last executing test programs: 1m16.705891389s ago: executing program 0 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000004c0)={{0x3, 0x200, 0x8000, 0x2c1, 0xc0, 0x7}, 0x46, [0x8, 0x1, 0x200000, 0x1, 0x4, 0xffffffff, 0x10, 0x0, 0x2, 0x9, 0x6, 0x1, 0xffff, 0x7a4f, 0x1, 0xf556, 0x3, 0x4, 0x3000, 0xc1, 0x8e, 0xfffffff1, 0xcf4a, 0xebd8, 0x10, 0x7, 0x4, 0xff, 0x4f18, 0x0, 0x5, 0x7, 0x80000000, 0x3, 0xc, 0xac98, 0xfffffff3, 0x1ff, 0x2, 0xf0, 0x1, 0x8, 0x0, 0x10000000, 0x2001, 0xb, 0x641, 0xfff, 0x81, 0x400, 0x4, 0x4236, 0x8, 0x8, 0x8001, 0x1ff, 0x148, 0x9f2, 0xac3, 0x5, 0x6, 0x7, 0x4, 0x4750, 0x2, 0x5, 0xfffff000, 0x4, 0x7, 0xffff0001, 0x3ff, 0xb, 0x13, 0x8, 0x9, 0x1, 0x4, 0x9, 0x5, 0x8, 0x7fffffff, 0x10, 0xc33, 0x9a8, 0xff, 0x7, 0x1002, 0xf4a9, 0xffffffff, 0x101, 0x4, 0x40, 0x1000, 0x24ed, 0x3, 0xb4a, 0x4, 0x7f, 0x7, 0x7, 0x3, 0xc6, 0x2, 0x7, 0x4, 0x1, 0x1, 0x8, 0x2, 0x7, 0x4, 0x1, 0x2, 0x2, 0x8, 0x401, 0x1000, 0x800, 0x3, 0x7, 0x40, 0x7f, 0x10001, 0x9, 0x4, 0x2, 0x5, 0x3, 0x4, 0x645a9c57, 0x7, 0x3, 0x4ea192b0, 0x2, 0x8, 0x800, 0x3, 0x8, 0x826d, 0x400, 0x3ff, 0x2, 0xc, 0x72, 0x8, 0x40, 0x5, 0x6, 0x5, 0x7, 0x4, 0x5, 0x5, 0x6, 0x7, 0x401, 0x4, 0x10001, 0x4, 0x2, 0x7fff, 0xfffffff8, 0x1, 0x5, 0x6, 0xd0000000, 0x3, 0x6, 0x44d0, 0x9, 0x2, 0x7, 0xea, 0xa2a6, 0x1, 0x79, 0x6, 0x4, 0x3, 0x5, 0xe00, 0x0, 0x7, 0x3, 0x31c, 0x8, 0x1, 0xee6e, 0x0, 0x4613, 0x7ff, 0x81, 0x30, 0x2f83, 0x8, 0x4, 0x1, 0x18000, 0x6, 0x1b1c, 0x1, 0x3, 0x7fff, 0x4, 0x8000, 0x0, 0x14d, 0x80000001, 0x401, 0x133, 0xffff, 0x0, 0xfffffff5, 0x4, 0x7fe00000, 0x80000000, 0xad, 0xd, 0x7, 0xfff, 0x1, 0x8b40, 0x17, 0x4, 0x3, 0x3, 0x8, 0x4, 0xe9, 0x6, 0x1f, 0x9, 0x0, 0x8, 0x6, 0xfffffff7, 0x8, 0x0, 0xc, 0x10c, 0x3, 0x7ff, 0x0, 0x8, 0x1, 0x1, 0x0, 0xff, 0x4, 0x2, 0x3, 0x10001, 0xf1e8, 0x4000000, 0x8, 0x7, 0x2, 0x8, 0x7ef, 0xcf, 0x6, 0xffffffff, 0x1, 0x9, 0xfffffffd, 0x4, 0xc544, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x84, 0x8, 0x3, 0x0, 0x1ff, 0x8, 0x10, 0x6, 0xff, 0x0, 0x7, 0x6, 0x80000000, 0x7fff, 0x682dc1db, 0x4, 0x975, 0x8, 0xfffffcf5, 0x0, 0xf8d2, 0x3f41, 0x200, 0x1a7, 0x4, 0xd, 0x0, 0x4, 0xe48, 0x3, 0x3, 0x10000001, 0xd, 0x2, 0x3, 0x7, 0x9, 0x3, 0xbf, 0xfde5, 0x1, 0xa, 0x38, 0xfffffffb, 0x6, 0xec0, 0x775483bf, 0x8, 0x6, 0x2, 0x9, 0xeeb, 0x7, 0x40, 0x14, 0x8, 0x6, 0x2, 0x9, 0xe9b3, 0x1, 0x80000000, 0x9, 0xa6, 0x2, 0x6, 0x1000, 0xfffffffb, 0x6, 0x3ff, 0x2, 0x2, 0x7, 0x8001, 0xffffffff, 0x89, 0x23c5, 0x2, 0x2, 0x8, 0x5, 0x9, 0x9, 0x7, 0xf75f, 0xe, 0x401, 0x401, 0x6, 0x400, 0x6, 0x7, 0x3, 0x6, 0x4, 0x2, 0x4d8a, 0xfffffffd, 0x80, 0x80000000, 0x6, 0x2, 0x8, 0x4de, 0x5, 0x1, 0x3c72, 0x1, 0x2b673a9c, 0x7, 0x1, 0x2, 0x9, 0x2, 0x4, 0xffffffff, 0x7fff, 0x2, 0x1, 0x73, 0x62a47138, 0x494, 0x6, 0x7a2b, 0x6, 0x4, 0x2, 0x2, 0x8, 0xfff, 0x7, 0x100, 0x1, 0x6, 0x80000001, 0x796, 0x4d9e, 0xfff, 0x1f8, 0x5, 0xf, 0x7, 0x1, 0xf, 0xc, 0x3, 0xd, 0x9, 0xf, 0x7, 0x9, 0x2, 0x8001, 0x1, 0x9, 0xfffffffc, 0x2, 0x3ff, 0x4, 0x3, 0x7, 0x80, 0x8, 0x2, 0x1ff, 0x67, 0x1, 0x5, 0xfff, 0x3f40a007, 0x2, 0x8, 0x8, 0x5, 0x8, 0xe, 0x1, 0xfff, 0x392, 0x1, 0x2, 0xfffffffd, 0xef2, 0x0, 0x0, 0x2, 0x6, 0xbd, 0x0, 0x3, 0x6, 0x8, 0x8, 0xaac, 0x4, 0x5, 0x0, 0x2, 0xff, 0xff, 0x4, 0xd, 0x1, 0x0, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x400, 0x4, 0x5, 0x9, 0x10001, 0x6, 0x2, 0x0, 0x4267fe86, 0x40, 0x7ff, 0x3, 0x9, 0x0, 0x2cb8, 0xfffffff9, 0x7, 0x4, 0xfffffc01, 0xf0c4, 0xfffffff9, 0x101, 0x1400, 0x3, 0x5, 0x6, 0x24, 0x3f1d, 0x2, 0x6, 0x7, 0x9, 0x8, 0x4, 0x73, 0x3, 0x3, 0xc, 0x0, 0x80000001, 0x5, 0xd0, 0xfff, 0x3ff, 0x8, 0x7fff, 0x7, 0x8001, 0x438, 0x6, 0x3, 0x6, 0x2, 0x8, 0x77, 0x7f, 0x1, 0xa, 0x86, 0x6, 0x5, 0x8b, 0x2, 0x3, 0x3, 0x800, 0x10, 0x400, 0xb, 0x158, 0x8, 0xffffffff, 0x8001, 0xffffffda, 0x6, 0x8, 0x100, 0x2, 0x1, 0xe, 0x4, 0x6, 0xd, 0xb8, 0xda85, 0x0, 0x878, 0x10, 0x5, 0x8000, 0xfffffe00, 0x8, 0xfffffffc, 0x2, 0x0, 0x8, 0x40, 0x0, 0x1, 0xca, 0x9, 0x3, 0x0, 0xa747, 0x9, 0xc483, 0x1, 0x8001, 0x1ffc5b0f, 0x8, 0x7, 0x4, 0x5, 0x5, 0x1, 0x6, 0x0, 0xfffffffc, 0x8, 0xffffffff, 0x10, 0x4, 0x400, 0x101, 0x972, 0x22, 0x4, 0x2, 0xd, 0x3, 0x1, 0x1fc, 0xfff, 0xd43e, 0x2, 0x1fe8, 0x9, 0xc, 0x5, 0x101, 0x5, 0x100, 0x0, 0xfffffff7, 0x0, 0x0, 0xffff, 0x8e, 0x3, 0x3, 0x6, 0x2, 0x7, 0x7, 0xffffff7f, 0x7, 0x2, 0x9, 0x7, 0x1, 0x7, 0x1, 0x9, 0x9, 0x7, 0x2, 0x8, 0x101, 0x6, 0xfffffffe, 0x4, 0x9, 0x8, 0x7f, 0xb824, 0x9, 0x6, 0x3d2e, 0x4, 0x2, 0x5, 0x260, 0x3ff, 0x80000b, 0x4, 0x5, 0x9, 0x8, 0x200, 0x7, 0xc, 0x6, 0xffffffff, 0xcac, 0x1, 0x1, 0x7, 0x0, 0x7, 0x81, 0xffffffff, 0x4, 0x3ff, 0x80000000, 0x8, 0x80, 0x4, 0x9, 0xfffffffd, 0x401, 0x5, 0x7f, 0x5, 0x5, 0x400, 0x7, 0x2, 0x100, 0xff, 0x2, 0xd, 0x0, 0x10000, 0x3, 0x0, 0x7fff, 0x5, 0x9, 0x7, 0x1, 0x2, 0x8, 0x200, 0xf3d60, 0x4, 0x75b91d68, 0x3, 0x2, 0x6, 0x7fffffff, 0x1ff, 0x2, 0xac40, 0x1, 0x9, 0x1, 0x6, 0x9, 0x6, 0x1, 0x5, 0xd5000004, 0x1000, 0x7, 0x80, 0x1, 0x2, 0x80000000, 0x80000000, 0x6, 0x80, 0xc94, 0x3, 0x9, 0x1, 0xf5c, 0x8, 0x5, 0x5, 0x1000, 0x5, 0x80, 0x10, 0x4, 0xc, 0x5, 0x80, 0xffffffff, 0x1, 0x5, 0x6, 0x3, 0x0, 0x4, 0x10000, 0xf2d, 0x81, 0x7dae, 0xb, 0x10001, 0xf2, 0x6, 0x1, 0xbd, 0xfff, 0xfffffffa, 0x2, 0x836, 0x5, 0x2, 0x7f, 0x3, 0xa, 0xc, 0x3, 0x1, 0x9a, 0x9, 0xfffffffa, 0x9, 0x7fffffff, 0x8, 0x3, 0xffffffff, 0x3, 0x29c516df, 0x4, 0x80000000, 0x3, 0xf579, 0x400, 0x1ff, 0x1, 0x6, 0x1, 0x5, 0x2, 0x4722aeb8, 0x9, 0x94, 0x3, 0x1b9c, 0x5, 0x1, 0x80000000, 0x5, 0x0, 0x6, 0x1, 0xa, 0xfff, 0x1000, 0x1000, 0x8, 0x2, 0x9, 0x1, 0x4, 0x9, 0xa91f, 0x7, 0x1, 0x200, 0x0, 0x8, 0x2, 0x0, 0x9, 0x3, 0x9, 0x0, 0x0, 0x6, 0x6, 0xf05b, 0x400, 0x9bb, 0x100, 0x7, 0xfffff804, 0x3, 0xffffffff, 0x3, 0x4e, 0x77, 0x6, 0x8001, 0x7, 0x1, 0xa, 0x16, 0xfffffff9, 0x7, 0x7, 0x2, 0x7, 0x2, 0x91c, 0x8000, 0xe79d, 0xfffffff9, 0x101, 0x800000, 0x5, 0x8, 0x5, 0x3a, 0x1, 0x4, 0x8a, 0xff48, 0x7, 0x8, 0x8, 0x7, 0xffff, 0x0, 0x5, 0x3, 0xb09a, 0x7, 0x2, 0x7, 0x18000000, 0x0, 0x3, 0x55a9, 0x9, 0x2, 0x4, 0x3bc901b4, 0xd2, 0x7f, 0x2, 0x0, 0x7, 0x6b93, 0x40, 0x0, 0x8, 0x7, 0x5, 0x1, 0x3, 0x0, 0x4104cd62, 0x4, 0xfff, 0x1, 0x1, 0xdfde, 0x7ff, 0xc5d0, 0x4, 0x4, 0x3, 0x7, 0xfffffffb, 0xb747, 0x5, 0xa, 0x9, 0x1e, 0xa, 0xf, 0xfffffffd, 0x1, 0x4000000, 0x3e, 0xdfa, 0x5, 0x3, 0xfff, 0x8, 0x0, 0x2, 0xb245, 0x4, 0x9, 0x10000, 0x4, 0xffff356f, 0x8001, 0x9, 0x5811, 0xfffffff7, 0x101, 0xf, 0x7, 0x9, 0xa, 0xfffffff7, 0xfffffff9, 0x10, 0x7fff, 0x2, 0x3, 0xf, 0x71610c12, 0x6, 0x10001, 0x3, 0x200, 0x8, 0x2, 0x3720, 0x3ff, 0x3, 0x4, 0x5, 0x5, 0x7, 0xb8, 0x7fff, 0x2, 0x1, 0x7, 0xfffffd8a, 0x6, 0xe, 0x2, 0x7, 0x3, 0x81, 0x4, 0xffff0c01, 0x1, 0xf9, 0x8, 0x5, 0x7, 0x695, 0x5, 0x1, 0x8, 0x1, 0x7f, 0x9dd, 0x8, 0x8, 0x8, 0xba, 0x6, 0x30000000, 0x7, 0x2, 0x1ff, 0x6, 0x2, 0x6, 0x3, 0x3, 0x5, 0xdc]}) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) read(r6, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 1m14.037534982s ago: executing program 0 (id=789): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r0, &(0x7f0000000040)=""/59, 0xffb5) 1m13.957927273s ago: executing program 0 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2a, 0x3, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x1, 0x0, 0x10, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x78}, 0x1, 0x7}, 0x0) socket(0x10, 0x803, 0x0) 1m13.627828758s ago: executing program 0 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}, 0x1}, 0x1c) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_usb_connect(0x5, 0x5e, 0x0, 0x0) 1m9.10290546s ago: executing program 0 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000002800010029bd7000fcf125120d"], 0x14}}, 0x20000010) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2f75466f09b806490f2afe0e09153ece3519bf"]) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/159, 0x9f}], 0x1}, 0x9}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000009c0)=""/225, 0xe1}, 0x8}, {{&(0x7f0000000ac0)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/193, 0xc1}, {&(0x7f0000000c40)=""/216, 0xd8}], 0x2, &(0x7f0000000d80)=""/106, 0x6a}, 0x6}, {{&(0x7f0000000e00)=@in6, 0x80, &(0x7f0000000f00)=[{0x0}], 0x1, &(0x7f0000000f40)=""/89, 0x59}, 0x20b2}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/135, 0x87}], 0x1, &(0x7f0000002200)=""/70, 0x46}, 0x28eddeb9}, {{&(0x7f0000002280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/100, 0x64}, {&(0x7f0000002500)=""/79, 0x4f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/212, 0xd4}], 0x6, &(0x7f0000003700)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003780)=""/181, 0xb5}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/130, 0x82}, {&(0x7f0000003a80)=""/97, 0x61}, {&(0x7f0000003b00)=""/113, 0x71}, {&(0x7f0000003b80)=""/5, 0x5}, {&(0x7f0000003bc0)=""/186, 0xba}, {&(0x7f0000003c80)=""/17, 0x11}], 0x9}, 0x10000}], 0x7, 0x40010000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffff0600000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r7, 0x1ff) connect$inet(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="572e1f310c8e18e9eab9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee00, 0x0) 1m7.433781206s ago: executing program 0 (id=808): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000000080045"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 52.12584221s ago: executing program 32 (id=808): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000000080045"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 13.189445471s ago: executing program 1 (id=937): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005196c0083d1bbb011100000000010902"], 0x0) 8.865735229s ago: executing program 3 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8.500979345s ago: executing program 3 (id=947): getrusage(0x0, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000280)=""/22, 0x16}], &(0x7f0000000600)=[0xb5, 0xfffffffffffffffb, 0x539, 0xb2be, 0x2, 0x4, 0x9, 0x3]}, {0x8, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000d00)=""/51, 0x33}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/66, 0x42}, {&(0x7f0000000b40)}], &(0x7f0000000c00)=[0x2b279bfa, 0x2]}, {0x4, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000c40)=""/168, 0xa8}, {&(0x7f0000002300)=""/164, 0xa4}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/72, 0x48}], &(0x7f0000001ec0)=[0xb, 0x9, 0x400, 0xdb, 0x1, 0x2, 0xffffffffffffffff, 0x20008, 0x7]}, {0x2, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/233, 0xe9}, {&(0x7f0000002040)=""/62, 0x3e}], &(0x7f0000000b40)=[0xf, 0x4, 0x9]}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x6) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 8.147625201s ago: executing program 5 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000180)="4eb6", 0x0, 0x0, &(0x7f0000000f40), 0x9, r1}, 0x38) 7.231554875s ago: executing program 2 (id=950): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x10001011, r2, 0x0) socket$inet6(0xa, 0x80000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = msgget(0x3, 0x486) msgctl$IPC_RMID(r4, 0x0) 7.231264675s ago: executing program 5 (id=951): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7.229114355s ago: executing program 3 (id=952): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 6.27646481s ago: executing program 2 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020101020000000000000000000100000800154000000001080008"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000a0333324000101040000000000000000020000002400018014000180040001"], 0x38}}, 0x0) 6.069333754s ago: executing program 5 (id=954): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) write$P9_RGETLOCK(r3, 0x0, 0xe6da) socket$inet6(0xa, 0x1, 0x0) r4 = epoll_create(0x10000e9) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x5d, 0x0, 0x0}) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) fcntl$dupfd(r8, 0x0, r4) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r9, 0x0, 0x0) 5.901385427s ago: executing program 4 (id=956): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x40) 5.741763789s ago: executing program 4 (id=957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000140)=0x7, 0x4) 5.585254722s ago: executing program 4 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) 5.169992648s ago: executing program 1 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 4.960304002s ago: executing program 3 (id=960): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x7, 0xe, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.404490701s ago: executing program 1 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000080)=ANY=[@ANYBLOB='anchor=0\x00000000000000000001,\x00'], 0x1, 0xc85, &(0x7f0000000100)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 4.396529571s ago: executing program 4 (id=962): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./bus\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000002640)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) 3.850081319s ago: executing program 2 (id=963): clock_gettime(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8b}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r4 = syz_open_procfs(r1, &(0x7f0000000180)='net/dev_mcast\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x100006, 0xcf, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x1f, 0x3, 0x7}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000380)=[{r5, 0x500}], 0x1, 0xae6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$usbmon(0x0, 0x5a0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 3.609505163s ago: executing program 4 (id=964): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200a07000000070000f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 3.581740333s ago: executing program 1 (id=965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r4 = dup2(r0, r2) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x0, &(0x7f0000000280)={[{@mb_optimize_scan}, {@nouid32}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x50d, &(0x7f0000000dc0)="$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") 3.564902684s ago: executing program 3 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) 2.609253869s ago: executing program 2 (id=967): timer_create(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$incfs(r4, 0x0, 0x2a800, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2.55091975s ago: executing program 1 (id=968): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) 2.299031884s ago: executing program 5 (id=969): getrusage(0x0, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002240)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000280)=""/22, 0x16}], &(0x7f0000000600)=[0xb5, 0xfffffffffffffffb, 0x539, 0xb2be, 0x2, 0x4, 0x9, 0x3]}, {0x8, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000d00)=""/51, 0x33}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/66, 