last executing test programs: 2m52.178633832s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r7, &(0x7f0000005dc0)={0x2020}, 0x2020) 2m50.225878026s ago: executing program 1 (id=11): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m34.679196408s ago: executing program 32 (id=11): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m21.254565622s ago: executing program 3 (id=59): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x41, 0x0, @multicast2}, 0x2001ffff}}, 0x2e) 2m20.543810933s ago: executing program 3 (id=63): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffee7) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f0000d02ae0fd00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001e00000000000000000059a230ff41", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.272314265s ago: executing program 3 (id=67): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x600e7180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.20327476s ago: executing program 3 (id=72): syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x7a3, &(0x7f00000021c0)="$eJzs3c9rHFUcAPDvbJImptVEEGw9BQQNlG5Mja2Ch4oHESwU9GwbNttQs8mW7KY0IVCLCF4ELR4EvfTsj3rz6o+r/gt6EZGWqmmx4kEis9ntbprdZNsmm9R8PjDtezNv8+a7b+bN253HTgC71lD6TybiQER8kEQMVNcnEdFTSXVHHFspd2tpMZcuSSwvv/5HUilzc2kxFw2vSe2tZvZHxHfvRhzMrK23NL8wNV4o5Ger+ZHy9NmR0vzCoTPT45P5yfzMkdGxscNHnzvau3mx/vXjwr5rH77y9JfH/nnn8Svvf5/EsdhX3dYYx2YZiqHqe9KTvoWrvLzZlW2zZLt3gHuSnppdK2d5HIiB6Kqk2tN+SQBgJ7kQEcsAwC6TuP4DwC5T+x7g5tJiLl2WL2zv9xGddv2liOhbib92f3NlS3f1nl1f5T5o/81k1f2OJCIGN6H+oYj49Os3P0+X2KL7kADNvH0xIk4NDtX6/3r/k6yZs7Ci/QkZz7RRZuiOvP4POuebdPzzfH38Vz//MrfHP9Fk/NPb5Ny9F0MRexrza8//zNVNqKaldPz3Yk99btuthvirBruquYcrY76e5PSZQj7t2x6JiOHo6U3zo+vUMXzj3xurVnTVk43jvz8vvfVZWn/6f71E5mr3HV3uxHh5/H7jrrl+MeKJ7mbxJ7fbP2kx/j3RZh2vvvDeJ622pfGn8daW1fFv/ayy5csRT0Xz+GuS9eYnHhmpHA4jtYOiia9++bi/Vf2N7Z8uaf21zwKdkLZ///rxDyaN8zVLd1/HD5cHvm21beP4mx//e5I3Kula53F+vFyeHY3Yk7y2dv3h+mtr+Vr5NP7hJ5uf/+sd/+lnwlNtxt997fcv7j3+rZXGP3FX7X/3iSu3prpa1d9e+49VUsPVNe30f+3u4P28dwAAAAAAAAAAAAAAAAAAAAAAAADQrkxE7Iskk72dzmSy2ZVneD8W/ZlCsVQ+eLo4NzMRlWdlD0ZPpvZTlwMNv4c6Wv09/Fr+8B35ZyPi0Yj4qPehSj6bKxYmtjt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKja2+L5/6nferd77wCALdO3YYkb+Y7sCADQMRtf/wGA/xvXfwDYfVz/AWD3cf0HgN3H9R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtduL48XRZ/ntpMZfmJ87Nz00Vzx2ayJemstNzuWyuOHs2O1ksThby2VxxuuGlPzX7e4Vi8exYzMydHynnS+WR0vzCyeni3Ez55Jnp8cn8yXxPxyIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPaV5hemxguF/OwOTvRFxA7YjY0TSXcn6loeWGm6HRHyFia60mavrPn10M/71yt86YE4jB+wxHb3TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhv8CAAD//5MfJHc=") syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m13.3642007s ago: executing program 3 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffff000085000000820000009500"/72], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) socket$inet6(0xa, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x14, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00', 0x9}}]}, 0xa0}}, 0x0) 2m12.702888885s ago: executing program 3 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) r1 = dup(r0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @local}, {0x2, 0x4e2f, @broadcast}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x8080000, 0x4, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, r6, 0x5}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r7, &(0x7f0000000200)="0b031404e0ff640f020026fefc1aaecbffc114e283b159a42361b4210d438c47540ff6213bb1", 0x26, 0x0, &(0x7f0000000140)={0x11, 0xd}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 2m11.609709323s ago: executing program 33 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x15) r1 = dup(r0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @local}, {0x2, 0x4e2f, @broadcast}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x8080000, 0x4, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, r6, 0x5}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r7, &(0x7f0000000200)="0b031404e0ff640f020026fefc1aaecbffc114e283b159a42361b4210d438c47540ff6213bb1", 0x26, 0x0, &(0x7f0000000140)={0x11, 0xd}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 1m55.00707261s ago: executing program 5 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x2008002, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x5}}, {@noauto_da_alloc}, {@inlinecrypt}, {@discard}, {@oldalloc}]}, 0x1, 0x571, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc00"/132], 0x150}}, 0x804) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x5) 1m53.28724925s ago: executing program 5 (id=110): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) close(0x3) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="a2", 0x1f}], 0x10}, 0x8010) close(r1) 1m52.17323134s ago: executing program 5 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 1m51.319169514s ago: executing program 5 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000540)=0xe8) setresuid(r4, r5, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@utf8no}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000580)=0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) unshare(0x42000000) 1m42.780467006s ago: executing program 5 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040600) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x26) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x3, {0x0, 0x0, 0x3}, {0x0, 0xff, 0x3}, 0xff, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m27.190662133s ago: executing program 34 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040600) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x26) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x3, {0x0, 0x0, 0x3}, {0x0, 0xff, 0x3}, 0xff, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 16.652073708s ago: executing program 2 (id=347): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xd40, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 13.619859197s ago: executing program 2 (id=356): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0201"], 0x50) timer_create(0x3, &(0x7f0000000280)={0x0, 0x3f, 0x1, @thr={&(0x7f0000000140)="df110f923025b9de61172715d7fba9434aec6f460685b6e224239617d1f19b9387de12d352e37db34691f6dcf0acd27fe9f68028510138e3d25131328a96802933a5152074f2b510afd8be7af01f37070f87d4ec4457b01bbf0465e25a79e0dea3ccd17fe99e8dc723cab512b983", &(0x7f0000000240)="181555"}}, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x2) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000292c0)=""/102400, 0x19000) getpriority(0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newtfilter={0x104, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0xd4, 0x2, [@TCA_RSVP_ACT={0xd0, 0x6, [@m_nat={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x6}, @private=0xa010101, @rand_addr=0x64010100, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @rand_addr=0x64010100, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffff, 0x1, 0xfffffffc, 0xa}, @multicast1, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x104}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 10.796416735s ago: executing program 0 (id=361): ioprio_set$pid(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="c0ae6872e90000000008e7847fa3b3720000850000006d0000249500"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 10.028047511s ago: executing program 0 (id=363): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800"/16], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x800) fcntl$dupfd(r2, 0x0, r2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.994375234s ago: executing program 4 (id=365): socket(0x11, 0x5, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.857162096s ago: executing program 7 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}]}], {0x14}}, 0x90}}, 0x0) 8.654101786s ago: executing program 7 (id=369): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x80) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dc777", 0x3}, {&(0x7f0000000340)="2b70767e6d1998c4c971362c18b62e116cb01f45afb65b", 0x17}, {0x0}], 0x3}}], 0x1, 0x10014) 8.6120071s ago: executing program 0 (id=370): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 6.761116343s ago: executing program 0 (id=371): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[], 0x0) 6.672009912s ago: executing program 6 (id=372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 6.581604611s ago: executing program 0 (id=373): syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d"], 0x0) r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.302259848s ago: executing program 7 (id=374): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) read$snapshot(r0, 0x0, 0x0) 6.192583149s ago: executing program 6 (id=375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r1) 6.032068095s ago: executing program 7 (id=376): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.964114671s ago: executing program 7 (id=377): shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x80}, 0x101, 0xfffffffffffffff7, 0xffff, 0x43d, 0x0, 0x0, 0x7ff}) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880)="d68e4505a12718c8a38c4f2c4ce4c25499d814a927c0c972c8d18799d1adf262b39d8eda70cf96fab61f48375c68a8b63a5505c8170daadca87b1d7b8c626af087989730ce453ccca139eb88efc30f718c0a7407aaad19bc32dd293db3cef56ef5b75253a5378a51b3e55ac96cc9c3854eb9923efbf584218d8bab7b91af51d8bc0cbed8e6b4199db44264e66d36ab9bd43f58845d38ff62df8442c3b000329aba6370791c4ae6a700210fd8e3e39ce9", &(0x7f0000000940)="e1bb3707cbdaa129348dcf1b6b0e6a42482fdf7174ee87eda3d3fcea72eaa36baae0077db3ce3aa080e35b852657a4492988421aa5c21811e344b69ab424e742744ca4502a75a856582f"}}, &(0x7f0000000840)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000070004", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40c03) 5.87388098s ago: executing program 4 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x409, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x10) 5.741718894s ago: executing program 4 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x5c}}, 0x0) 5.741152584s ago: executing program 2 (id=380): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 5.708150067s ago: executing program 4 (id=381): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000100)={0xc, 0x6d1, 0x3, {0xa, @pix={0xfff, 0x3, 0x50313134, 0x3, 0x81, 0x2, 0x7, 0xf, 0x0, 0x2, 0x2, 0x6}}}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r2}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_ts_info}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) 4.668055699s ago: executing program 4 (id=382): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="200d0001000013"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.484105978s ago: executing program 6 (id=383): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0xff) 4.3542939s ago: executing program 6 (id=384): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4f, 0x10001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xffdfffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001]}}) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3.44170818s ago: executing program 6 (id=385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 3.172134217s ago: executing program 2 (id=386): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x0, r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) 3.127210311s ago: executing program 2 (id=387): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 3.108727723s ago: executing program 0 (id=388): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffff"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) write$tun(r3, 0x0, 0x62) 2.740139739s ago: executing program 2 (id=389): socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\r\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x6) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x3, 0xfffbfffd, 0x3, 0x4f, "1c419208876b000000820b0000000000000d00", 0x6, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x72) unshare(0x28060400) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000000c0)={0x800, 0x66, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'dvmrp0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r4, 0x0, 0x0) 2.63481616s ago: executing program 6 (id=390): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 164.744103ms ago: executing program 7 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x5c}}, 0x0) 0s ago: executing program 4 (id=392): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000980)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, 0x0) kernel console output (not intermixed with test programs): rying later): interface not active [ 70.687669][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.694674][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.720755][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.735675][ T4192] team0: Port device team_slave_0 added [ 70.743388][ T4192] team0: Port device team_slave_1 added [ 70.761770][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.769204][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.778136][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.785101][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.811562][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.867074][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.874198][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.901077][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.923747][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.931080][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.937814][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.945652][ T4183] Cannot create hsr debugfs directory [ 70.972505][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.979567][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.005728][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.043296][ T4184] device hsr_slave_0 entered promiscuous mode [ 71.050356][ T4184] device hsr_slave_1 entered promiscuous mode [ 71.056864][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.064613][ T4184] Cannot create hsr debugfs directory [ 71.118372][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 71.125278][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 71.127582][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 71.132248][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 71.143722][ T4188] Bluetooth: hci1: command 0x0409 tx timeout [ 71.157438][ T4192] device hsr_slave_0 entered promiscuous mode [ 71.164297][ T4192] device hsr_slave_1 entered promiscuous mode [ 71.171145][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.178895][ T4192] Cannot create hsr debugfs directory [ 71.194177][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.201158][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.208223][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.215806][ T4185] Cannot create hsr debugfs directory [ 