe684977299 code=0x0 [ 150.783687][ T4818] usb 2-1: USB disconnect, device number 8 [ 150.877806][ T5151] fuse: Bad value for 'fd' [ 150.882379][ T4817] usb 3-1: Using ep0 maxpacket: 8 [ 151.006209][ T4817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.017475][ T4817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 151.036823][ T4817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.120519][ T4817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 151.140004][ T4817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.156660][ T4817] usb 3-1: SerialNumber: syz [ 151.190696][ T5139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.211361][ T4817] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 151.218289][ T4817] usb-storage 3-1:1.0: USB Mass Storage device detected [ 151.273968][ T4817] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 151.414230][ T22] usb 3-1: USB disconnect, device number 8 [ 151.949162][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 151.981985][ T5171] 8021q: VLANs not supported on hsr0 [ 152.364113][ T5179] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 152.810340][ T4817] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.887655][ T27] audit: type=1326 audit(1721989113.642:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.3.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4b3177299 code=0x0 [ 153.029545][ T5195] fuse: Bad value for 'fd' [ 153.070507][ T4817] usb 2-1: Using ep0 maxpacket: 32 [ 153.112555][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 153.135423][ T5198] device vlan2 entered promiscuous mode [ 153.143637][ T5198] device netdevsim0 entered promiscuous mode [ 153.151840][ T5198] device netdevsim0 left promiscuous mode [ 153.195556][ T4817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.221015][ T4817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.241320][ T4817] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 153.260445][ T4817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.301918][ T4817] usb 2-1: config 0 descriptor?? [ 153.794377][ T4817] ft260 0003:0403:6030.0002: item fetching failed at offset 0/2 [ 153.851263][ T4817] ft260 0003:0403:6030.0002: failed to parse HID [ 153.865697][ T4817] ft260: probe of 0003:0403:6030.0002 failed with error -22 [ 153.915710][ T5207] ------------[ cut here ]------------ [ 153.921574][ T5207] kernel BUG at mm/memory.c:2230! [ 153.946198][ T5207] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 153.952291][ T5207] CPU: 1 PID: 5207 Comm: syz.2.447 Not tainted 6.1.101-syzkaller #0 [ 153.960254][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 153.970287][ T5207] RIP: 0010:vmf_insert_pfn_prot+0x2b3/0x2d0 [ 153.976172][ T5207] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 03 be ff b8 02 00 00 00 eb c4 e8 6b 03 be ff 0f 0b e8 64 03 be ff 0f 0b e8 5d 03 be ff <0f> 0b e8 06 42 d8 08 e8 51 03 be ff 0f 0b 66 2e 0f 1f 84 00 00 00 [ 153.995780][ T5207] RSP: 0018:ffffc9000324f900 EFLAGS: 00010287 [ 154.001849][ T5207] RAX: ffffffff81cc9833 RBX: 0000000000000420 RCX: 0000000000040000 [ 154.009816][ T5207] RDX: ffffc9000572a000 RSI: 000000000000060b RDI: 000000000000060c [ 154.017779][ T5207] RBP: ffffc9000324f9c0 R08: ffffffff81cc967d R09: ffffffff81cc9651 [ 154.025736][ T5207] R10: 0000000000000002 R11: ffff888025928000 R12: ffffc9000324f940 [ 154.033691][ T5207] R13: ffff88807f0e80d8 R14: 1ffff92000649f24 R15: 000000000c040471 [ 154.041644][ T5207] FS: 00007f6f979ff6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 154.050559][ T5207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.057123][ T5207] CR2: 0000000020019680 CR3: 0000000052dba000 CR4: 00000000003506e0 [ 154.065079][ T5207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.073030][ T5207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.080985][ T5207] Call Trace: [ 154.084245][ T5207] [ 154.087162][ T5207] ? __die_body+0x5e/0xa0 [ 154.091487][ T5207] ? die+0x83/0xb0 [ 154.095196][ T5207] ? do_trap+0x11e/0x350 [ 154.099425][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.104704][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.109977][ T5207] ? do_error_trap+0x13d/0x1e0 [ 154.114727][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.120007][ T5207] ? do_int3+0x30/0x30 [ 154.124063][ T5207] ? report_bug+0x3e0/0x500 [ 154.128556][ T5207] ? rcu_is_watching+0x11/0xb0 [ 154.133390][ T5207] ? handle_invalid_op+0x2c/0x40 [ 154.138313][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.143580][ T5207] ? exc_invalid_op+0x2f/0x40 [ 154.148246][ T5207] ? asm_exc_invalid_op+0x16/0x20 [ 154.153258][ T5207] ? vmf_insert_pfn_prot+0xd1/0x2d0 [ 154.158447][ T5207] ? vmf_insert_pfn_prot+0xfd/0x2d0 [ 154.163631][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.168901][ T5207] ? vmf_insert_pfn_prot+0x2b3/0x2d0 [ 154.174172][ T5207] ? vm_map_pages_zero+0x140/0x140 [ 154.179271][ T5207] ? count_memcg_event_mm+0x90/0x410 [ 154.184541][ T5207] ? count_memcg_event_mm+0x3be/0x410 [ 154.189900][ T5207] drm_gem_shmem_fault+0x1d9/0x230 [ 154.195001][ T5207] __do_fault+0x136/0x4f0 [ 154.199318][ T5207] handle_mm_fault+0x3412/0x5340 [ 154.204242][ T5207] ? mt_find+0x29a/0xc60 [ 154.208473][ T5207] ? mt_find+0x29a/0xc60 [ 154.212715][ T5207] ? numa_migrate_prep+0x250/0x250 [ 154.217822][ T5207] ? lock_mm_and_find_vma+0xae/0x2e0 [ 154.223102][ T5207] exc_page_fault+0x26f/0x620 [ 154.227765][ T5207] asm_exc_page_fault+0x22/0x30 [ 154.232605][ T5207] RIP: 0010:copy_user_short_string+0xa/0x40 [ 154.238486][ T5207] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 154.258079][ T5207] RSP: 0018:ffffc9000324fe30 EFLAGS: 00050202 [ 154.264137][ T5207] RAX: ffffffff8438a701 RBX: 00007fffffffeff8 RCX: 0000000000000001 [ 154.272107][ T5207] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffc9000324fea0 [ 154.280079][ T5207] RBP: ffffc9000324ff20 R08: dffffc0000000000 R09: fffff52000649fd5 [ 154.288046][ T5207] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000008 [ 154.296006][ T5207] R13: 0000000000000000 R14: ffffc9000324fea0 R15: 0000000020000080 [ 154.303974][ T5207] ? _copy_from_user+0x51/0x170 [ 154.308822][ T5207] _copy_from_user+0xf3/0x170 [ 154.313500][ T5207] __x64_sys_signalfd4+0x12d/0x1b0 [ 154.318611][ T5207] ? signalfd_cleanup+0x60/0x60 [ 154.323451][ T5207] ? syscall_enter_from_user_mode+0x2e/0x230 [ 154.329428][ T5207] ? lockdep_hardirqs_on+0x94/0x130 [ 154.334618][ T5207] ? syscall_enter_from_user_mode+0x2e/0x230 [ 154.340586][ T5207] do_syscall_64+0x3b/0xb0 [ 154.344993][ T5207] ? clear_bhb_loop+0x45/0xa0 [ 154.349659][ T5207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.355538][ T5207] RIP: 0033:0x7f6f97b77299 [ 154.359948][ T5207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.379534][ T5207] RSP: 002b:00007f6f979ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 154.387932][ T5207] RAX: ffffffffffffffda RBX: 00007f6f97d05f80 RCX: 00007f6f97b77299 [ 154.395890][ T5207] RDX: 0000000000000008 RSI: 0000000020000080 RDI: ffffffffffffffff [ 154.403844][ T5207] RBP: 00007f6f97be48e6 R08: 0000000000000000 R09: 0000000000000000 [ 154.411799][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.419748][ T5207] R13: 000000000000000b R14: 00007f6f97d05f80 R15: 00007ffe4574ef78 [ 154.427707][ T5207] [ 154.430706][ T5207] Modules linked in: [ 154.456407][ T4817] usb 2-1: USB disconnect, device number 9 [ 154.470713][ T5207] ---[ end trace 0000000000000000 ]--- [ 154.499908][ T5207] RIP: 0010:vmf_insert_pfn_prot+0x2b3/0x2d0 [ 155.012583][ T5207] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 03 be ff b8 02 00 00 00 eb c4 e8 6b 03 be ff 0f 0b e8 64 03 be ff 0f 0b e8 5d 03 be ff <0f> 0b e8 06 42 d8 08 e8 51 03 be ff 0f 0b 66 2e 0f 1f 84 00 00 00 [ 155.040753][ T5207] RSP: 0018:ffffc9000324f900 EFLAGS: 00010287 [ 155.047014][ T5207] RAX: ffffffff81cc9833 RBX: 0000000000000420 RCX: 0000000000040000 [ 155.056349][ T5207] RDX: ffffc9000572a000 RSI: 000000000000060b RDI: 000000000000060c [ 155.079630][ T5207] RBP: ffffc9000324f9c0 R08: ffffffff81cc967d R09: ffffffff81cc9651 [ 155.090309][ T5207] R10: 0000000000000002 R11: ffff888025928000 R12: ffffc9000324f940 [ 155.103524][ T5207] R13: ffff88807f0e80d8 R14: 1ffff92000649f24 R15: 000000000c040471 [ 155.116064][ T5207] FS: 00007f6f979ff6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 155.128451][ T5207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.136234][ T5207] CR2: 00007fc136794d58 CR3: 0000000052dba000 CR4: 00000000003506e0 [ 155.148918][ T5207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.160348][ T5207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.169502][ T5207] Kernel panic - not syncing: Fatal exception [ 155.175777][ T5207] Kernel Offset: disabled [ 155.180082][ T5207] Rebooting in 86400 seconds..