0x42}, {&(0x7f0000000b40)}], &(0x7f0000000c00)=[0x2b279bfa, 0x2]}, {0x4, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000c40)=""/168, 0xa8}, {&(0x7f0000002300)=""/164, 0xa4}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/72, 0x48}], &(0x7f0000001ec0)=[0xb, 0x9, 0x400, 0xdb, 0x1, 0x2, 0xffffffffffffffff, 0x20008, 0x7]}, {0x2, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/233, 0xe9}, {&(0x7f0000002040)=""/62, 0x3e}], &(0x7f0000000b40)=[0xf, 0x4, 0x9]}, {0x1, 0x1, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/94, 0x5e}], &(0x7f00000021c0)=[0x0, 0x76, 0x5, 0x5, 0xb97f6b7, 0x0, 0x37f, 0xfffffffffffffc00, 0x9]}], 0x6) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 2.090743717s ago: executing program 2 (id=970): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.049306244s ago: executing program 1 (id=971): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@generic={0x88fb}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./bus\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") truncate(0x0, 0x400000f000) 1.019850454s ago: executing program 5 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) 809.723027ms ago: executing program 2 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020101020000000000000000000100000800154000000001080008"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000a0333324000101040000000000000000020000002400018014000180040001"], 0x38}}, 0x0) 505.755553ms ago: executing program 3 (id=974): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getdents(0xffffffffffffffff, 0x0, 0x58) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) timer_create(0x2, 0x0, &(0x7f0000001680)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 462.834443ms ago: executing program 4 (id=975): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 5 (id=976): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x7, 0xe, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.975361][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.987521][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.994537][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.020483][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.093865][ T4256] device hsr_slave_0 entered promiscuous mode [ 62.100579][ T4256] device hsr_slave_1 entered promiscuous mode [ 62.107701][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 62.107887][ T4258] Bluetooth: hci0: command 0x0409 tx timeout [ 62.120503][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 62.120520][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 62.120646][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 62.128457][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.147003][ T4256] Cannot create hsr debugfs directory [ 62.190207][ T4252] device hsr_slave_0 entered promiscuous mode [ 62.197566][ T4252] device hsr_slave_1 entered promiscuous mode [ 62.204553][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.212332][ T4252] Cannot create hsr debugfs directory [ 62.224205][ T4259] device hsr_slave_0 entered promiscuous mode [ 62.230900][ T4259] device hsr_slave_1 entered promiscuous mode [ 62.237488][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.245346][ T4259] Cannot create hsr debugfs directory [ 62.475576][ T4260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.487852][ T4260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.508598][ T4260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.536957][ T4260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.571828][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.581346][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.592707][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.612835][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.666578][ T4256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.698213][ T4256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.708925][ T4256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.720425][ T4256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.803131][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.822970][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.832977][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.851920][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.860720][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.873026][ T4259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.882229][ T4259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.893654][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.908501][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.923200][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.930082][ T4259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.940431][ T4259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.952983][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.971633][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.980179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.988335][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.997998][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.007360][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.014542][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.027528][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.046501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.055268][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.065583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.074440][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.081830][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.089617][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.098650][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.107289][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.114452][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.143471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.153280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.162827][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.171416][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.178602][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.187171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.196734][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.205838][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.215571][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.224252][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.236064][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.273556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.283105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.292663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.303447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.312124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.320460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.329647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.338410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.363426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.373192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.391376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.399938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.409806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.419810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.431547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.439942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.455291][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.466717][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.486420][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.508997][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.533070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.547565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.577513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.607614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.621692][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.628829][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.650313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.668024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.680011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.688693][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.695813][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.718108][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.759128][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.772873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.787496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.811973][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.833560][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.842418][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.860077][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.879342][ T4256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.890640][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.907149][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.916946][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.925212][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.934094][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.944418][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.953517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.962375][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.985550][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.010086][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.023035][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.036066][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.046811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.060300][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.067437][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.076336][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.085128][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.093958][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.101089][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.112215][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.121659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.129159][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.137423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.146071][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.153853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.174786][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.181931][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 64.187969][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 64.199864][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 64.206103][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 64.206119][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 64.219720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.250053][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.273586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.294794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.307215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.318322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.330199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.340315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.354445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.365776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.377228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.388121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.404862][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.438074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.446268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.455618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.464763][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.471909][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.480498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.489722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.498752][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.505939][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.514610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.522681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.530103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.538790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.555254][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.584151][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.604044][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.634798][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.643954][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.658647][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.680381][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.722531][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.732103][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.740457][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.750438][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.760101][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.770027][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.784121][ T4249] device veth0_vlan entered promiscuous mode [ 64.800493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.811935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.820354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.832273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.858703][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.867133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.882712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.900314][ T4249] device veth1_vlan entered promiscuous mode [ 64.910503][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.920281][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.929159][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.994599][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.015492][ T4260] device veth0_vlan entered promiscuous mode [ 65.028563][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.037540][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.046699][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.059073][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.068221][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.083315][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.091941][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.100315][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.108960][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.116900][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.126432][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.140413][ T4256] device veth0_vlan entered promiscuous mode [ 65.165063][ T4260] device veth1_vlan entered promiscuous mode [ 65.176757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.186529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.202059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.213896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.223532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.248560][ T4249] device veth0_macvtap entered promiscuous mode [ 65.265791][ T4256] device veth1_vlan entered promiscuous mode [ 65.284561][ T4249] device veth1_macvtap entered promiscuous mode [ 65.313141][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.321655][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.329654][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.337893][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.346339][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.356312][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.363990][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.371749][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.379946][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.389616][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.398431][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.424121][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.432560][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.443313][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.452361][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.460915][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.470583][ T4252] device veth0_vlan entered promiscuous mode [ 65.480960][ T4260] device veth0_macvtap entered promiscuous mode [ 65.496263][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.507146][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.521134][ T4260] device veth1_macvtap entered promiscuous mode [ 65.530620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.539488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.549379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.562787][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.573252][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.583758][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.593025][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.626862][ T4252] device veth1_vlan entered promiscuous mode [ 65.641535][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.650049][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.663555][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.674724][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.686546][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.701218][ T4256] device veth0_macvtap entered promiscuous mode [ 65.711039][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.722062][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.730674][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.740470][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.749835][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.760329][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.771279][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.784429][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.796005][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.804916][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.814169][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823580][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.856698][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.867148][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.877595][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.886557][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.904432][ T4256] device veth1_macvtap entered promiscuous mode [ 65.920353][ T4252] device veth0_macvtap entered promiscuous mode [ 65.944366][ T4259] device veth0_vlan entered promiscuous mode [ 65.954194][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.962738][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.970646][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.980462][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.990731][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.999644][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.023419][ T4252] device veth1_macvtap entered promiscuous mode [ 66.049798][ T4259] device veth1_vlan entered promiscuous mode [ 66.059971][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.071772][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.081936][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.092838][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.105096][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.116298][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.125186][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.133595][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.147601][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.157715][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.168380][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.178344][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.189179][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.201136][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.219299][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.227950][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.236606][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.244713][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.253604][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.261067][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 66.263351][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.267649][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 66.276447][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.281780][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 66.290137][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 66.297969][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 66.310527][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.322064][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.332536][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.343598][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.355248][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.374865][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.385651][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.396167][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.407138][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417774][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.429149][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.440420][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.458256][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.466650][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.475508][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.484998][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.493733][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.525280][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535417][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.545460][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.554357][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.567419][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.576898][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.586141][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.595786][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640968][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.648986][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.667883][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.679803][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.695512][ T4259] device veth0_macvtap entered promiscuous mode [ 66.711361][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.719337][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.727403][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.736411][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.750195][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.785733][ T4259] device veth1_macvtap entered promiscuous mode [ 66.821236][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.831908][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.856771][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.869592][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.967837][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.984538][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.994893][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.000049][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.022748][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.033083][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.043935][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.054409][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.065596][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.077538][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.087549][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.098101][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.108081][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.119947][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.135469][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.150143][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.166232][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.176948][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.194451][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.221936][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.229890][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.243601][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.253015][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.267349][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.278238][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.294639][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.316783][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.328225][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345063][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.355737][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385375][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.407155][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.499987][ T4337] loop4: detected capacity change from 0 to 512 [ 67.510137][ T4337] ======================================================= [ 67.510137][ T4337] WARNING: The mand mount option has been deprecated and [ 67.510137][ T4337] and is ignored by this kernel. Remove the mand [ 67.510137][ T4337] option from the mount to silence this warning. [ 67.510137][ T4337] ======================================================= [ 67.633087][ T4337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.748277][ T4337] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.778477][ T4337] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 67.799628][ T4337] Quota error (device loop4): write_blk: dquota write failed [ 67.807677][ T4337] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 67.817761][ T4337] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.5: Failed to acquire dquot type 1 [ 67.853134][ T4337] EXT4-fs (loop4): 1 truncate cleaned up [ 67.865085][ T4337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.096786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.165478][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.442297][ T4337] syz.4.5 (4337) used greatest stack depth: 19808 bytes left [ 68.456763][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 68.462866][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 68.468907][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 68.476646][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 68.482728][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 68.526197][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.585919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.685830][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.755799][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.774197][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.844911][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.887486][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.905011][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.937777][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.969515][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.019492][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.596787][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 69.761034][ T4346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.969022][ T4346] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 69.994124][ T4346] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.101326][ T4360] loop2: detected capacity change from 0 to 512 [ 70.255065][ T4346] usb 1-1: config 1 interface 0 has no altsetting 0 [ 70.371624][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.380909][ T4360] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.007369][ T4346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 71.047136][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.081605][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088275][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.116717][ T4346] usb 1-1: Product: syz [ 71.136962][ T4346] usb 1-1: Manufacturer: syz [ 71.170960][ T4346] usb 1-1: SerialNumber: syz [ 71.276064][ T4348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.330807][ C1] sched: RT throttling activated [ 71.330997][ T4296] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.425208][ T4371] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure [ 71.537018][ T4346] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 71.556583][ T4296] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.575617][ T4296] usb 5-1: not running at top speed; connect to a high speed hub [ 71.633234][ T4296] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 71.690375][ T4296] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 71.740303][ T4296] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 