71.371927][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378553][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.515290][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.538992][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.554125][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.564192][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.578850][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.594551][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.630499][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.656237][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.680139][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.693696][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.720927][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.730125][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.801129][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.832455][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.853323][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.864675][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.874657][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.921356][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.948649][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.959678][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.980922][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.990513][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.999793][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.006998][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.015775][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.028181][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.037125][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.044265][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.054218][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.065666][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.074501][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.083832][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.095091][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.104719][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.119814][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.141295][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.149301][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.199886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.209638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.218511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.227230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.235831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.246469][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.265589][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.275727][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.284500][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291617][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.300813][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.309911][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.318991][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.326070][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.333906][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.342904][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.352921][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.363620][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.380751][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.397087][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.413162][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.436789][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.444876][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.453524][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.462508][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.472553][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.481503][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.490208][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.506675][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.514795][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.523863][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.532868][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.539972][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.548337][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.557069][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.565828][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.572931][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.583914][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.592246][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.602066][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.667536][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.676286][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.698847][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.710532][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.720590][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.730615][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.739796][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.748812][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.757222][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.766676][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.784529][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.795567][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.805322][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.825287][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.837537][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.854701][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.874665][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.896477][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.910488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.919936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.928921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.938594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.947150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.956220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.964872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.973713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.982044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.023308][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.040062][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.058417][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.065949][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.081944][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.094702][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.101858][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.115489][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.125335][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.135747][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.142889][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.151293][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.162536][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.175425][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.193372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.202021][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 73.207835][ T2304] Bluetooth: hci1: command 0x041b tx timeout [ 73.208944][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 73.217723][ T2304] Bluetooth: hci2: command 0x041b tx timeout [ 73.222173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.234564][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 73.241635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.268900][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.275883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.286512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.298548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.323507][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.335355][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.344947][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.355938][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.371078][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.380755][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.400869][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.415471][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.424551][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.433428][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.440682][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.450217][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.459851][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.468547][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.475613][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.483446][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.492552][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.501805][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.511278][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.526547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.534551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.550514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.602855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.621517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.635087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.644649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.653982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.662994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.673430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.682098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.690462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.700239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.709019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.718625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.726909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.735103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.743271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.754279][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.765847][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.776997][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.785697][ T4182] device veth0_vlan entered promiscuous mode [ 73.820041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.838733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.862429][ T4182] device veth1_vlan entered promiscuous mode [ 73.918795][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.929068][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.969790][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.977289][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.987141][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.003530][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.033263][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.052953][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.062742][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.071355][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.080328][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.090077][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.098440][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.106847][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.115165][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.125569][ T4182] device veth0_macvtap entered promiscuous mode [ 74.133396][ T4183] device veth0_vlan entered promiscuous mode [ 74.141331][ T4192] device veth0_vlan entered promiscuous mode [ 74.164588][ T4182] device veth1_macvtap entered promiscuous mode [ 74.182043][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.190807][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.199230][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.209878][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.220618][ T4192] device veth1_vlan entered promiscuous mode [ 74.233403][ T4183] device veth1_vlan entered promiscuous mode [ 74.249871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.259175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.267819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.275281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.305282][ T4184] device veth0_vlan entered promiscuous mode [ 74.315928][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.324935][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.333452][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.342956][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.353185][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.362950][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.393236][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.405015][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.413288][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.422099][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.431383][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.441878][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.450698][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.459940][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.472252][ T4183] device veth0_macvtap entered promiscuous mode [ 74.485291][ T4184] device veth1_vlan entered promiscuous mode [ 74.499591][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.513318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.524140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.536731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.551632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.590032][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.600103][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.609723][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.618856][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.631646][ T4183] device veth1_macvtap entered promiscuous mode [ 74.642684][ T4192] device veth0_macvtap entered promiscuous mode [ 74.659925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.669003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.677225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.686996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.696892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.741551][ T4192] device veth1_macvtap entered promiscuous mode [ 74.753025][ T4184] device veth0_macvtap entered promiscuous mode [ 74.763173][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.774566][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.786560][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.810479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.820651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.836810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.853662][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.864747][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.881329][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.899176][ T4184] device veth1_macvtap entered promiscuous mode [ 74.914159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.925184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.945579][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.954746][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.969207][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.978723][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.007775][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.019498][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.030910][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.042544][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.054602][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.066517][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.079102][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.089211][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.099687][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.111225][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.134220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.144357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.154217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.165109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.178810][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.188479][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.197235][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.206256][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.229980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.239597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.253726][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.266084][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.276824][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.288095][ T4298] Bluetooth: hci4: command 0x040f tx timeout [ 75.288851][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.294528][ T4298] Bluetooth: hci3: command 0x040f tx timeout [ 75.310695][ T4298] Bluetooth: hci2: command 0x040f tx timeout [ 75.311157][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.316783][ T4298] Bluetooth: hci1: command 0x040f tx timeout [ 75.333487][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.334201][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 75.345518][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.362806][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.374328][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.385052][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.396709][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.406808][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.418185][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.429543][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.442490][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.451677][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.460704][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469499][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482712][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.493019][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.509180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.518976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.528635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.537253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.546314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.555028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.564050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.572544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.580687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.616784][ T4185] device veth0_vlan entered promiscuous mode [ 75.663251][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.673002][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.693123][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.753535][ T4185] device veth1_vlan entered promiscuous mode [ 75.766131][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785710][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.797097][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.819705][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.846800][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.863257][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.891421][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.904307][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.906223][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.940314][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.957904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.966231][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.989849][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.159308][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.177559][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.187905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.197219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.206306][ T4185] device veth0_macvtap entered promiscuous mode [ 76.437678][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.672555][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.689401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.928095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.047063][ T4185] device veth1_macvtap entered promiscuous mode [ 77.152096][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.190300][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.220863][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.241610][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.314945][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.368066][ T2304] Bluetooth: hci0: command 0x0419 tx timeout [ 77.382025][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.394392][ T2304] Bluetooth: hci1: command 0x0419 tx timeout [ 77.432404][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.442706][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.474269][ T2304] Bluetooth: hci2: command 0x0419 tx timeout [ 77.480671][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 77.480933][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.487029][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 77.505044][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.523826][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.612802][ T4318] loop2: detected capacity change from 0 to 256 [ 77.820060][ T4318] FAT-fs (loop2): Directory bread(block 64) failed [ 77.827276][ T4318] FAT-fs (loop2): Directory bread(block 65) failed [ 77.834429][ T4318] FAT-fs (loop2): Directory bread(block 66) failed [ 77.841807][ T4318] FAT-fs (loop2): Directory bread(block 67) failed [ 77.848972][ T4318] FAT-fs (loop2): Directory bread(block 68) failed [ 77.855765][ T4318] FAT-fs (loop2): Directory bread(block 69) failed [ 77.862875][ T4318] FAT-fs (loop2): Directory bread(block 70) failed [ 77.869633][ T4318] FAT-fs (loop2): Directory bread(block 71) failed [ 77.876684][ T4318] FAT-fs (loop2): Directory bread(block 72) failed [ 77.883462][ T4318] FAT-fs (loop2): Directory bread(block 73) failed [ 78.937316][ C0] sched: RT throttling activated [ 79.038125][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.817636][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.183842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.198669][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.246157][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.295296][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.307228][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.327044][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.339889][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.356120][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.386211][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.896441][ T4335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.124346][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.174908][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.233166][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242165][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.656420][ T4342] loop1: detected capacity change from 0 to 4096 [ 84.090303][ T4349] futex_wake_op: syz.2.12 tries to shift op by -1; fix this program [ 85.171319][ T4342] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.219004][ T4342] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 85.245720][ T4342] System zones: 0-5 [ 85.284085][ T4342] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 85.318017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.372166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.842694][ T4342] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 85.960460][ T4360] overlayfs: failed to resolve './bus': -2 [ 86.145641][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.170749][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.221956][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.255711][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.270376][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284721][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.385991][ T7] cfg80211: failed to load regulatory.db [ 87.515470][ T4380] loop3: detected capacity change from 0 to 256 [ 88.225049][ T4382] loop2: detected capacity change from 0 to 512 [ 88.371587][ T4382] ======================================================= [ 88.371587][ T4382] WARNING: The mand mount option has been deprecated and [ 88.371587][ T4382] and is ignored by this kernel. Remove the mand [ 88.371587][ T4382] option from the mount to silence this warning. [ 88.371587][ T4382] ======================================================= [ 89.027941][ T4380] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 89.901711][ T4382] EXT4-fs: failed to create workqueue [ 89.907254][ T4382] EXT4-fs (loop2): mount failed [ 90.052588][ T4389] device bridge0 entered promiscuous mode [ 90.058952][ T4389] device macsec1 entered promiscuous mode [ 90.071608][ T4389] bridge0: port 3(macsec1) entered blocking state [ 90.078377][ T4389] bridge0: port 3(macsec1) entered disabled state [ 90.607891][ T4389] device bridge0 left promiscuous mode [ 91.028474][ T4395] loop4: detected capacity change from 0 to 256 [ 92.180208][ T4395] FAT-fs (loop4): Directory bread(block 64) failed [ 92.186998][ T4395] FAT-fs (loop4): Directory bread(block 65) failed [ 92.194375][ T4395] FAT-fs (loop4): Directory bread(block 66) failed [ 92.201180][ T4395] FAT-fs (loop4): Directory bread(block 67) failed [ 92.208288][ T4395] FAT-fs (loop4): Directory bread(block 68) failed [ 92.215545][ T4395] FAT-fs (loop4): Directory bread(block 69) failed [ 92.222885][ T4395] FAT-fs (loop4): Directory bread(block 70) failed [ 92.229654][ T4395] FAT-fs (loop4): Directory bread(block 71) failed [ 92.236740][ T4395] FAT-fs (loop4): Directory bread(block 72) failed [ 92.243502][ T4395] FAT-fs (loop4): Directory bread(block 73) failed [ 93.047640][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.407719][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.431195][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.464192][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.502988][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.512404][ T4188] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.543234][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.574984][ T23] usb 4-1: config 0 descriptor?? [ 93.731016][ T4406] netlink: 96 bytes leftover after parsing attributes in process `syz.4.24'. [ 94.087157][ T4188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.144135][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 94.152606][ T4188] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 94.166896][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 94.174791][ T4188] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.197279][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.085185][ T4188] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.094332][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.102396][ T4188] usb 3-1: Product: syz [ 95.106582][ T4188] usb 3-1: Manufacturer: syz [ 95.111218][ T4188] usb 3-1: SerialNumber: syz [ 95.184977][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.195470][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.524199][ T21] usb 4-1: USB disconnect, device number 2 [ 96.126239][ T4425] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 96.168756][ C1] Illegal XDP return value 16128, expect packet loss! [ 96.303733][ T4415] fido_id[4415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 96.577918][ T4188] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 96.596419][ T4188] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 96.613114][ T4188] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 97.377101][ T4428] device syzkaller0 entered promiscuous mode [ 97.422215][ T4188] usb 3-1: USB disconnect, device number 2 [ 97.577463][ T26] audit: type=1326 audit(1761280766.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.632198][ T4440] loop4: detected capacity change from 0 to 512 [ 97.660511][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.686773][ T26] audit: type=1326 audit(1761280766.960:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.711221][ T26] audit: type=1326 audit(1761280766.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.735618][ T26] audit: type=1326 audit(1761280766.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.859185][ T26] audit: type=1326 audit(1761280766.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.891161][ T26] audit: type=1326 audit(1761280766.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 97.929923][ T26] audit: type=1326 audit(1761280766.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 98.078622][ T26] audit: type=1326 audit(1761280766.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b60ef8fc9 code=0x7ffc0000 [ 98.465670][ T26] audit: type=1326 audit(1761280767.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4443 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b995afc9 code=0x7ffc0000 [ 98.703835][ T26] audit: type=1326 audit(1761280767.