71.796517][ T4296] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 71.855833][ T4296] usb 5-1: config 129 has no interface number 0 [ 71.879988][ T4296] usb 5-1: config 129 has no interface number 1 [ 71.916616][ T4296] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 71.967761][ T4296] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 72.029217][ T4296] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 72.085715][ T4296] usb 5-1: config 129 interface 135 has no altsetting 0 [ 72.117402][ T4296] usb 5-1: config 129 interface 5 has no altsetting 0 [ 72.152962][ T4346] usb 1-1: USB disconnect, device number 2 [ 72.172280][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 72.187636][ T4296] usb 5-1: string descriptor 0 read error: -22 [ 72.195744][ T4363] loop3: detected capacity change from 0 to 40427 [ 72.215374][ T4346] usblp0: removed [ 72.217536][ T4363] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.227108][ T4363] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.236259][ T4296] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 72.254140][ T4363] F2FS-fs (loop3): invalid crc value [ 72.283453][ T4363] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.289464][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.306793][ T4378] loop1: detected capacity change from 0 to 512 [ 72.392216][ T4296] usb 5-1: MIDIStreaming interface descriptor not found [ 72.415791][ T4378] EXT4-fs: Ignoring removed bh option [ 72.428422][ T4363] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.441716][ T4363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.479193][ T4378] ext4: Unknown parameter 'smackfshat' [ 72.709970][ T4294] usb 5-1: USB disconnect, device number 2 [ 72.758416][ T4363] overlayfs: failed to resolve './file1': -2 [ 72.922129][ T4390] fuse: Unknown parameter 'ext4' [ 73.359334][ T4398] tipc: Started in network mode [ 73.364427][ T4398] tipc: Node identity 4, cluster identity 4711 [ 73.370622][ T4398] tipc: Node number set to 4 [ 73.825833][ T4298] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 73.911558][ T4298] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 74.007806][ T4404] loop0: detected capacity change from 0 to 1024 [ 74.018604][ T4405] loop2: detected capacity change from 0 to 16 [ 74.093017][ T4404] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.16: Invalid block bitmap block 0 in block_group 0 [ 74.144958][ T4405] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.195363][ T4404] Quota error (device loop0): write_blk: dquota write failed [ 74.211048][ T4404] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 74.231238][ T4404] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.16: Failed to acquire dquot type 0 [ 74.257015][ T4404] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.16: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.293378][ T4404] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.16: Invalid inode bitmap blk 0 in block_group 0 [ 74.330577][ T4402] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 74.340214][ T4404] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 74.365791][ T11] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 74.371103][ T2119] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.380023][ T4404] EXT4-fs (loop0): 1 orphan inode deleted [ 74.395533][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 0 [ 74.409280][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.503951][ T4404] EXT4-fs (loop0): shut down requested (2) [ 74.571083][ T2119] usb 5-1: Using ep0 maxpacket: 8 [ 74.578173][ T2119] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.607284][ T2119] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 74.646912][ T2119] usb 5-1: config 179 has no interface number 0 [ 74.666748][ T2119] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 74.700430][ T4404] syz.0.16 (4404) used greatest stack depth: 19136 bytes left [ 74.714961][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 74.722626][ T2119] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 74.746233][ T2119] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.928829][ T2119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.937696][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.947701][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.107505][ T4296] usb 5-1: USB disconnect, device number 3 [ 76.177896][ T4431] loop1: detected capacity change from 0 to 128 [ 79.008878][ T4443] loop4: detected capacity change from 0 to 256 [ 79.618559][ T4448] loop0: detected capacity change from 0 to 512 [ 79.627141][ T4448] EXT4-fs: Ignoring removed bh option [ 79.634216][ T4448] ext4: Unknown parameter 'smackfshat' [ 79.660845][ T4349] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.961328][ T4349] usb 5-1: Using ep0 maxpacket: 16 [ 79.980546][ T4349] usb 5-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 80.075853][ T4349] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.493848][ T4340] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.509174][ T4349] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.524804][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.533317][ T4349] usb 5-1: Product: syz [ 80.537500][ T4349] usb 5-1: Manufacturer: syz [ 80.542521][ T4349] usb 5-1: SerialNumber: syz [ 80.741129][ T4453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.809044][ T4453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.861440][ T4459] fuse: Unknown parameter 'ext4' [ 80.880021][ T4453] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 81.156173][ T4453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.169062][ T4349] usb 5-1: 0:2 : does not exist [ 81.312753][ T26] cfg80211: failed to load regulatory.db [ 81.378071][ T4453] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.540906][ T4453] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 81.569209][ T4453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.592394][ T4453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.612097][ T4453] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 81.624081][ T4453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.630049][ T4453] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.645712][ T4453] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 81.681026][ T4453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.697334][ T4453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.713748][ T4453] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 81.750838][ T4349] usb 5-1: USB disconnect, device number 4 [ 82.183748][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.752085][ T4264] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.104445][ T4483] loop4: detected capacity change from 0 to 512 [ 83.223016][ T4264] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.396696][ T4483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.406103][ T4483] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.631416][ T4264] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.702219][ T4253] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.702259][ T4264] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.033803][ T4253] Bluetooth: hci0: command 0x0406 tx timeout [ 85.086706][ T4495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.331232][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 85.782522][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 85.788981][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 85.795119][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 86.640430][ T4500] loop3: detected capacity change from 0 to 512 [ 86.679217][ T4500] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.737629][ T4500] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 86.758860][ T4500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 86.776012][ T4500] System zones: 0-2, 18-18, 34-34 [ 86.818429][ T4500] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 86.836357][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 86.848884][ T4500] EXT4-fs (loop3): 1 truncate cleaned up [ 86.855484][ T4500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.402356][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 87.635047][ T4329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.142700][ T4329] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 88.153774][ T4329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.164590][ T4329] usb 2-1: config 0 has no interface number 0 [ 88.170720][ T4329] usb 2-1: New USB device found, idVendor=12d1, idProduct=d03d, bcdDevice=2f.07 [ 88.181776][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.192637][ T4329] usb 2-1: config 0 descriptor?? [ 88.404408][ T4329] usb 2-1: string descriptor 0 read error: -71 [ 88.425360][ T4329] cdc_mbim 2-1:0.72: skipping garbage [ 88.524576][ T4525] loop2: detected capacity change from 0 to 512 [ 88.601758][ T4295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.666003][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.675416][ T4525] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.532374][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.564566][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.622921][ T4295] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 89.681054][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.792099][ T4295] usb 4-1: config 0 descriptor?? [ 89.857393][ T4533] loop4: detected capacity change from 0 to 512 [ 89.974566][ T4533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.004444][ T4329] cdc_mbim 2-1:0.72: CDC Union missing and no IAD found [ 90.011505][ T4329] cdc_mbim 2-1:0.72: bind() failure [ 90.025148][ T4329] usb 2-1: USB disconnect, device number 2 [ 90.031581][ T4533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.156439][ T4533] EXT4-fs (loop4): 1 truncate cleaned up [ 91.156469][ T4533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.393748][ T4295] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.393813][ T4295] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.393835][ T4295] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.393855][ T4295] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.393876][ T4295] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.514006][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 91.514957][ T4538] tty tty21: ldisc open failed (-12), clearing slot 20 [ 92.216837][ T4295] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 92.365512][ T4295] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 92.417372][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 92.435523][ T4295] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 92.510767][ T4295] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 92.519671][ T4295] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 92.609145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.617934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.631183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.639416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.647654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.655855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.664056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.672281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.680491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.688691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.360421][ T4295] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 93.420168][ T4295] usb 4-1: USB disconnect, device number 2 [ 93.620897][ T4346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.581255][ T4346] usb 3-1: Using ep0 maxpacket: 16 [ 94.589019][ T4346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.608865][ T4346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.638683][ T4346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.667582][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.689298][ T4346] usb 3-1: Product: syz [ 94.701020][ T4346] usb 3-1: Manufacturer: syz [ 94.705710][ T4346] usb 3-1: SerialNumber: syz [ 94.728951][ T4570] loop4: detected capacity change from 0 to 4096 [ 95.055896][ T4570] EXT4-fs (loop4): Test dummy encryption mode enabled [ 95.308724][ T4570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.031583][ T4346] usb 3-1: skipping empty audio interface (v1) [ 96.048925][ T4346] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 96.071562][ T4346] usb 3-1: USB disconnect, device number 2 [ 96.268443][ T4591] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 96.304812][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.582768][ T4570] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 97.569023][ T4608] loop2: detected capacity change from 0 to 128 [ 97.617051][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.635493][ T4608] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.669323][ T27] audit: type=1800 audit(1744973904.111:2): pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 97.726679][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 99.766589][ T4630] ipt_CLUSTERIP: Please specify destination IP [ 100.182788][ T4638] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 102.461988][ T27] audit: type=1326 audit(1744973908.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.520927][ T27] audit: type=1326 audit(1744973908.941:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.589987][ T27] audit: type=1326 audit(1744973908.941:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.660689][ T27] audit: type=1326 audit(1744973908.941:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.710107][ T27] audit: type=1326 audit(1744973908.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.794743][ T27] audit: type=1326 audit(1744973908.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.849909][ T27] audit: type=1326 audit(1744973908.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.910946][ T27] audit: type=1326 audit(1744973908.