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4443 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f74b995afc9 code=0x7ffc0000 [ 98.846350][ T4455] loop4: detected capacity change from 0 to 512 [ 98.933826][ T4460] loop3: detected capacity change from 0 to 512 [ 98.937812][ T4455] EXT4-fs (loop4): Ignoring removed oldalloc option [ 99.018756][ T4455] EXT4-fs (loop4): 1 truncate cleaned up [ 99.053484][ T4455] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 99.090161][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.107684][ T4460] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.445671][ T4472] loop2: detected capacity change from 0 to 2048 [ 99.846298][ T4176] loop2: p1 < > p4 [ 99.895903][ T4176] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.177184][ T4472] loop2: p1 < > p4 [ 100.192400][ T4484] loop4: detected capacity change from 0 to 512 [ 100.216832][ T4472] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.315610][ T4484] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.43: casefold flag without casefold feature [ 100.457501][ T4484] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.43: couldn't read orphan inode 15 (err -117) [ 100.491993][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 100.864156][ T4497] device syzkaller0 entered promiscuous mode [ 101.024251][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.040260][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 101.103466][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 101.139515][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.254897][ T4481] chnl_net:caif_netlink_parms(): no params data found [ 102.646669][ T4516] loop4: detected capacity change from 0 to 256 [ 102.914759][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 102.918631][ T26] audit: type=1326 audit(1761280771.130:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.923889][ T26] audit: type=1326 audit(1761280771.140:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.927530][ T26] audit: type=1326 audit(1761280771.160:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.932515][ T26] audit: type=1326 audit(1761280771.160:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.936030][ T26] audit: type=1326 audit(1761280771.160:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.938207][ T26] audit: type=1326 audit(1761280771.170:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.939485][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 102.943812][ T26] audit: type=1326 audit(1761280771.170:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.946077][ T26] audit: type=1326 audit(1761280771.170:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.947337][ T26] audit: type=1326 audit(1761280771.180:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 102.949153][ T26] audit: type=1326 audit(1761280771.190:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f8c5afc9 code=0x7ffc0000 [ 103.641264][ T4516] FAT-fs (loop4): Directory bread(block 64) failed [ 103.648158][ T4516] FAT-fs (loop4): Directory bread(block 65) failed [ 103.655234][ T4516] FAT-fs (loop4): Directory bread(block 66) failed [ 103.662049][ T4516] FAT-fs (loop4): Directory bread(block 67) failed [ 103.669657][ T4516] FAT-fs (loop4): Directory bread(block 68) failed [ 103.676474][ T4516] FAT-fs (loop4): Directory bread(block 69) failed [ 103.692311][ T4516] FAT-fs (loop4): Directory bread(block 70) failed [ 103.699167][ T4516] FAT-fs (loop4): Directory bread(block 71) failed [ 103.706452][ T4516] FAT-fs (loop4): Directory bread(block 72) failed [ 103.713273][ T4516] FAT-fs (loop4): Directory bread(block 73) failed [ 104.281791][ T4523] loop3: detected capacity change from 0 to 1024 [ 104.545810][ T4524] device wg2 entered promiscuous mode [ 105.381047][ T4535] loop2: detected capacity change from 0 to 1024 [ 105.425940][ T4299] Bluetooth: hci5: command 0x041b tx timeout [ 105.551833][ T4535] EXT4-fs (loop2): Ignoring removed orlov option [ 105.612240][ T4523] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.792720][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 105.938628][ T4535] Zero length message leads to an empty skb [ 105.951309][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.958554][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.966760][ T4481] device bridge_slave_0 entered promiscuous mode [ 106.647586][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,nouid32,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 106.699963][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.807377][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.849314][ T4481] device bridge_slave_1 entered promiscuous mode [ 111.995635][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 112.612308][ T4481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.698673][ T4481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.866770][ T4386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.936914][ T4481] team0: Port device team_slave_0 added [ 112.951767][ T4481] team0: Port device team_slave_1 added [ 113.500142][ T4566] loop4: detected capacity change from 0 to 256 [ 113.690269][ T4566] FAT-fs (loop4): Directory bread(block 64) failed [ 113.697109][ T4566] FAT-fs (loop4): Directory bread(block 65) failed [ 113.704242][ T4566] FAT-fs (loop4): Directory bread(block 66) failed [ 113.711000][ T4566] FAT-fs (loop4): Directory bread(block 67) failed [ 113.718104][ T4566] FAT-fs (loop4): Directory bread(block 68) failed [ 113.724799][ T4566] FAT-fs (loop4): Directory bread(block 69) failed [ 113.732233][ T4566] FAT-fs (loop4): Directory bread(block 70) failed [ 113.739122][ T4566] FAT-fs (loop4): Directory bread(block 71) failed [ 113.746227][ T4566] FAT-fs (loop4): Directory bread(block 72) failed [ 113.753034][ T4566] FAT-fs (loop4): Directory bread(block 73) failed [ 114.678313][ T4386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.125307][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.145060][ T4299] Bluetooth: hci5: command 0x0419 tx timeout [ 115.537760][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.604061][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.737457][ T13] usb 3-1: string descriptor 0 read error: -71 [ 115.746581][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.790689][ T4386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.820218][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.917794][ T13] usb 3-1: can't set config #1, error -71 [ 115.926434][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.998407][ T13] usb 3-1: USB disconnect, device number 3 [ 116.025981][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.123689][ T4630] loop2: detected capacity change from 0 to 256 [ 116.172829][ T4481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.206572][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.229919][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.256065][ T4630] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.266742][ T4630] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 116.286224][ T4630] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.317685][ T4481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.344211][ T4386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.375685][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.390164][ T4630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.534434][ T4481] device hsr_slave_0 entered promiscuous mode [ 116.548006][ T4481] device hsr_slave_1 entered promiscuous mode [ 116.557903][ T4481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.575593][ T4481] Cannot create hsr debugfs directory [ 116.773828][ T4642] loop0: detected capacity change from 0 to 256 [ 116.813325][ T4642] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.856021][ T4642] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 116.926866][ T4642] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 117.687212][ T4650] loop3: detected capacity change from 0 to 2048 [ 117.962984][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.088395][ T4481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.114372][ T4481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.141702][ T4652] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz.3.72: lblock 0 mapped to illegal pblock 16 (length 1) [ 118.176901][ T4481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.803556][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 118.803574][ T26] audit: type=1800 audit(1761280788.230:58): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.70" name="file1" dev="loop0" ino=1048593 res=0 errno=0 [ 118.881437][ T4481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.274375][ T4183] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 119.387950][ T4183] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 119.507742][ T4183] EXT4-fs error (device loop3): ext4_dirty_inode:6046: inode #2: comm syz-executor: mark_inode_dirty error [ 119.580937][ T4481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.706143][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.738479][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.809370][ T4481] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.883923][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.911359][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.958054][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.965513][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.974393][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.190595][ T4279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.270015][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.281276][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.305674][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.312858][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.343215][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.418495][ T4708] 9pnet: Insufficient options for proto=fd [ 120.457662][ T4279] usb 3-1: Using ep0 maxpacket: 8 [ 120.511289][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.639650][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.686308][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.688011][ T4279] usb 3-1: config 0 has no interfaces? [ 120.722373][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.735708][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.571803][ T4260] hid (null): bogus close delimiter [ 121.598927][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.627510][ T4260] hid (null): unknown global tag 0xe [ 121.647354][ T4260] hid (null): unknown global tag 0xe [ 121.652728][ T4260] hid (null): unknown global tag 0xc [ 121.703068][ T4260] hid (null): unknown global tag 0xc [ 121.730832][ T4260] hid (null): report_id 0 is invalid [ 121.763310][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.774927][ T4260] hid (null): unknown global tag 0xc [ 121.777520][ T4279] usb 3-1: string descriptor 0 read error: -71 [ 121.786556][ T4279] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 121.793225][ T4260] hid (null): invalid report_count 34832 [ 121.811693][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.824309][ T4260] hid (null): unknown global tag 0xe [ 121.831246][ T4279] usb 3-1: config 0 descriptor?? [ 121.851352][ T4260] hid (null): report_id 0 is invalid [ 121.859666][ T4279] usb 3-1: can't set config #0, error -71 [ 121.866711][ T4260] hid (null): unknown global tag 0xc [ 121.883880][ T4279] usb 3-1: USB disconnect, device number 4 [ 121.890838][ T4260] hid (null): invalid report_count 17407 [ 121.896978][ T4260] hid (null): unknown global tag 0xd [ 121.922018][ T4260] hid (null): invalid report_size 42226 [ 121.937512][ T4260] hid (null): unknown global tag 0xc [ 121.942990][ T4260] hid (null): unknown global tag 0x7d [ 121.950775][ T4260] hid (null): unknown global tag 0xe [ 121.956196][ T4260] hid (null): unknown global tag 0xe [ 121.962113][ T4260] hid (null): unknown global tag 0x28 [ 121.967863][ T4260] hid (null): report_id 109135514 is invalid [ 121.973987][ T4260] hid (null): unknown global tag 0x77 [ 121.979865][ T4260] hid (null): report_id 0 is invalid [ 121.985228][ T4260] hid (null): bogus close delimiter [ 121.990929][ T4260] hid (null): unknown global tag 0xc [ 121.996309][ T4260] hid (null): unknown global tag 0xc [ 122.002254][ T4260] hid (null): unknown global tag 0xc [ 122.010515][ T4260] hid (null): unknown global tag 0x23 [ 122.023101][ T4260] hid (null): report_id 605750692 is invalid [ 122.030572][ T4260] hid (null): invalid report_size 46881 [ 122.036385][ T4260] hid (null): unknown global tag 0xc [ 122.051807][ T4260] hid (null): unknown global tag 0xe [ 122.057139][ T4260] hid (null): unknown global tag 0xd [ 122.064085][ T4260] hid (null): global environment stack overflow [ 122.073441][ T4260] hid (null): unknown global tag 0xe [ 122.080368][ T4260] hid (null): invalid report_size 24840 [ 122.085957][ T4260] hid (null): unknown global tag 0xd [ 122.091401][ T4260] hid (null): invalid report_size 788182346 [ 122.097404][ T4260] hid (null): unknown global tag 0xe [ 122.102702][ T4260] hid (null): invalid report_count 39791 [ 122.112212][ T4260] hid-generic 0002:0004:F02C.0002: unknown main item tag 0xd [ 122.121580][ T4260] hid-generic 0002:0004:F02C.0002: unknown main item tag 0x4 [ 122.129421][ T4260] hid-generic 0002:0004:F02C.0002: unexpected long global item [ 122.137456][ T4260] hid-generic: probe of 0002:0004:F02C.0002 failed with error -22 [ 122.151212][ T4720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.197088][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.206549][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.215273][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.224767][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.323573][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.852356][ T4746] loop2: detected capacity change from 0 to 512 [ 122.999573][ T4746] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 123.006911][ T4746] EXT4-fs (loop2): inline encryption not supported [ 123.015194][ T4746] EXT4-fs (loop2): Test dummy encryption mode enabled [ 123.022199][ T4746] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 123.029533][ T4746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.043837][ T4746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.269773][ T4746] EXT4-fs (loop2): 1 truncate cleaned up [ 123.275533][ T4746] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 124.941339][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 125.271243][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.284084][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.427080][ T4481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.842458][ T4728] chnl_net:caif_netlink_parms(): no params data found [ 125.985224][ T4386] device hsr_slave_0 left promiscuous mode [ 126.017434][ T4386] device hsr_slave_1 left promiscuous mode [ 126.028908][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.057884][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.099850][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.122510][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.163801][ T4386] device bridge_slave_1 left promiscuous mode [ 126.182230][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.247056][ T4386] device bridge_slave_0 left promiscuous mode [ 126.262727][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.508637][ T4386] device veth1_macvtap left promiscuous mode [ 126.515179][ T4386] device veth0_macvtap left promiscuous mode [ 126.534276][ T4386] device veth1_vlan left promiscuous mode [ 126.540646][ T4386] device veth0_vlan left promiscuous mode [ 127.490040][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 127.631608][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 127.675581][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 127.878835][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.950988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 127.960181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 127.969332][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 127.978575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 127.987701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 127.996885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 128.006032][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 128.015130][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 128.024225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 128.033360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 128.155516][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.796597][ T4386] bond0 (unregistering): Released all slaves [ 129.626345][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.644206][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.675104][ T4728] device bridge_slave_0 entered promiscuous mode [ 129.708900][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.730875][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.747654][ T4728] device bridge_slave_1 entered promiscuous mode [ 129.804737][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.825264][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.875817][ T4728] team0: Port device team_slave_0 added [ 129.895341][ T4728] team0: Port device team_slave_1 added [ 129.937029][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.946221][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 129.958094][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.985809][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.687190][ T4836] syz.4.102 uses obsolete (PF_INET,SOCK_PACKET) [ 130.789954][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.796975][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.842634][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.021969][ T4728] device hsr_slave_0 entered promiscuous mode [ 131.032044][ T4728] device hsr_slave_1 entered promiscuous mode [ 131.045200][ T4728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.054463][ T4728] Cannot create hsr debugfs directory [ 131.207512][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.248227][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.627159][ T4616] Bluetooth: hci3: Frame reassembly failed (-84) [ 132.010240][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 132.274688][ T4481] device veth0_vlan entered promiscuous mode [ 132.283132][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.318425][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.342538][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.362897][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.841254][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.851083][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.076575][ T4481] device veth1_vlan entered promiscuous mode [ 133.278114][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.375490][ T4857] loop2: detected capacity change from 0 to 256 [ 133.457845][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.597486][ T4260] Bluetooth: hci3: command 0x1003 tx timeout [ 133.667247][ T4201] Bluetooth: hci3: sending frame failed (-49) [ 133.977935][ T4857] FAT-fs (loop2): Directory bread(block 64) failed [ 133.984792][ T4857] FAT-fs (loop2): Directory bread(block 65) failed [ 133.991953][ T4857] FAT-fs (loop2): Directory bread(block 66) failed [ 133.999205][ T4857] FAT-fs (loop2): Directory bread(block 67) failed [ 134.006284][ T4857] FAT-fs (loop2): Directory bread(block 68) failed [ 134.013365][ T4857] FAT-fs (loop2): Directory bread(block 69) failed [ 134.020528][ T4857] FAT-fs (loop2): Directory bread(block 70) failed [ 134.027252][ T4857] FAT-fs (loop2): Directory bread(block 71) failed [ 134.034379][ T4857] FAT-fs (loop2): Directory bread(block 72) failed [ 134.041095][ T4857] FAT-fs (loop2): Directory bread(block 73) failed [ 135.910142][ T2857] Bluetooth: hci3: command 0x1001 tx timeout [ 135.918142][ T4201] Bluetooth: hci3: sending frame failed (-49) [ 135.935701][ T4481] device veth0_macvtap entered promiscuous mode [ 135.948629][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.968370][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.996789][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.063735][ T4481] device veth1_macvtap entered promiscuous mode [ 136.263659][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.305197][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.325859][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.346875][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.370141][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.391779][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.432539][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.483828][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.518218][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.552372][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.604407][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.632062][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.654792][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.676194][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.691507][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.723545][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.754637][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.775493][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.806698][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.831430][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.876732][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.896055][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.916797][ T4481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.932910][ T4481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.967399][ T4481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.996511][ T4481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.057779][ T4728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.101968][ T4728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.150258][ T4728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.164346][ T4728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.531357][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.568114][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.607460][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.703880][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.719845][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.748313][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.770643][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.798297][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.853580][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.898520][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.945160][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.007801][ T2857] Bluetooth: hci3: command 0x1009 tx timeout [ 138.018648][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.054750][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.061927][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.154761][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.197105][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.205745][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.212860][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.221861][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.299175][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.326565][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.335754][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.379898][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.404327][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.434794][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.452643][ T4891] loop5: detected capacity change from 0 to 512 [ 138.467901][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.510194][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.531099][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.583753][ T4891] EXT4-fs (loop5): inline encryption not supported [ 138.631601][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.634287][ T4891] EXT4-fs (loop5): Ignoring removed oldalloc option [ 138.641819][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.679627][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.709961][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.823048][ T4891] netlink: 96 bytes leftover after parsing attributes in process `syz.5.35'. [ 138.942137][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.181091][ T4906] tipc: Started in network mode [ 139.186315][ T4906] tipc: Node identity cea2d9c649c6, cluster identity 4711 [ 139.320721][ T4906] tipc: Enabled bearer , priority 0 [ 139.343367][ T4911] device syzkaller0 entered promiscuous mode [ 139.813647][ T4906] tipc: Resetting bearer [ 140.025874][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.081259][ T4904] tipc: Resetting bearer [ 140.135008][ T4904] tipc: Disabling bearer [ 141.041190][ T4260] tipc: Node number set to 2271533510 [ 141.094913][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.103065][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.429624][ T4955] loop5: detected capacity change from 0 to 256 [ 144.068663][ T4955] FAT-fs (loop5): Directory bread(block 64) failed [ 144.075616][ T4955] FAT-fs (loop5): Directory bread(block 65) failed [ 144.082756][ T4955] FAT-fs (loop5): Directory bread(block 66) failed [ 144.089511][ T4955] FAT-fs (loop5): Directory bread(block 67) failed [ 144.096568][ T4955] FAT-fs (loop5): Directory bread(block 68) failed [ 144.103344][ T4955] FAT-fs (loop5): Directory bread(block 69) failed [ 144.110387][ T4955] FAT-fs (loop5): Directory bread(block 70) failed [ 144.117057][ T4955] FAT-fs (loop5): Directory bread(block 71) failed [ 144.124118][ T4955] FAT-fs (loop5): Directory bread(block 72) failed [ 144.131393][ T4955] FAT-fs (loop5): Directory bread(block 73) failed [ 145.102947][ T4962] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.960971][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.978566][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.021076][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.032751][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.065970][ T4728] device veth0_vlan entered promiscuous mode [ 146.267571][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.286692][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.382466][ T4980] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.460374][ T4980] F2FS-fs (loop1): Unable to read 1th superblock [ 146.487493][ T4980] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.506447][ T4980] F2FS-fs (loop1): Unable to read 2th superblock [ 146.512944][ T4728] device veth1_vlan entered promiscuous mode [ 146.701733][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.724248][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.778268][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.888245][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.003787][ T4728] device veth0_macvtap entered promiscuous mode [ 147.048604][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.093755][ T4728] device veth1_macvtap entered promiscuous mode [ 147.219788][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.277966][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.327489][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.367362][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.407705][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.447382][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.508291][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.597708][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.661302][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.717613][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.776692][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.799365][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.815102][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.859613][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.597355][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.655159][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.676101][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.697609][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.734405][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.758852][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.771210][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.784870][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.797215][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.855953][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.002231][ T4386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.030336][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.089417][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.189315][ T4728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.297678][ T4728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.312080][ T4728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.321710][ T4728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.559742][ T4386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.594706][ T4386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.609257][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.683053][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.757650][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.394097][ T5021] loop2: detected capacity change from 0 to 512 [ 151.394725][ T4386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.461806][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.127'. [ 151.463794][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.481013][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.509302][ T5021] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 151.533719][ T5021] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.641534][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.751876][ T5031] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 153.255217][ T5058] affs: No valid root block on device nullb0 [ 153.947334][ T5064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 154.303454][ T5074] loop4: detected capacity change from 0 to 256 [ 157.077354][ T5074] FAT-fs (loop4): Directory bread(block 64) failed [ 157.084114][ T5074] FAT-fs (loop4): Directory bread(block 65) failed [ 157.090991][ T5074] FAT-fs (loop4): Directory bread(block 66) failed [ 157.097717][ T5074] FAT-fs (loop4): Directory bread(block 67) failed [ 157.104415][ T5074] FAT-fs (loop4): Directory bread(block 68) failed [ 157.111063][ T5074] FAT-fs (loop4): Directory bread(block 69) failed [ 157.118100][ T5074] FAT-fs (loop4): Directory bread(block 70) failed [ 157.124778][ T5074] FAT-fs (loop4): Directory bread(block 71) failed [ 157.131496][ T5074] FAT-fs (loop4): Directory bread(block 72) failed [ 157.139150][ T5074] FAT-fs (loop4): Directory bread(block 73) failed [ 157.636677][ T5077] device syzkaller0 entered promiscuous mode [ 158.186853][ T4386] device hsr_slave_0 left promiscuous mode [ 158.205312][ T4386] device hsr_slave_1 left promiscuous mode [ 158.216374][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.234928][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.343041][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.366660][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.394924][ T4386] device bridge_slave_1 left promiscuous mode [ 158.415164][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.444905][ T4386] device bridge_slave_0 left promiscuous mode [ 158.483237][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.541452][ T5096] 9pnet: Insufficient options for proto=fd [ 158.805827][ T4386] device veth1_macvtap left promiscuous mode [ 158.812642][ T4386] device veth0_macvtap left promiscuous mode [ 158.824684][ T4386] device veth1_vlan left promiscuous mode [ 158.834256][ T4386] device veth0_vlan left promiscuous mode [ 159.406287][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 159.462663][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 159.495946][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.514323][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.645345][ T4386] bond0 (unregistering): Released all slaves [ 159.991666][ T5119] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 160.127402][ T4398] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.538466][ T4398] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.595511][ T5134] vivid-001: ================= START STATUS ================= [ 160.604294][ T5134] vivid-001: Generate PTS: true [ 160.609718][ T5134] vivid-001: Generate SCR: true [ 160.614823][ T5134] tpg source WxH: 640x360 (Y'CbCr) [ 160.620796][ T5134] tpg field: 1 [ 160.624454][ T5134] tpg crop: 640x360@0x0 [ 160.628755][ T5134] tpg compose: 640x360@0x0 [ 160.633304][ T5134] tpg colorspace: 8 [ 160.637253][ T5134] tpg transfer function: 0/0 [ 160.641991][ T5134] tpg Y'CbCr encoding: 0/0 [ 160.646552][ T5134] tpg quantization: 0/0 [ 160.650860][ T5134] tpg RGB range: 0/2 [ 160.654907][ T5134] vivid-001: ================== END STATUS ================== [ 161.257340][ T4398] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.268034][ T4398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.277421][ T4398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 161.458469][ T4398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 161.707579][ T4398] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.739915][ T4398] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.817686][ T5149] loop4: detected capacity change from 0 to 256 [ 161.826089][ T4398] usb 1-1: Product: syz [ 161.833633][ T4398] usb 1-1: Manufacturer: syz [ 161.979006][ T4398] cdc_wdm 1-1:1.0: skipping garbage [ 162.003885][ T4398] cdc_wdm 1-1:1.0: skipping garbage [ 162.069229][ T4398] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 162.086960][ T4398] cdc_wdm 1-1:1.0: Unknown control protocol [ 162.944230][ T4186] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.342954][ T4398] usb 1-1: USB disconnect, device number 2 [ 164.382993][ T5157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.738238][ T5149] FAT-fs (loop4): Directory bread(block 64) failed [ 164.745201][ T5149] FAT-fs (loop4): Directory bread(block 65) failed [ 164.752092][ T5149] FAT-fs (loop4): Directory bread(block 66) failed [ 164.758794][ T5149] FAT-fs (loop4): Directory bread(block 67) failed [ 164.765491][ T5149] FAT-fs (loop4): Directory bread(block 68) failed [ 164.772254][ T5149] FAT-fs (loop4): Directory bread(block 69) failed [ 164.779027][ T5149] FAT-fs (loop4): Directory bread(block 70) failed [ 164.785685][ T5149] FAT-fs (loop4): Directory bread(block 71) failed [ 164.792398][ T5149] FAT-fs (loop4): Directory bread(block 72) failed [ 164.800686][ T5149] FAT-fs (loop4): Directory bread(block 73) failed [ 165.407366][ T4186] usb 3-1: device not accepting address 5, error -71 [ 166.103199][ T5160] device syzkaller0 entered promiscuous mode [ 166.262917][ T5173] loop4: detected capacity change from 0 to 512 [ 166.477075][ T5171] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.574778][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 166.670259][ T5173] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.893433][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 167.939304][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.958753][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.980777][ T5187] device bridge_slave_0 entered promiscuous mode [ 168.019757][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.037752][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.070988][ T5187] device bridge_slave_1 entered promiscuous mode [ 168.523338][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.588685][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.638864][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 169.863586][ T5187] team0: Port device team_slave_0 added [ 169.899200][ T5187] team0: Port device team_slave_1 added [ 170.000946][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.021497][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.091867][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.145057][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.187596][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.311559][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.536876][ T5187] device hsr_slave_0 entered promiscuous mode [ 170.612583][ T5187] device hsr_slave_1 entered promiscuous mode [ 170.689481][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.714946][ T5187] Cannot create hsr debugfs directory [ 170.727435][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 170.833364][ T5243] device syzkaller0 entered promiscuous mode [ 171.718215][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 171.743620][ T5187] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.860211][ T5187] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.046756][ T5187] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.128708][ T5265] netlink: 34 bytes leftover after parsing attributes in process `syz.2.169'. [ 172.157642][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.205461][ T7] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.288584][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.861375][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 172.864328][ T7] usb 7-1: config 0 descriptor?? [ 172.910295][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 172.920259][ T5187] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 173.337450][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 173.377393][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 173.417804][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 173.456696][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.463602][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.487240][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.507705][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.518462][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.544015][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.551272][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.597640][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 174.145546][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.145564][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 174.166755][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.220638][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.227844][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.247480][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 174.257601][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.266519][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.276310][ C1] vcan0: j1939_tp_txtimer: 0xffff88805f514c00: tx aborted with unknown reason: -2 [ 174.287556][ T7] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.300948][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.337528][ T7] pwc: recv_control_msg error -32 req 02 val 2600 [ 174.353532][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.360773][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.386438][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.394844][ T7] pwc: recv_control_msg error -32 req 02 val 2900 [ 174.414352][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.447509][ T7] pwc: recv_control_msg error -32 req 02 val 2800 [ 174.473636][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.521056][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.530372][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.540894][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.572994][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.591501][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.605598][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.617171][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.634635][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.669352][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.707662][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.727890][ T7] pwc: Registered as video103. [ 174.740551][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 174.777439][ T4279] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.787148][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f514c00: abort rx timeout. Force session deactivation [ 174.798100][ T7] usb 7-1: USB disconnect, device number 2 [ 174.957395][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 175.083209][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.098297][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.144613][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.158865][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.176538][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.250102][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 175.278027][ T5316] loop2: detected capacity change from 0 to 512 [ 175.313921][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 176.057722][ T4279] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 176.104936][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.119533][ T5316] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 176.137629][ T5316] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.139214][ T4279] usb 5-1: Product: syz [ 176.155690][ T4279] usb 5-1: Manufacturer: syz [ 176.162755][ T4279] usb 5-1: SerialNumber: syz [ 176.185941][ T4279] usb 5-1: config 0 descriptor?? [ 176.452244][ T4279] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 176.550715][ T5326] device syzkaller0 entered promiscuous mode [ 176.724278][ T13] usb 5-1: USB disconnect, device number 2 [ 176.830953][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.843919][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.878696][ T5187] device veth0_vlan entered promiscuous mode [ 176.899456][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.909824][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.956210][ T5187] device veth1_vlan entered promiscuous mode [ 177.009279][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.018877][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.051340][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.068149][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.229476][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.256479][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.400272][ T5187] device veth0_macvtap entered promiscuous mode [ 177.481230][ T5187] device veth1_macvtap entered promiscuous mode [ 177.545880][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.579133][ T5347] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.597493][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.633985][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.687636][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.736788][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.773837][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.810976][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.856885][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.907953][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.026461][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.284317][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.316339][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.517555][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.631850][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.650400][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.018453][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.203013][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.233638][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.278857][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.307467][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.358881][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.404541][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.518907][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.557405][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.600478][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.735237][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.761384][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.514627][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.588381][ T5187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.630813][ T5187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.657353][ T5187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.671435][ T5187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.938028][ T4188] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 180.989211][ T4602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.021661][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.040575][ T4602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.056951][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.068152][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.101770][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.207459][ T4188] usb 7-1: Using ep0 maxpacket: 16 [ 181.467849][ T4188] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.474733][ T4188] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 181.490995][ T5395] tmpfs: Unknown parameter 'quota' [ 181.555214][ T4188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.470554][ T4188] usb 7-1: config 0 descriptor?? [ 182.854960][ T5401] device syzkaller0 entered promiscuous mode [ 182.998981][ T4188] hid (null): unknown global tag 0xd [ 183.014656][ T4188] hid (null): invalid report_size 22610 [ 183.422856][ T4188] usb 7-1: USB disconnect, device number 3 [ 184.266488][ T5434] capability: warning: `syz.7.194' uses 32-bit capabilities (legacy support in use) [ 184.477688][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 184.737609][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 184.857467][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.897448][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.924400][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 184.952273][ T7] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 184.983235][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.023081][ T7] usb 7-1: config 0 descriptor?? [ 185.619951][ T7] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0004/input/input8 [ 185.896289][ T7] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 188.253117][ T4279] usb 7-1: USB disconnect, device number 4 [ 191.207429][ T4188] Bluetooth: hci2: command 0x0406 tx timeout [ 191.215334][ T4188] Bluetooth: hci0: command 0x0406 tx timeout [ 191.237225][ T4188] Bluetooth: hci4: command 0x0406 tx timeout [ 191.457404][ T13] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 192.759118][ T5511] process 'syz.2.209' launched './file0' with NULL argv: empty string added [ 192.771383][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 192.867419][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.897786][ T13] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 192.931428][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.971155][ T13] usb 7-1: config 0 descriptor?? [ 193.029313][ T13] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 193.119506][ T4241] usb 5-1: Using ep0 maxpacket: 8 [ 193.247530][ T4241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.277222][ T4241] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.361471][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.424874][ T4241] usb 5-1: config 0 descriptor?? [ 193.489526][ T4241] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 193.696051][ T4241] usb 5-1: USB disconnect, device number 3 [ 194.457090][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463584][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475144][ T13] usb 7-1: USB disconnect, device number 5 [ 195.935675][ T5562] device syzkaller0 entered promiscuous mode [ 197.214070][ T13] libceph: connect (1)[c::]:6789 error -101 [ 197.230220][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 197.245065][ T13] libceph: connect (1)[c::]:6789 error -101 [ 197.253457][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 197.317389][ T5593] device syzkaller0 entered promiscuous mode [ 197.359632][ T5578] ceph: No mds server is up or the cluster is laggy [ 197.533636][ T4279] libceph: connect (1)[c::]:6789 error -101 [ 197.545385][ T4279] libceph: mon0 (1)[c::]:6789 connect error [ 199.918277][ T5617] device syzkaller0 entered promiscuous mode [ 201.030785][ T5647] binder: BINDER_SET_CONTEXT_MGR already set [ 201.116972][ T5648] 9pnet: Insufficient options for proto=fd [ 201.510601][ T5647] binder: 5642:5647 ioctl 4018620d 200000000040 returned -16 [ 201.901394][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.242'. [ 201.917555][ T5661] netlink: 312 bytes leftover after parsing attributes in process `syz.7.242'. [ 202.649767][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 202.842757][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.242'. [ 204.569242][ T4279] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.878193][ T13] Bluetooth: hci3: command 0x0405 tx timeout [ 204.937695][ T4279] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 205.406979][ T4279] usb 5-1: config 0 has no interface number 0 [ 205.556791][ T4279] usb 5-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 205.619949][ T5693] device syzkaller0 entered promiscuous mode [ 205.675082][ T4279] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 205.793706][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.868932][ T4279] usb 5-1: config 0 descriptor?? [ 207.047985][ T4279] usb 5-1: USB disconnect, device number 4 [ 208.244953][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 208.330529][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.647377][ T4241] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 209.167599][ T4241] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.205645][ T4241] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.240985][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.702294][ T4241] usb 7-1: config 0 descriptor?? [ 209.753535][ T4241] pwc: Askey VC010 type 2 USB webcam detected. [ 210.207568][ T4241] pwc: recv_control_msg error -32 req 02 val 2b00 [ 210.248905][ T4241] pwc: recv_control_msg error -32 req 02 val 2700 [ 210.287469][ T4241] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.313201][ T5771] 9pnet: Insufficient options for proto=fd [ 211.157394][ T13] hid (null): bogus close delimiter [ 211.554587][ T4241] pwc: recv_control_msg error -32 req 04 val 1300 [ 211.747457][ T13] hid (null): unknown global tag 0xe [ 211.770786][ T13] hid (null): unknown global tag 0xe [ 211.787402][ T4241] pwc: recv_control_msg error -71 req 04 val 1400 [ 211.794077][ T13] hid (null): unknown global tag 0xc [ 211.801855][ T13] hid (null): unknown global tag 0xc [ 211.807697][ T13] hid (null): report_id 0 is invalid [ 211.815718][ T13] hid (null): unknown global tag 0xc [ 211.821898][ T4241] pwc: recv_control_msg error -71 req 02 val 2000 [ 211.864669][ T13] hid (null): invalid report_count 34832 [ 211.877818][ T4241] pwc: recv_control_msg error -71 req 02 val 2100 [ 211.935167][ T13] hid (null): unknown global tag 0xe [ 211.947409][ T4241] pwc: recv_control_msg error -71 req 04 val 1500 [ 211.965958][ T13] hid (null): report_id 0 is invalid [ 211.971757][ T4241] pwc: recv_control_msg error -71 req 02 val 2500 [ 212.000065][ T13] hid (null): unknown global tag 0xc [ 212.007940][ T13] hid (null): invalid report_count 17407 [ 212.017483][ T4241] pwc: recv_control_msg error -71 req 02 val 2400 [ 212.043380][ T13] hid (null): unknown global tag 0xd [ 212.057447][ T4241] pwc: recv_control_msg error -71 req 02 val 2600 [ 212.087749][ T13] hid (null): invalid report_size 42226 [ 212.093382][ T13] hid (null): unknown global tag 0xc [ 212.099345][ T4241] pwc: recv_control_msg error -71 req 02 val 2900 [ 212.117476][ T4241] pwc: recv_control_msg error -71 req 02 val 2800 [ 212.142082][ T13] hid (null): unknown global tag 0x7d [ 212.157703][ T4241] pwc: recv_control_msg error -71 req 04 val 1100 [ 212.172848][ T13] hid (null): unknown global tag 0xe [ 212.188889][ T13] hid (null): unknown global tag 0xe [ 212.194267][ T13] hid (null): unknown global tag 0x28 [ 212.200187][ T4241] pwc: recv_control_msg error -71 req 04 val 1200 [ 212.227885][ T4241] pwc: Registered as video103. [ 212.275544][ T4241] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 212.312318][ T13] hid (null): report_id 109135514 is invalid [ 212.342415][ T13] hid (null): unknown global tag 0x77 [ 212.360281][ T4241] usb 7-1: USB disconnect, device number 6 [ 212.373642][ T13] hid (null): report_id 0 is invalid [ 212.387238][ T13] hid (null): bogus close delimiter [ 212.402169][ T13] hid (null): unknown global tag 0xc [ 212.411658][ T13] hid (null): unknown global tag 0xc [ 212.417604][ T13] hid (null): unknown global tag 0xc [ 212.431718][ T13] hid (null): unknown global tag 0x23 [ 212.439963][ T13] hid (null): report_id 605750692 is invalid [ 212.457173][ T13] hid (null): invalid report_size 46881 [ 212.474237][ T13] hid (null): unknown global tag 0xc [ 212.493518][ T13] hid (null): unknown global tag 0xe [ 212.510309][ T13] hid (null): unknown global tag 0xd [ 212.524946][ T13] hid (null): global environment stack overflow [ 212.543012][ T13] hid (null): unknown global tag 0xe [ 212.570951][ T13] hid (null): invalid report_size 24840 [ 212.576813][ T13] hid (null): unknown global tag 0xd [ 212.586183][ T13] hid (null): invalid report_size 788182346 [ 212.593805][ T13] hid (null): unknown global tag 0xe [ 212.600163][ T13] hid (null): invalid report_count 39791 [ 212.624196][ T13] hid-generic 0002:0004:F02C.0006: unknown main item tag 0xd [ 212.635253][ T13] hid-generic 0002:0004:F02C.0006: unknown main item tag 0x4 [ 212.646195][ T13] hid-generic 0002:0004:F02C.0006: unexpected long global item [ 212.679801][ T13] hid-generic: probe of 0002:0004:F02C.0006 failed with error -22 [ 213.317416][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 213.537552][ T4241] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 213.760868][ T7] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 213.804053][ T7] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.830591][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.947739][ T4241] usb 8-1: unable to get BOS descriptor or descriptor too short [ 214.027595][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.047542][ T4241] usb 8-1: config 2 has an invalid interface number: 158 but max is 0 [ 214.055737][ T4241] usb 8-1: config 2 has no interface number 0 [ 214.071077][ T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.108842][ T4241] usb 8-1: config 2 interface 158 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 214.120217][ T7] usb 5-1: Product: syz [ 214.124502][ T7] usb 5-1: Manufacturer: syz [ 214.130196][ T7] usb 5-1: SerialNumber: syz [ 214.135237][ T4241] usb 8-1: config 2 interface 158 has no altsetting 0 [ 214.147478][ T23] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 214.176293][ T7] usb 5-1: config 0 descriptor?? [ 214.778394][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 214.792006][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 214.810891][ T7] usb 5-1: selecting invalid altsetting 0 [ 214.897749][ T4241] usb 8-1: New USB device found, idVendor=0403, idProduct=f680, bcdDevice= 1.ab [ 214.922914][ T4241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.967172][ T4241] usb 8-1: Product: syz [ 214.968140][ T23] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 215.027190][ T4241] usb 8-1: Manufacturer: syz [ 215.060196][ T4241] usb 8-1: SerialNumber: syz [ 215.065283][ T23] usb 7-1: config 0 has no interface number 0 [ 215.115780][ T23] usb 7-1: config 0 interface 29 has no altsetting 0 [ 215.277541][ T23] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 215.300080][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.338023][ T23] usb 7-1: Product: syz [ 215.342349][ T23] usb 7-1: Manufacturer: syz [ 215.346029][ T13] usb 5-1: USB disconnect, device number 5 [ 215.378307][ T23] usb 7-1: SerialNumber: syz [ 215.435098][ T23] usb 7-1: config 0 descriptor?? [ 215.777646][ T23] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 215.843770][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 215.853123][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 215.869333][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.878539][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.887684][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.896826][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.905878][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.915773][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.950516][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.959017][ T5866] netlink: 8 bytes leftover after parsing attributes in process `'. [ 216.184594][ T4241] ftdi_sio 8-1:2.158: FTDI USB Serial Device converter detected [ 216.195207][ T4241] usb 8-1: Detected SIO [ 216.207471][ T23] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 216.214707][ T23] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 216.215028][ T4241] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 216.242567][ T4241] usb 8-1: USB disconnect, device number 2 [ 216.276516][ T4241] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 216.294881][ T4241] ftdi_sio 8-1:2.158: device disconnected [ 216.298347][ T23] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 216.456835][ T23] peak_usb: probe of 7-1:0.29 failed with error -22 [ 216.474371][ T23] usb 7-1: USB disconnect, device number 7 [ 216.540726][ T4279] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.967559][ T4279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.595703][ T4279] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.605311][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.615457][ T4279] usb 1-1: config 0 descriptor?? [ 217.660356][ T4279] pwc: Askey VC010 type 2 USB webcam detected. [ 218.120180][ T4279] pwc: recv_control_msg error -32 req 02 val 2b00 [ 218.527589][ T4279] pwc: recv_control_msg error -32 req 02 val 2700 [ 218.567486][ T4279] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.607461][ T4279] pwc: recv_control_msg error -32 req 04 val 1000 [ 219.089021][ T4279] pwc: recv_control_msg error -32 req 04 val 1300 [ 219.130097][ T4279] pwc: recv_control_msg error -32 req 04 val 1400 [ 219.174283][ T4279] pwc: recv_control_msg error -32 req 02 val 2000 [ 219.237510][ T4279] pwc: recv_control_msg error -32 req 02 val 2100 [ 220.120238][ T4279] pwc: recv_control_msg error -32 req 04 val 1500 [ 220.167445][ T4279] pwc: recv_control_msg error -32 req 02 val 2500 [ 220.632155][ T5927] tipc: Started in network mode [ 220.638223][ T5927] tipc: Node identity 4, cluster identity 4711 [ 220.644971][ T5927] tipc: Node number set to 4 [ 221.057511][ T4279] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.079009][ T4279] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.097695][ T4279] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.163238][ T4279] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.216717][ T4279] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.225387][ T4279] pwc: Registered as video103. [ 221.242290][ T4279] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 221.294618][ T4279] usb 1-1: USB disconnect, device number 3 [ 221.324596][ T5945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.997367][ T5973] __nla_validate_parse: 28 callbacks suppressed [ 223.997400][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 224.741762][ T5996] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 224.854090][ T6003] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 227.547355][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 228.087417][ T7] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 228.537440][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 228.657467][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 228.677376][ T7] usb 7-1: can't read configurations, error -71 [ 229.822187][ T6065] binder: 6061:6065 unknown command 1074553619 [ 229.829150][ T6065] binder: 6061:6065 ioctl c0306201 200000000040 returned -22 [ 230.623946][ T6080] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 230.664385][ T6080] tipc: Enabled bearer , priority 10 [ 230.980388][ T6090] 9pnet: Insufficient options for proto=fd [ 231.801613][ T6092] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 231.842936][ T6092] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 232.234703][ T6109] device syzkaller0 entered promiscuous mode [ 233.504591][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.331'. [ 233.882115][ T6139] 9pnet: Insufficient options for proto=fd [ 234.468637][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.491880][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.525850][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.202337][ T6148] hub 1-0:1.0: USB hub found [ 235.209064][ T6148] hub 1-0:1.0: 1 port detected [ 236.453073][ T6166] device syzkaller0 entered promiscuous mode [ 238.627550][ T4186] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 238.800024][ T6205] 9pnet: Insufficient options for proto=fd [ 238.937479][ T4186] usb 5-1: Using ep0 maxpacket: 8 [ 239.247851][ T4186] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.303339][ T4186] usb 5-1: config 0 has no interface number 0 [ 239.334142][ T4186] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 239.407370][ T4186] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 239.557565][ T4186] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.558683][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 239.617446][ T4186] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.664165][ T4186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.749092][ T4186] usb 5-1: config 0 descriptor?? [ 239.808744][ T4186] ldusb 5-1:0.55: Interrupt in endpoint not found [ 239.985977][ T6221] device syzkaller0 entered promiscuous mode [ 240.013938][ T4188] usb 5-1: USB disconnect, device number 6 [ 242.619471][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.644124][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.664174][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.961510][ T6241] crypto_alloc_aead failed rc=-2 [ 246.805851][ T6287] device syzkaller0 entered promiscuous mode [ 247.047423][ T4188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 247.283771][ T6313] netlink: 96 bytes leftover after parsing attributes in process `syz.7.376'. [ 247.417523][ T4188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.478921][ T4188] usb 1-1: config 0 has no interfaces? [ 247.493549][ T4188] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 247.540689][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.597675][ T4188] usb 1-1: config 0 descriptor?? [ 247.717482][ T4186] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 247.927477][ T4260] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.977357][ T4186] usb 8-1: Using ep0 maxpacket: 8 [ 248.127518][ T4186] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.237482][ T4260] usb 3-1: Using ep0 maxpacket: 16 [ 248.241520][ T4186] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.252242][ T4186] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.438148][ T4186] usb 8-1: config 0 descriptor?? [ 248.557794][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.612550][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.658563][ T4260] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 248.700213][ T4186] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 248.717356][ T4260] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 248.753916][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.779560][ T4260] usb 3-1: config 0 descriptor?? [ 248.943392][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.971693][ T6349] loop6: detected capacity change from 0 to 512 [ 249.157543][ T6349] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 249.193828][ T6349] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.357566][ T7] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 249.372788][ T4260] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0007/input/input12 [ 249.403977][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 249.471590][ T4260] appleir 0003:05AC:8241.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 249.487587][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.520671][ T4186] usb 3-1: USB disconnect, device number 7 [ 249.569415][ T7] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 249.696169][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 250.102806][ T6370] device syzkaller0 entered promiscuous mode [ 250.192067][ T4260] usb 1-1: USB disconnect, device number 4 [ 250.340836][ T4188] usb 8-1: USB disconnect, device number 3 [ 250.677502][ T7] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 251.964006][ T7] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 252.914574][ T7] stv0680 5-1:4.0: last error: 19, command = 0x0 [ 252.922652][ T7] usb 5-1: USB disconnect, device number 7 [ 253.637297][ T6385] [ 253.639667][ T6385] ====================================================== [ 253.647287][ T6385] WARNING: possible circular locking dependency detected [ 253.654323][ T6385] syzkaller #0 Not tainted [ 253.658730][ T6385] ------------------------------------------------------ [ 253.665739][ T6385] syz.6.390/6385 is trying to acquire lock: [ 253.671623][ T6385] ffff8880646d0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 253.682712][ T6385] [ 253.682712][ T6385] but task is already holding lock: [ 253.690071][ T6385] ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 253.699754][ T6385] [ 253.699754][ T6385] which lock already depends on the new lock. [ 253.699754][ T6385] [ 253.710176][ T6385] [ 253.710176][ T6385] the existing dependency chain (in reverse order) is: [ 253.719202][ T6385] [ 253.719202][ T6385] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 253.727193][ T6385] __mutex_lock_common+0x1eb/0x2390 [ 253.732933][ T6385] mutex_lock_nested+0x17/0x20 [ 253.738247][ T6385] rfkill_register+0x33/0x8a0 [ 253.743468][ T6385] hci_register_dev+0x452/0x970 [ 253.748836][ T6385] vhci_create_device+0x32c/0x5c0 [ 253.754378][ T6385] vhci_write+0x391/0x450 [ 253.759312][ T6385] vfs_write+0x712/0xd00 [ 253.764101][ T6385] ksys_write+0x14d/0x250 [ 253.768972][ T6385] do_syscall_64+0x4c/0xa0 [ 253.773950][ T6385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.780397][ T6385] [ 253.780397][ T6385] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 253.788247][ T6385] __mutex_lock_common+0x1eb/0x2390 [ 253.794013][ T6385] mutex_lock_nested+0x17/0x20 [ 253.799360][ T6385] vhci_send_frame+0x88/0x100 [ 253.804567][ T6385] hci_send_frame+0x1a9/0x2e0 [ 253.809765][ T6385] hci_tx_work+0x9f9/0x1710 [ 253.814786][ T6385] process_one_work+0x863/0x1000 [ 253.820255][ T6385] worker_thread+0xaa8/0x12a0 [ 253.825448][ T6385] kthread+0x436/0x520 [ 253.830034][ T6385] ret_from_fork+0x1f/0x30 [ 253.834967][ T6385] [ 253.834967][ T6385] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 253.844179][ T6385] __flush_work+0xdd/0x1b0 [ 253.849114][ T6385] hci_dev_do_close+0x1e7/0x1030 [ 253.854578][ T6385] hci_unregister_dev+0x2d7/0x580 [ 253.860118][ T6385] vhci_release+0x73/0xc0 [ 253.864969][ T6385] __fput+0x234/0x930 [ 253.869469][ T6385] task_work_run+0x125/0x1a0 [ 253.874573][ T6385] do_exit+0x61e/0x20a0 [ 253.879240][ T6385] do_group_exit+0x12e/0x300 [ 253.884348][ T6385] get_signal+0x6ca/0x12c0 [ 253.889283][ T6385] arch_do_signal_or_restart+0xc1/0x1300 [ 253.895431][ T6385] exit_to_user_mode_loop+0x9e/0x130 [ 253.901234][ T6385] exit_to_user_mode_prepare+0xee/0x180 [ 253.907391][ T6385] syscall_exit_to_user_mode+0x16/0x40 [ 253.913485][ T6385] do_syscall_64+0x58/0xa0 [ 253.918422][ T6385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.924917][ T6385] [ 253.924917][ T6385] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 253.932635][ T6385] __mutex_lock_common+0x1eb/0x2390 [ 253.938432][ T6385] mutex_lock_nested+0x17/0x20 [ 253.943711][ T6385] bg_scan_update+0x44/0x3b0 [ 253.948812][ T6385] process_one_work+0x863/0x1000 [ 253.954352][ T6385] worker_thread+0xaa8/0x12a0 [ 253.960071][ T6385] kthread+0x436/0x520 [ 253.964652][ T6385] ret_from_fork+0x1f/0x30 [ 253.969583][ T6385] [ 253.969583][ T6385] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 253.979392][ T6385] __lock_acquire+0x2c33/0x7c60 [ 253.984764][ T6385] lock_acquire+0x197/0x3f0 [ 253.989781][ T6385] __flush_work+0xdd/0x1b0 [ 253.994708][ T6385] __cancel_work_timer+0x3ac/0x520 [ 254.000335][ T6385] hci_request_cancel_all+0xcc/0x300 [ 254.006135][ T6385] hci_dev_do_close+0x4e/0x1030 [ 254.011544][ T6385] hci_rfkill_set_block+0x10a/0x190 [ 254.017263][ T6385] rfkill_set_block+0x1c6/0x420 [ 254.022644][ T6385] rfkill_fop_write+0x458/0x560 [ 254.028023][ T6385] vfs_write+0x300/0xd00 [ 254.032781][ T6385] ksys_write+0x14d/0x250 [ 254.037622][ T6385] do_syscall_64+0x4c/0xa0 [ 254.042553][ T6385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.048959][ T6385] [ 254.048959][ T6385] other info that might help us debug this: [ 254.048959][ T6385] [ 254.059176][ T6385] Chain exists of: [ 254.059176][ T6385] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 254.059176][ T6385] [ 254.075004][ T6385] Possible unsafe locking scenario: [ 254.075004][ T6385] [ 254.082476][ T6385] CPU0 CPU1 [ 254.087840][ T6385] ---- ---- [ 254.093195][ T6385] lock(rfkill_global_mutex); [ 254.097964][ T6385] lock(&data->open_mutex); [ 254.105067][ T6385] lock(rfkill_global_mutex); [ 254.112340][ T6385] lock((work_completion)(&hdev->bg_scan_update)); [ 254.118924][ T6385] [ 254.118924][ T6385] *** DEADLOCK *** [ 254.118924][ T6385] [ 254.127058][ T6385] 1 lock held by syz.6.390/6385: [ 254.132005][ T6385] #0: ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 254.142090][ T6385] [ 254.142090][ T6385] stack backtrace: [ 254.147965][ T6385] CPU: 0 PID: 6385 Comm: syz.6.390 Not tainted syzkaller #0 [ 254.155329][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.165389][ T6385] Call Trace: [ 254.168667][ T6385] [ 254.171600][ T6385] dump_stack_lvl+0x168/0x230 [ 254.176281][ T6385] ? load_image+0x3b0/0x3b0 [ 254.180798][ T6385] ? show_regs_print_info+0x20/0x20 [ 254.186014][ T6385] ? print_circular_bug+0x12b/0x1a0 [ 254.191211][ T6385] check_noncircular+0x274/0x310 [ 254.196151][ T6385] ? add_chain_block+0x940/0x940 [ 254.201126][ T6385] ? lockdep_lock+0xdc/0x1e0 [ 254.205725][ T6385] ? __lock_acquire+0x12d9/0x7c60 [ 254.210749][ T6385] ? lockdep_lock+0x1e0/0x1e0 [ 254.215439][ T6385] ? mark_lock+0x94/0x320 [ 254.219763][ T6385] __lock_acquire+0x2c33/0x7c60 [ 254.224616][ T6385] ? verify_lock_unused+0x140/0x140 [ 254.229815][ T6385] ? verify_lock_unused+0x140/0x140 [ 254.235025][ T6385] lock_acquire+0x197/0x3f0 [ 254.239535][ T6385] ? __flush_work+0xc1/0x1b0 [ 254.244191][ T6385] ? __lock_acquire+0x7c60/0x7c60 [ 254.249223][ T6385] ? read_lock_is_recursive+0x10/0x10 [ 254.254603][ T6385] ? start_flush_work+0x776/0x820 [ 254.259623][ T6385] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 254.265511][ T6385] ? _raw_spin_unlock+0x40/0x40 [ 254.270362][ T6385] __flush_work+0xdd/0x1b0 [ 254.274773][ T6385] ? __flush_work+0xc1/0x1b0 [ 254.279364][ T6385] ? flush_work+0x20/0x20 [ 254.283684][ T6385] ? try_to_grab_pending+0xf3/0x7e0 [ 254.288874][ T6385] ? lockdep_hardirqs_off+0x70/0x100 [ 254.294169][ T6385] ? mark_lock+0x94/0x320 [ 254.298495][ T6385] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 254.304499][ T6385] ? lock_chain_count+0x20/0x20 [ 254.309446][ T6385] ? mark_lock+0x94/0x320 [ 254.313877][ T6385] ? __cancel_work_timer+0x331/0x520 [ 254.319162][ T6385] __cancel_work_timer+0x3ac/0x520 [ 254.324275][ T6385] ? cancel_work_sync+0x20/0x20 [ 254.329117][ T6385] ? __cancel_work+0x1f4/0x2d0 [ 254.333879][ T6385] ? lockdep_hardirqs_on+0x94/0x140 [ 254.339079][ T6385] ? __cancel_work+0x26f/0x2d0 [ 254.343859][ T6385] ? cancel_work+0x20/0x20 [ 254.348284][ T6385] ? lock_chain_count+0x20/0x20 [ 254.353146][ T6385] hci_request_cancel_all+0xcc/0x300 [ 254.358469][ T6385] hci_dev_do_close+0x4e/0x1030 [ 254.363324][ T6385] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 254.369216][ T6385] ? _raw_spin_unlock+0x40/0x40 [ 254.374063][ T6385] hci_rfkill_set_block+0x10a/0x190 [ 254.379260][ T6385] ? rcu_lock_release+0x20/0x20 [ 254.384108][ T6385] rfkill_set_block+0x1c6/0x420 [ 254.389013][ T6385] rfkill_fop_write+0x458/0x560 [ 254.393877][ T6385] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 254.399528][ T6385] ? rfkill_fop_read+0x4b0/0x4b0 [ 254.404477][ T6385] ? common_file_perm+0x90/0x1c0 [ 254.409438][ T6385] ? fsnotify_perm+0x5d/0x560 [ 254.414121][ T6385] ? security_file_permission+0x75/0xa0 [ 254.419682][ T6385] ? rfkill_fop_read+0x4b0/0x4b0 [ 254.424618][ T6385] vfs_write+0x300/0xd00 [ 254.428856][ T6385] ? file_end_write+0x250/0x250 [ 254.433709][ T6385] ? __fget_files+0x40f/0x480 [ 254.438392][ T6385] ? __fdget_pos+0x1e2/0x370 [ 254.443015][ T6385] ? ksys_write+0x71/0x250 [ 254.447426][ T6385] ksys_write+0x14d/0x250 [ 254.451755][ T6385] ? __ia32_sys_read+0x80/0x80 [ 254.456518][ T6385] ? lockdep_hardirqs_on+0x94/0x140 [ 254.461713][ T6385] do_syscall_64+0x4c/0xa0 [ 254.466121][ T6385] ? clear_bhb_loop+0x30/0x80 [ 254.470807][ T6385] ? clear_bhb_loop+0x30/0x80 [ 254.475478][ T6385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.481372][ T6385] RIP: 0033:0x7f90b2e2ffc9 [ 254.485794][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.505426][ T6385] RSP: 002b:00007f90b1076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.513923][ T6385] RAX: ffffffffffffffda RBX: 00007f90b3087090 RCX: 00007f90b2e2ffc9 [ 254.521892][ T6385] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 254.529861][ T6385] RBP: 00007f90b2eb2f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.537833][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.545793][ T6385] R13: 00007f90b3087128 R14: 00007f90b3087090 R15: 00007fff45a0e708 [ 254.553763][ T6385] [ 255.680896][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688027][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.947328][ T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 256.197402][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 256.329983][ T7] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.340279][ T7] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.352970][ T7] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.363220][ T7] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.379073][ T7] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.388871][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.669228][ T7] usb 8-1: usb_control_msg returned -71 [ 256.677395][ T7] usbtmc 8-1:16.0: can't read capabilities [ 256.703570][ T7] usb 8-1: USB disconnect, device number 4