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 102.970532][ T27] audit: type=1326 audit(1744973908.951:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.037334][ T27] audit: type=1326 audit(1744973908.951:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.106852][ T27] audit: type=1326 audit(1744973908.951:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.129567][ T27] audit: type=1326 audit(1744973908.951:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.151957][ T27] audit: type=1326 audit(1744973908.951:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.174580][ T4297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.205796][ T27] audit: type=1326 audit(1744973908.951:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe819d8e169 code=0x7ffc0000 [ 103.411767][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.560134][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.736987][ T4297] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 103.923217][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.942365][ T4297] usb 2-1: config 0 descriptor?? [ 104.316288][ T4294] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.361046][ T4297] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.368547][ T4297] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.410824][ T4297] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.418274][ T4297] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.442386][ T4297] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.465212][ T4297] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 104.515517][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 104.522467][ T4294] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.529095][ T4294] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 104.562571][ T4297] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 104.568942][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.583342][ T4297] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 104.609716][ T4297] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 104.618006][ T4294] usb 4-1: config 0 descriptor?? [ 104.636284][ T4297] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 104.664898][ T4297] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 104.766537][ T4297] usb 2-1: USB disconnect, device number 3 [ 104.811666][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 104.912812][ T4681] kernel profiling enabled (shift: 9) [ 105.050377][ T4294] wacom 0003:056A:032B.0003: hidraw0: USB HID v0.07 Device [HID 056a:032b] on usb-dummy_hcd.3-1/input0 [ 105.193586][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 105.249577][ T4294] usb 4-1: USB disconnect, device number 3 [ 105.260427][ T4683] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 105.362694][ T4687] loop4: detected capacity change from 0 to 16 [ 105.388446][ T4687] erofs: (device loop4): mounted with root inode @ nid 36. [ 106.295969][ T4692] hub 9-0:1.0: USB hub found [ 106.302523][ T4692] hub 9-0:1.0: 1 port detected [ 107.963829][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 109.299774][ T4349] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.711028][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 109.764935][ T4349] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 109.885648][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.919823][ T4349] usb 1-1: Product: syz [ 109.952986][ T4349] usb 1-1: Manufacturer: syz [ 109.957782][ T4349] usb 1-1: SerialNumber: syz [ 109.980936][ T4349] usb 1-1: config 0 descriptor?? [ 111.583747][ T4758] loop4: detected capacity change from 0 to 2048 [ 111.728211][ T4349] usb 1-1: USB disconnect, device number 3 [ 113.018452][ T4769] binder: 4762:4769 ioctl 4018620d 0 returned -22 [ 113.025938][ T4769] binder: 4762:4769 ioctl c0306201 200000000080 returned -14 [ 113.224903][ T4758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.430102][ T4779] fuse: Bad value for 'fd' [ 115.003774][ T4785] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.024504][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 115.024517][ T27] audit: type=1800 audit(1744973921.471:97): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.106" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 115.059096][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.087074][ T4776] tipc: Enabling of bearer rejected, failed to enable media [ 115.120851][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.232662][ T4787] sctp: failed to load transform for md5: -2 [ 115.373292][ T4790] device syzkaller0 entered promiscuous mode [ 115.566251][ T4797] Zero length message leads to an empty skb [ 115.927909][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 115.947338][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.023673][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.037448][ T26] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 117.046767][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.056582][ T26] usb 4-1: config 0 descriptor?? [ 117.069796][ T26] usb 4-1: can't set config #0, error -71 [ 117.076770][ T26] usb 4-1: USB disconnect, device number 4 [ 117.193374][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 120.058119][ T4835] binder: 4830:4835 ioctl 4018620d 0 returned -22 [ 120.065373][ T4835] binder: 4830:4835 ioctl c0306201 200000000080 returned -14 [ 121.630855][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.855438][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 121.869503][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.889019][ T26] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 121.898861][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.911483][ T26] usb 4-1: config 0 descriptor?? [ 122.051928][ T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 124.926902][ T4294] usb 4-1: USB disconnect, device number 5 [ 126.500976][ T4891] binder: 4880:4891 ioctl 4018620d 0 returned -22 [ 126.620976][ T4891] binder: 4880:4891 ioctl c0306201 200000000080 returned -14 [ 127.382829][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 127.446110][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 127.463229][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 127.481985][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 129.543109][ T4293] wlan0 speed is unknown, defaulting to 1000 [ 129.559730][ T4896] infiniband syz0: set active [ 129.569299][ T4896] infiniband syz0: added wlan0 [ 129.578729][ T4896] rdma_rxe: unable to create cq [ 129.584452][ T4896] infiniband syz0: Couldn't create ib_mad CQ [ 129.591135][ T4896] infiniband syz0: Couldn't open port 1 [ 129.645730][ T4896] RDS/IB: syz0: added [ 129.656910][ T4896] smc: adding ib device syz0 with port count 1 [ 129.663671][ T4896] smc: ib device syz0 port 1 has pnetid [ 129.676541][ T4293] wlan0 speed is unknown, defaulting to 1000 [ 129.689941][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 129.771064][ T4294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.825556][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 129.971238][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 129.978234][ T4294] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.022487][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 130.038766][ T4294] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.071116][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.112935][ T4294] usb 3-1: config 0 descriptor?? [ 130.135743][ T4294] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 130.253353][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 130.390345][ T4896] wlan0 speed is unknown, defaulting to 1000 [ 131.741281][ T4935] binder: 4928:4935 ioctl 4018620d 0 returned -22 [ 131.748189][ T4935] binder: 4928:4935 ioctl c0306201 200000000080 returned -14 [ 132.626376][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.636200][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.464175][ T4956] device syzkaller0 entered promiscuous mode [ 133.476979][ T2119] usb 3-1: USB disconnect, device number 3 [ 134.293794][ T4965] sctp: failed to load transform for md5: -2 [ 134.965153][ T4981] syz.3.163[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.965262][ T4981] syz.3.163[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.999355][ T4981] 9pnet_fd: Insufficient options for proto=fd [ 135.194177][ T4991] binder: 4987:4991 ioctl 4018620d 0 returned -22 [ 135.201463][ T4991] binder: 4987:4991 ioctl c0306201 200000000080 returned -14 [ 137.780847][ T4294] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.986572][ T4294] usb 2-1: Using ep0 maxpacket: 32 [ 138.008612][ T4294] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.030829][ T4294] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.040070][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.071423][ T4294] usb 2-1: config 0 descriptor?? [ 138.100023][ T4294] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 139.268151][ T5020] netlink: 'syz.3.172': attribute type 27 has an invalid length. [ 139.924328][ T5039] binder: 5036:5039 ioctl 4018620d 0 returned -22 [ 139.931680][ T5039] binder: 5036:5039 ioctl c0306201 200000000080 returned -14 [ 139.987617][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.995820][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.422460][ T4329] usb 2-1: USB disconnect, device number 4 [ 142.736153][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.819843][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.946036][ T5020] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.957454][ T5020] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.974051][ T5020] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.985524][ T5020] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.438404][ T5068] device syzkaller0 entered promiscuous mode [ 143.756109][ T5092] binder: 5084:5092 ioctl 4018620d 0 returned -22 [ 143.763347][ T5092] binder: 5084:5092 ioctl c0306201 200000000080 returned -14 [ 145.666294][ T4349] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.988545][ T5113] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 147.141308][ T5116] ipt_CLUSTERIP: Please specify destination IP [ 147.180916][ T4349] usb 4-1: device not accepting address 6, error -71 [ 148.511019][ T5130] binder: 5127:5130 ioctl 4018620d 0 returned -22 [ 148.518304][ T5130] binder: 5127:5130 ioctl c0306201 200000000080 returned -14 [ 151.330918][ T4294] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.132531][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 152.139817][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.180462][ T4294] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.195076][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.235984][ T4294] usb 1-1: config 0 descriptor?? [ 152.296271][ T4294] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 152.845654][ T5171] binder: 5165:5171 ioctl 4018620d 0 returned -22 [ 152.852611][ T5171] binder: 5165:5171 ioctl c0306201 200000000080 returned -14 [ 154.699447][ T126] usb 1-1: USB disconnect, device number 4 [ 155.071049][ T4349] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.440928][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 155.450271][ T4349] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 155.480026][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.490813][ T4349] usb 4-1: Product: syz [ 155.495026][ T4349] usb 4-1: Manufacturer: syz [ 155.500343][ T4349] usb 4-1: SerialNumber: syz [ 155.830700][ T4349] usb 4-1: config 0 descriptor?? [ 156.224966][ T4349] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 156.553151][ T5150] udevd[5150]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.080510][ T5233] device veth3 entered promiscuous mode [ 159.741950][ T26] usb 4-1: USB disconnect, device number 8 [ 159.874531][ T5230] wlan0 speed is unknown, defaulting to 1000 [ 159.952165][ T2119] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.145539][ T2119] usb 5-1: Using ep0 maxpacket: 32 [ 160.152710][ T2119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.186288][ T2119] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 160.216605][ T2119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.251723][ T2119] usb 5-1: config 0 descriptor?? [ 160.275109][ T2119] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 162.931995][ T22] usb 5-1: USB disconnect, device number 5 [ 164.949268][ T5300] tipc: Started in network mode [ 164.954237][ T5300] tipc: Node identity 4, cluster identity 4711 [ 164.960401][ T5300] tipc: Node number set to 4 [ 166.380444][ T5304] device syzkaller0 entered promiscuous mode [ 168.211208][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.501220][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 168.546081][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.645732][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.728475][ T22] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 168.785665][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.805317][ T22] usb 2-1: config 0 descriptor?? [ 169.256262][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 169.262340][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 169.270297][ T22] usb 2-1: USB disconnect, device number 5 [ 169.415218][ T5347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.353462][ T2119] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.641280][ T2119] usb 2-1: Using ep0 maxpacket: 32 [ 170.828817][ T2119] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.865144][ T2119] usb 2-1: config 0 has no interface number 0 [ 170.935776][ T2119] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 171.023305][ T2119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.104984][ T2119] usb 2-1: Product: syz [ 171.361548][ T2119] usb 2-1: Manufacturer: syz [ 171.366292][ T2119] usb 2-1: SerialNumber: syz [ 171.381584][ T2119] usb 2-1: config 0 descriptor?? [ 171.413222][ T2119] smsc95xx v2.0.0 [ 171.524083][ T5363] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 171.799040][ T2119] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 171.809980][ T2119] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.856739][ T5359] wlan0 speed is unknown, defaulting to 1000 [ 172.105291][ T2119] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 172.118318][ T2119] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 172.291357][ T2119] usb 2-1: USB disconnect, device number 6 [ 172.333820][ T5376] IPv6: Can't replace route, no match found [ 178.344167][ T5415] device syzkaller0 entered promiscuous mode [ 181.208555][ T5451] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 181.420722][ T5444] fuse: Bad value for 'fd' [ 181.479790][ T5444] block device autoloading is deprecated and will be removed. [ 183.795449][ T5452] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 184.274558][ T5479] fuse: root generation should be zero [ 186.137764][ T5501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.344826][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 186.548699][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 186.554818][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 186.561927][ T4258] Bluetooth: hci0: command 0x0406 tx timeout [ 186.567978][ T4258] Bluetooth: hci1: command 0x0406 tx timeout [ 186.701487][ T5506] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 186.733309][ T5506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.315'. [ 186.887381][ T5509] device syzkaller0 entered promiscuous mode [ 191.217107][ T4329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.675883][ T4329] usb 2-1: Using ep0 maxpacket: 8 [ 192.616089][ T4329] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 192.723718][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.750828][ T4329] usb 2-1: Product: syz [ 192.765319][ T4329] usb 2-1: Manufacturer: syz [ 192.769953][ T4329] usb 2-1: SerialNumber: syz [ 192.776558][ T4329] usb 2-1: config 0 descriptor?? [ 192.786182][ T5580] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 192.838271][ T5580] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 193.222743][ T5586] wlan0 speed is unknown, defaulting to 1000 [ 194.001280][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.007651][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.031878][ T4329] usb 2-1: USB disconnect, device number 7 [ 195.120949][ T5594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.903930][ T5548] udevd[5548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.909527][ T5605] 9pnet_fd: Insufficient options for proto=fd [ 197.761008][ T4294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 197.951095][ T4294] usb 1-1: Using ep0 maxpacket: 16 [ 198.083322][ T4294] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 198.083833][ T5619] syz.1.348[5619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.092520][ T5619] syz.1.348[5619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.110843][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.890839][ T4294] usb 1-1: Product: syz [ 198.895074][ T4294] usb 1-1: Manufacturer: syz [ 198.900229][ T4294] usb 1-1: SerialNumber: syz [ 199.019845][ T4294] usb 1-1: config 0 descriptor?? [ 199.151732][ T4294] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 199.431241][ T5548] udevd[5548]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.514482][ T5635] devpts: called with bogus options [ 200.784675][ T22] usb 1-1: USB disconnect, device number 5 [ 200.816157][ T5635] syz.4.351[5635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.816259][ T5635] syz.4.351[5635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.830001][ T5635] 9pnet_fd: Insufficient options for proto=fd [ 200.856092][ T5641] wlan0 speed is unknown, defaulting to 1000 [ 202.615863][ T5677] binder: 5668:5677 ioctl 4018620d 0 returned -22 [ 202.623811][ T5677] binder: 5668:5677 ioctl c0306201 200000000080 returned -14 [ 203.670667][ T5690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 204.497831][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 205.448069][ T5687] tipc: Started in network mode [ 205.467661][ T5687] tipc: Node identity 4, cluster identity 4711 [ 205.487903][ T5687] tipc: Node number set to 4 [ 206.885541][ T5720] binder: 5715:5720 ioctl 4018620d 0 returned -22 [ 206.892973][ T5720] binder: 5715:5720 ioctl c0306201 200000000080 returned -14 [ 207.699543][ T5730] netlink: 'syz.4.376': attribute type 3 has an invalid length. [ 208.032669][ T5734] input: syz1 as /devices/virtual/input/input8 [ 208.195853][ T5741] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.380'. [ 208.207016][ T5741] 0ªX¹¦Dö»: renamed from gretap0 [ 213.100129][ T5769] binder: 5762:5769 ioctl 4018620d 0 returned -22 [ 213.100429][ T5769] binder: 5762:5769 ioctl c0306201 200000000080 returned -14 [ 217.542315][ T5828] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 217.610237][ T5829] binder: 5817:5829 ioctl 4018620d 0 returned -22 [ 217.617485][ T5829] binder: 5817:5829 ioctl c0306201 200000000080 returned -14 [ 219.664011][ T5848] device bridge0 entered promiscuous mode [ 219.675359][ T5848] bridge0: port 3(macsec0) entered blocking state [ 219.682181][ T5848] bridge0: port 3(macsec0) entered disabled state [ 219.732172][ T5848] device bridge0 left promiscuous mode [ 220.693402][ T5865] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 221.653282][ T5877] binder: 5867:5877 ioctl 4018620d 0 returned -22 [ 221.660526][ T5877] binder: 5867:5877 ioctl c0306201 200000000080 returned -14 [ 222.743391][ T5906] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 223.027061][ T5908] process 'syz.4.431' launched './file0' with NULL argv: empty string added [ 223.991625][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 225.244916][ T5933] sctp: failed to load transform for md5: -2 [ 231.866183][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.873673][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.800978][ T27] audit: type=1326 audit(1744974040.241:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 233.865167][ T27] audit: type=1326 audit(1744974040.241:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 233.946983][ T27] audit: type=1326 audit(1744974040.241:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.095721][ T27] audit: type=1326 audit(1744974040.241:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.229524][ T27] audit: type=1326 audit(1744974040.241:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.436258][ T27] audit: type=1326 audit(1744974040.241:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.477534][ T27] audit: type=1326 audit(1744974040.241:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.492123][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 234.499888][ T27] audit: type=1326 audit(1744974040.241:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.531060][ T27] audit: type=1326 audit(1744974040.241:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.556704][ T27] audit: type=1326 audit(1744974040.241:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3885f8e169 code=0x7ffc0000 [ 234.821710][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.868440][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.177940][ T5991] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.187056][ T5991] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.196021][ T5991] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.204905][ T5991] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.316950][ T5991] device veth3 left promiscuous mode [ 235.326725][ T5999] device veth4 entered promiscuous mode [ 235.610128][ T6057] fuse: Unknown parameter 'grou00000000000000000000' [ 235.667911][ T6051] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 235.829767][ T6066] fuse: Bad value for 'fd' [ 235.841370][ T6066] 9pnet_fd: Insufficient options for proto=fd [ 237.939911][ T6088] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 238.045691][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 238.326435][ T6095] wlan0 speed is unknown, defaulting to 1000 [ 238.683252][ T6099] wlan0 speed is unknown, defaulting to 1000 [ 238.964588][ T6105] netlink: 'syz.0.490': attribute type 16 has an invalid length. [ 239.007696][ T6105] netlink: 'syz.0.490': attribute type 17 has an invalid length. [ 239.154177][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.215846][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.260921][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.271412][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.280147][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.291524][ T6105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.135738][ T6113] sctp: failed to load transform for md5: -2 [ 241.461480][ T6137] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 241.474751][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 241.670872][ T4349] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 241.878958][ T4349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.901629][ T4349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.936723][ T4349] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.012924][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.027162][ T6153] binder: 6145:6153 ioctl 4018620d 0 returned -22 [ 242.034142][ T6153] binder: 6145:6153 ioctl c0306201 200000000080 returned -14 [ 242.053360][ T4349] usb 3-1: SerialNumber: syz [ 242.294897][ T4349] usb 3-1: 0:2 : does not exist [ 242.299870][ T4349] usb 3-1: unit 5: unexpected type 0x0d [ 242.329263][ T4349] usb 3-1: USB disconnect, device number 4 [ 242.552626][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.772867][ T6158] 9pnet_fd: Insufficient options for proto=fd [ 243.793020][ T6167] sctp: failed to load transform for md5: -2 [ 244.029380][ T6180] input: syz0 as /devices/virtual/input/input9 [ 244.090971][ T6181] syz.4.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.695286][ T6195] binder: 6193:6195 ioctl 4018620d 0 returned -22 [ 245.702636][ T6195] binder: 6193:6195 ioctl c0306201 200000000080 returned -14 [ 245.790767][ T4349] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.982344][ T4349] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.995922][ T4349] usb 1-1: config 1 interface 0 has no altsetting 1 [ 246.008258][ T4349] usb 1-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 246.017821][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.026347][ T4349] usb 1-1: Product: syz [ 246.033186][ T4349] usb 1-1: Manufacturer: syz [ 246.038073][ T4349] usb 1-1: SerialNumber: syz [ 248.458703][ T4349] usb 1-1: USB disconnect, device number 6 [ 248.498348][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 248.520378][ T6215] netlink: 76 bytes leftover after parsing attributes in process `syz.3.519'. [ 249.771312][ T6232] wlan0 speed is unknown, defaulting to 1000 [ 250.027293][ T6242] binder: 6237:6242 ioctl 4018620d 0 returned -22 [ 250.034327][ T6242] binder: 6237:6242 ioctl c0306201 200000000080 returned -14 [ 250.039678][ T4349] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.600821][ T4349] usb 3-1: Using ep0 maxpacket: 16 [ 250.608761][ T4349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.632670][ T4349] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.655348][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.680294][ T4349] usb 3-1: Product: syz [ 250.700991][ T4349] usb 3-1: Manufacturer: syz [ 250.736064][ T4349] usb 3-1: SerialNumber: syz [ 251.175883][ T4349] usb 3-1: 0:2 : does not exist [ 251.585237][ T4349] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 251.978566][ T4349] usb 3-1: USB disconnect, device number 5 [ 252.250989][ T6264] bridge0: port 3(syz_tun) entered blocking state [ 252.258089][ T6264] bridge0: port 3(syz_tun) entered disabled state [ 252.273652][ T6264] device syz_tun entered promiscuous mode [ 252.282568][ T6264] bridge0: port 3(syz_tun) entered blocking state [ 252.289310][ T6264] bridge0: port 3(syz_tun) entered forwarding state [ 252.701181][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.384197][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.390596][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.311218][ T6300] futex_wake_op: syz.0.545 tries to shift op by -1; fix this program [ 257.692656][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 257.733053][ T6331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.557'. [ 257.994622][ T6342] fuse: Unknown parameter 'group_i00000000000000000000' [ 258.600900][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.030765][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 259.037655][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.066389][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.083293][ T22] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 259.462531][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.766152][ T22] usb 4-1: config 0 descriptor?? [ 260.017308][ C1] hrtimer: interrupt took 48533 ns [ 260.195572][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.202503][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.209370][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.222618][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.235756][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.250154][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.268560][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.287492][ T22] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 260.303481][ T22] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 260.397746][ T22] usb 4-1: USB disconnect, device number 9 [ 264.728117][ T6403] binder: 6398:6403 ioctl 4018620d 0 returned -22 [ 264.735191][ T6403] binder: 6398:6403 ioctl c0306201 200000000080 returned -14 [ 269.435333][ T6450] binder: 6446:6450 ioctl 4018620d 0 returned -22 [ 269.442333][ T6450] binder: 6446:6450 ioctl c0306201 200000000080 returned -14 [ 277.137963][ T6509] fuse: Bad value for 'user_id' [ 280.620825][ T5079] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 281.042285][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.212204][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.267881][ T5079] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 282.540657][ T5079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.569823][ T5079] usb 1-1: config 0 descriptor?? [ 283.613448][ T5079] usbhid 1-1:0.0: can't add hid device: -71 [ 283.628364][ T5079] usbhid: probe of 1-1:0.0 failed with error -71 [ 283.673267][ T5079] usb 1-1: USB disconnect, device number 7 [ 285.366871][ T6574] Bluetooth: MGMT ver 1.22 [ 287.171654][ T5079] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 287.372592][ T5079] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 287.386804][ T5079] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 287.404599][ T5079] usb 1-1: config 0 has no interface number 0 [ 287.420767][ T5079] usb 1-1: New USB device found, idVendor=12d1, idProduct=d03d, bcdDevice=2f.07 [ 287.440460][ T5079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.460853][ T5079] usb 1-1: config 0 descriptor?? [ 290.167843][ T5079] usb 1-1: string descriptor 0 read error: -71 [ 290.175895][ T5079] cdc_mbim 1-1:0.72: skipping garbage [ 290.182588][ T5079] cdc_mbim 1-1:0.72: CDC Union missing and no IAD found [ 290.189611][ T5079] cdc_mbim 1-1:0.72: bind() failure [ 290.198557][ T5079] usb 1-1: USB disconnect, device number 8 [ 297.533056][ T6675] 9pnet_fd: Insufficient options for proto=fd [ 297.553410][ T6675] 9pnet_fd: Insufficient options for proto=fd [ 297.910833][ T5079] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 297.962073][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 297.962087][ T27] audit: type=1326 audit(1744974104.411:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 298.690810][ T27] audit: type=1326 audit(1744974104.411:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 298.723229][ T27] audit: type=1326 audit(1744974104.411:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 298.766352][ T27] audit: type=1326 audit(1744974104.411:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 298.797063][ T5079] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 298.850851][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.892275][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.922779][ T27] audit: type=1326 audit(1744974104.411:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 298.959716][ T5079] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 299.020477][ T5079] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 299.038322][ T27] audit: type=1326 audit(1744974104.411:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885f8e169 code=0x7fc00000 [ 299.067910][ T5079] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 299.088504][ T5079] usb 1-1: Manufacturer: syz [ 300.545340][ T5079] usb 1-1: config 0 descriptor?? [ 300.684688][ T5079] usbhid 1-1:0.0: can't add hid device: -71 [ 300.697649][ T5079] usbhid: probe of 1-1:0.0 failed with error -71 [ 300.724917][ T5079] usb 1-1: USB disconnect, device number 9 [ 301.324027][ T6719] wlan0 speed is unknown, defaulting to 1000 [ 303.703522][ T6743] overlayfs: upper fs does not support file handles, falling back to index=off. [ 303.919042][ T6748] overlayfs: failed to get inode (-116) [ 303.925686][ T6748] overlayfs: failed to get inode (-116) [ 303.937933][ T6748] overlayfs: failed to get inode (-116) [ 303.944094][ T6748] overlayfs: failed to get inode (-116) [ 303.999385][ T6750] 9pnet_fd: Insufficient options for proto=fd [ 304.158030][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 304.326365][ T41] infiniband syz0: set down [ 304.332277][ T5079] wlan0 speed is unknown, defaulting to 1000 [ 304.352433][ T5079] wlan0 speed is unknown, defaulting to 1000 [ 305.878769][ T6772] xt_CT: No such helper "snmp_trap" [ 309.572331][ T6798] wlan0 speed is unknown, defaulting to 1000 [ 309.610916][ T6802] sctp: failed to load transform for md5: -2 [ 310.056218][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 310.066477][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 311.957458][ T6826] 9pnet_fd: Insufficient options for proto=fd [ 312.319338][ T6836] fuse: Bad value for 'fd' [ 316.049941][ T6856] sctp: failed to load transform for md5: -2 [ 316.824114][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.832893][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.151008][ T6899] fuse: Unknown parameter 'fd0x0000000000000005' [ 318.300791][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 318.325245][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.346348][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.367125][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.388319][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.409844][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.436108][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.457044][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.478007][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.499051][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.510749][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 318.517598][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.520320][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.560745][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.572958][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.583683][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.589447][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.610733][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.618832][ T22] usb 5-1: Product: syz [ 318.626239][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.634201][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.650757][ T22] usb 5-1: Manufacturer: syz [ 318.655371][ T22] usb 5-1: SerialNumber: syz [ 318.670187][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.679041][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.692005][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.699581][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.727397][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.758364][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.783743][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.808049][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.839461][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.869206][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.902569][ T22] usb 5-1: 0:2 : does not exist [ 318.909755][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.915397][ T22] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 318.947033][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.963667][ T22] usb 5-1: USB disconnect, device number 6 [ 318.990005][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.023496][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.048471][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.076329][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.104306][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.124547][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.150786][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.169185][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.188689][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.198882][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.219261][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.232190][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.242880][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.275881][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.306308][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.330723][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.358501][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.376218][ T5079] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 319.402678][ T5079] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 319.412397][ T6912] tipc: Can't bind to reserved service type 0 [ 322.757949][ T6946] overlayfs: missing 'lowerdir' [ 323.511279][ T6951] fuse: Invalid rootmode [ 323.781593][ T6955] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 325.921491][ T6986] tipc: Enabled bearer , priority 0 [ 326.032849][ T6986] device syzkaller0 entered promiscuous mode [ 326.062903][ T6986] tipc: Resetting bearer [ 326.138193][ T6985] tipc: Resetting bearer [ 328.598554][ T27] audit: type=1326 audit(1744974135.041:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3158e169 code=0x7ffc0000 [ 328.662411][ T27] audit: type=1326 audit(1744974135.041:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3158e169 code=0x7ffc0000 [ 329.132140][ T27] audit: type=1326 audit(1744974135.051:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f0e3158e169 code=0x7ffc0000 [ 329.365262][ T27] audit: type=1326 audit(1744974135.051:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3158e169 code=0x7ffc0000 [ 329.835554][ T7031] binder: 7027:7031 ioctl 4018620d 0 returned -22 [ 329.842734][ T7031] binder: 7027:7031 ioctl c0306201 200000000080 returned -14 [ 331.706295][ T6985] tipc: Disabling bearer [ 335.378148][ T7073] netlink: 452 bytes leftover after parsing attributes in process `syz.4.772'. [ 335.786437][ T7083] tipc: Enabled bearer , priority 0 [ 335.870776][ T7083] device syzkaller0 entered promiscuous mode [ 335.877880][ T7083] tipc: Resetting bearer [ 335.919815][ T7082] tipc: Resetting bearer [ 336.043779][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x801 [ 336.053678][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 336.073163][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x1 [ 336.094287][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x1 [ 336.103485][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x801 [ 336.119495][ T7087] kvm [7085]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x801, nop [ 342.094229][ T7082] tipc: Disabling bearer [ 342.111273][ T7125] wlan0 speed is unknown, defaulting to 1000 [ 346.620051][ T7179] sctp: failed to load transform for md5: -2 [ 347.150971][ T7198] tipc: Enabled bearer , priority 0 [ 347.188759][ T7198] device syzkaller0 entered promiscuous mode [ 347.581602][ T7198] tipc: Resetting bearer [ 347.705094][ T7193] fuse: Unknown parameter '0x000000000000000a' [ 348.436675][ T41] tipc: Resetting bearer [ 348.498448][ T7195] tipc: Resetting bearer [ 352.826596][ T7239] sctp: failed to load transform for md5: -2 [ 356.764303][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x801 [ 356.774795][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 356.804183][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x1 [ 356.819775][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x3 [ 356.834458][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x801 [ 356.862843][ T7282] kvm [7281]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x801, nop [ 359.818676][ T7307] binder: 7299:7307 ioctl 4018620d 0 returned -22 [ 359.825654][ T7307] binder: 7299:7307 ioctl c0306201 200000000080 returned -14 [ 362.132573][ T7195] tipc: Disabling bearer [ 362.168238][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 362.177959][ T7267] netlink: 76 bytes leftover after parsing attributes in process `syz.2.827'. [ 362.631008][ T7334] netlink: 52 bytes leftover after parsing attributes in process `syz.2.843'. [ 362.640093][ T7334] unsupported nlmsg_type 40 [ 363.791203][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 363.965345][ T4258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.985764][ T4258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.993527][ T4258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.007981][ T4258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.042018][ T4258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 364.050355][ T4258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.148765][ T7343] wlan0 speed is unknown, defaulting to 1000 [ 367.151611][ T7358] fuse: Bad value for 'fd' [ 367.420180][ T4258] Bluetooth: hci5: command 0x0409 tx timeout [ 369.407494][ T7343] chnl_net:caif_netlink_parms(): no params data found [ 369.460887][ T4258] Bluetooth: hci5: command 0x041b tx timeout [ 369.592538][ T4489] tipc: Left network mode [ 370.164503][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.196584][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.232953][ T7343] device bridge_slave_0 entered promiscuous mode [ 371.054101][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.097633][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.138953][ T7343] device bridge_slave_1 entered promiscuous mode [ 371.307919][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 371.447944][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.541079][ T4258] Bluetooth: hci5: command 0x040f tx timeout [ 371.560354][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.038188][ T7343] team0: Port device team_slave_0 added [ 373.178022][ T7343] team0: Port device team_slave_1 added [ 373.381744][ T7441] block device autoloading is deprecated and will be removed. [ 373.414154][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.423277][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.520780][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.710824][ T4258] Bluetooth: hci5: command 0x0419 tx timeout [ 373.769456][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.789027][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.061848][ T7458] block device autoloading is deprecated and will be removed. [ 374.074453][ T7458] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 374.084344][ T7458] FAT-fs (loop3): unable to read boot sector [ 374.513685][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.523630][ T7461] loop3: detected capacity change from 0 to 512 [ 374.590210][ T7461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 374.667622][ T7343] device hsr_slave_0 entered promiscuous mode [ 374.704618][ T7343] device hsr_slave_1 entered promiscuous mode [ 374.726825][ T7461] EXT4-fs (loop3): 1 truncate cleaned up [ 374.744721][ T7461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 374.781522][ T7343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.795801][ T7343] Cannot create hsr debugfs directory [ 376.798745][ T4489] device hsr_slave_0 left promiscuous mode [ 376.832755][ T4489] device hsr_slave_1 left promiscuous mode [ 376.875473][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.905832][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.953024][ T4489] device bridge_slave_1 left promiscuous mode [ 376.962054][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.091553][ T4489] device bridge_slave_0 left promiscuous mode [ 377.108760][ T4489] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.262736][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.269054][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.721657][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 378.850108][ T7512] loop3: detected capacity change from 0 to 512 [ 378.933089][ T7512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 379.003444][ T7512] EXT4-fs (loop3): 1 truncate cleaned up [ 379.009147][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 380.003022][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 380.158277][ T4489] team0 (unregistering): Port device team_slave_1 removed [ 380.808197][ T4489] team0 (unregistering): Port device team_slave_0 removed [ 380.823669][ T7528] loop3: detected capacity change from 0 to 256 [ 380.875981][ T7528] FAT-fs (loop3): Directory bread(block 64) failed [ 380.898771][ T7528] FAT-fs (loop3): Directory bread(block 65) failed [ 380.910949][ T7528] FAT-fs (loop3): Directory bread(block 66) failed [ 380.917502][ T7528] FAT-fs (loop3): Directory bread(block 67) failed [ 380.936191][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 380.940866][ T7528] FAT-fs (loop3): Directory bread(block 68) failed [ 380.960722][ T7528] FAT-fs (loop3): Directory bread(block 69) failed [ 380.967572][ T7528] FAT-fs (loop3): Directory bread(block 70) failed [ 380.977065][ T4489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.987139][ T7528] FAT-fs (loop3): Directory bread(block 71) failed [ 381.000882][ T7528] FAT-fs (loop3): Directory bread(block 72) failed [ 381.007422][ T7528] FAT-fs (loop3): Directory bread(block 73) failed [ 381.326221][ T4489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.356565][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.379036][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.412122][ T26] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.421557][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.429782][ T26] usb 5-1: SerialNumber: syz [ 382.344819][ T4489] bond0 (unregistering): Released all slaves [ 382.468026][ T7343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.488339][ T7343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.546189][ T7343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.608697][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 382.711407][ T7535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.884'. [ 383.448731][ T7343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.464267][ T26] usb 5-1: 0:2 : does not exist [ 383.482523][ T26] usb 5-1: unit 5 not found! [ 383.540604][ T7554] sctp: failed to load transform for md5: -2 [ 383.573405][ T26] usb 5-1: USB disconnect, device number 7 [ 383.911642][ T7384] udevd[7384]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.950493][ T7568] fuse: Bad value for 'rootmode' [ 384.020471][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.111802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.131081][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.173964][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.217871][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.237663][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.262126][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.270392][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.324869][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.500534][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.524937][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.278483][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.285694][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.385881][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.499887][ T7343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.601197][ T4265] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 385.611053][ T4265] CPU: 1 PID: 4265 Comm: kworker/u5:7 Not tainted 6.1.134-syzkaller #0 [ 385.619314][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.629392][ T4265] Workqueue: hci4 hci_rx_work [ 385.634108][ T4265] Call Trace: [ 385.637394][ T4265] [ 385.640333][ T4265] dump_stack_lvl+0x1e3/0x2cb [ 385.645030][ T4265] ? nf_tcp_handle_invalid+0x647/0x647 [ 385.650508][ T4265] ? panic+0x764/0x764 [ 385.654602][ T4265] sysfs_create_dir_ns+0x2c6/0x390 [ 385.659736][ T4265] ? sysfs_warn_dup+0xa0/0xa0 [ 385.664443][ T4265] kobject_add_internal+0x6df/0xd10 [ 385.669673][ T4265] kobject_add+0x14e/0x210 [ 385.674128][ T4265] ? device_add+0x3c2/0xfd0 [ 385.678658][ T4265] ? kobject_init+0x1d0/0x1d0 [ 385.683351][ T4265] ? __raw_spin_lock_init+0x41/0x100 [ 385.688649][ T4265] ? get_device_parent+0x128/0x400 [ 385.693783][ T4265] device_add+0x476/0xfd0 [ 385.698149][ T4265] hci_conn_add_sysfs+0xe4/0x1f0 [ 385.703090][ T4265] le_conn_complete_evt+0xcfe/0x1350 [ 385.708377][ T4265] ? trace_contention_end+0x61/0x170 [ 385.713662][ T4265] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 385.719907][ T4265] ? __mutex_unlock_slowpath+0x218/0x750 [ 385.725552][ T4265] ? mutex_unlock+0x10/0x10 [ 385.730054][ T4265] ? skb_pull_data+0x10e/0x220 [ 385.734838][ T4265] hci_le_conn_complete_evt+0x188/0x410 [ 385.740386][ T4265] hci_event_packet+0xa40/0x1510 [ 385.745330][ T4265] ? hci_remote_host_features_evt+0x270/0x270 [ 385.751405][ T4265] ? bis_list+0x290/0x290 [ 385.755731][ T4265] ? do_raw_spin_unlock+0x137/0x8a0 [ 385.760927][ T4265] ? kcov_remote_start+0x4ae/0x7c0 [ 385.766043][ T4265] ? exc_page_fault+0x610/0x620 [ 385.770928][ T4265] ? hci_send_to_monitor+0x99/0x4d0 [ 385.776124][ T4265] hci_rx_work+0x3a6/0xd10 [ 385.780544][ T4265] ? process_one_work+0x806/0x1260 [ 385.785656][ T4265] process_one_work+0x917/0x1260 [ 385.790606][ T4265] ? worker_detach_from_pool+0x260/0x260 [ 385.796238][ T4265] ? _raw_spin_lock_irqsave+0x120/0x120 [ 385.801781][ T4265] ? kthread_data+0x4e/0xc0 [ 385.806290][ T4265] ? wq_worker_running+0x97/0x190 [ 385.811321][ T4265] worker_thread+0xa47/0x1200 [ 385.815994][ T4265] ? _raw_spin_unlock+0x40/0x40 [ 385.820847][ T4265] ? release_firmware_map_entry+0x18b/0x18b [ 385.826744][ T4265] ? _raw_spin_unlock+0x40/0x40 [ 385.831601][ T4265] kthread+0x28d/0x320 [ 385.835672][ T4265] ? worker_clr_flags+0x190/0x190 [ 385.840690][ T4265] ? kthread_blkcg+0xd0/0xd0 [ 385.845282][ T4265] ret_from_fork+0x1f/0x30 [ 385.849717][ T4265] [ 385.857707][ T4265] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 385.871214][ T4265] Bluetooth: hci4: failed to register connection device [ 386.180716][ T7343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.451213][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.497043][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.538167][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.579928][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.601598][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.625075][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.650346][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.660551][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.683850][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.819333][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.887859][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.059701][ T7617] fuse: Bad value for 'rootmode' [ 388.599798][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 388.612435][ T7611] netlink: 76 bytes leftover after parsing attributes in process `syz.3.900'. [ 390.491503][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.499019][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.547330][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.746564][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.766855][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.954919][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.452798][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 392.711218][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.740623][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.764250][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.868235][ T7343] device veth0_vlan entered promiscuous mode [ 393.786082][ T7343] device veth1_vlan entered promiscuous mode [ 394.156242][ T7343] device veth0_macvtap entered promiscuous mode [ 395.166884][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.213129][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.222173][ T7690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.239310][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.259187][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.282590][ T7343] device veth1_macvtap entered promiscuous mode [ 395.524286][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 395.543842][ T7696] netlink: 76 bytes leftover after parsing attributes in process `syz.1.915'. [ 395.566200][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.600882][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.627459][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.662814][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.678111][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.708466][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.756234][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.784353][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.803840][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.845373][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.869734][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.929329][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.957415][ T7707] loop3: detected capacity change from 0 to 8 [ 395.960510][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.982802][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.015276][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.039920][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.058593][ T7707] SQUASHFS error: Failed to read block 0x4de: -5 [ 396.065979][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.085174][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.092370][ T7707] SQUASHFS error: Failed to read block 0x4de: -5 [ 396.100278][ T27] audit: type=1800 audit(1744974202.541:149): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.917" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 396.146125][ T7343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.162790][ T7343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.180152][ T7343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.233205][ T7343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.261427][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.358130][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.632176][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.653816][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.671143][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.731995][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.034586][ T7738] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 399.069377][ T7738] EXT4-fs (loop3): unable to read superblock [ 399.588494][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 399.619328][ T7760] netlink: 76 bytes leftover after parsing attributes in process `syz.5.932'. [ 400.634445][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 400.815268][ T7780] loop3: detected capacity change from 0 to 512 [ 402.443791][ T7778] wlan0 speed is unknown, defaulting to 1000 [ 406.281307][ T27] audit: type=1326 audit(1744974212.651:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3158e169 code=0x7ffc0000 [ 406.568801][ T27] audit: type=1326 audit(1744974212.651:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e3158cad0 code=0x7ffc0000 [ 406.591280][ T27] audit: type=1326 audit(1744974212.651:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e3158dd6b code=0x7ffc0000 [ 406.683791][ T27] audit: type=1326 audit(1744974212.651:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e3158dd6b code=0x7ffc0000 [ 406.966923][ T27] audit: type=1326 audit(1744974212.681:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e3158dd6b code=0x7ffc0000 [ 407.118672][ T27] audit: type=1326 audit(1744974212.681:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e3158dd6b code=0x7ffc0000 [ 408.243204][ T7850] fuse: Unknown parameter 'use00000000000000000000' [ 409.156954][ T7877] binder: 7855:7877 ioctl 4018620d 0 returned -22 [ 409.500233][ T7880] binder: 7855:7880 ioctl c0306201 200000000080 returned -14 [ 411.200988][ T5079] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 411.469231][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 411.642966][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.670260][ T5079] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 411.694905][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.901329][ T5079] usb 5-1: config 0 descriptor?? [ 412.393999][ T5079] elan 0003:04F3:0755.0006: failed to start in urb: -90 [ 412.396482][ T5079] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 413.362667][ T22] usb 5-1: USB disconnect, device number 8 [ 414.157221][ T7947] mmap: syz.1.971 (7947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 414.933360][ T7954] page:ffffea0001a02040 refcount:4 mapcount:1 mapping:ffff88807de71ca8 index:0x0 pfn:0x68081 [ 414.944366][ T7954] memcg:ffff888025802000 [ 414.948622][ T7954] aops:shmem_aops ino:574 [ 414.952960][ T7954] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 414.962788][ T7954] raw: 00fff60000080015 ffff888025806248 ffffea0001a020c8 ffff88807de71ca8 [ 414.971387][ T7954] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888025802000 [ 414.979984][ T7954] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 414.987281][ T7954] page_owner tracks the page as allocated [ 414.993697][ T7954] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7959, tgid 7954 (syz.4.975), ts 414764663556, free_ts 411828695121 [ 415.011423][ T7954] post_alloc_hook+0x18d/0x1b0 [ 415.016212][ T7954] get_page_from_freelist+0x3731/0x38d0 [ 415.021773][ T7954] __alloc_pages+0x28d/0x770 [ 415.026377][ T7954] __folio_alloc+0xf/0x30 [ 415.030719][ T7954] vma_alloc_folio+0x486/0x990 [ 415.035502][ T7954] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 415.041245][ T7954] shmem_get_folio_gfp+0x13f0/0x3470 [ 415.046550][ T7954] shmem_read_mapping_page_gfp+0x113/0x3a0 [ 415.052385][ T7954] udmabuf_create+0x85e/0x1060 [ 415.057162][ T7954] udmabuf_ioctl+0x300/0x4e0 [ 415.061764][ T7954] __se_sys_ioctl+0xf1/0x160 [ 415.066372][ T7954] do_syscall_64+0x3b/0x80 [ 415.070825][ T7954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.076747][ T7954] page last free stack trace: [ 415.081431][ T7954] free_unref_page_prepare+0x12a6/0x15b0 [ 415.087092][ T7954] free_unref_page_list+0x663/0x900 [ 415.092315][ T7954] release_pages+0x24c4/0x27a0 [ 415.097092][ T7954] __pagevec_release+0x80/0xf0 [ 415.101858][ T7954] shmem_undo_range+0x865/0x2390 [ 415.106797][ T7954] shmem_evict_inode+0x265/0xa60 [ 415.111732][ T7954] evict+0x529/0x930 [ 415.115627][ T7954] __dentry_kill+0x436/0x650 [ 415.120222][ T7954] dentry_kill+0xbb/0x290 [ 415.124548][ T7954] dput+0xfb/0x1d0 [ 415.128269][ T7954] __fput+0x62e/0x8d0 [ 415.132245][ T7954] task_work_run+0x246/0x300 [ 415.136828][ T7954] do_exit+0xa6e/0x26a0 [ 415.140983][ T7954] do_group_exit+0x202/0x2b0 [ 415.145570][ T7954] get_signal+0x16cb/0x17a0 [ 415.150078][ T7954] arch_do_signal_or_restart+0xb3/0x12a0 [ 415.155810][ T7954] ------------[ cut here ]------------ [ 415.161252][ T7954] kernel BUG at mm/filemap.c:153! [ 415.166286][ T7954] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 415.172345][ T7954] CPU: 1 PID: 7954 Comm: syz.4.975 Not tainted 6.1.134-syzkaller #0 [ 415.180312][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.190361][ T7954] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 415.196606][ T7954] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 67 2e 2b 00 e9 14 fe ff ff e8 1d cf d3 ff 4c 89 ef 48 c7 c6 e0 1e 15 8b e8 4e 5c 13 00 <0f> 0b e8 07 cf d3 ff 4c 89 ef 48 c7 c6 60 24 15 8b e8 38 5c 13 00 [ 415.216209][ T7954] RSP: 0018:ffffc90004c0f578 EFLAGS: 00010046 [ 415.222266][ T7954] RAX: 66d311a44268a800 RBX: ffff88807de71ca8 RCX: ffffc90004c0f303 [ 415.230235][ T7954] RDX: 0000000000000002 RSI: ffffffff8b0c1dc0 RDI: ffffffff8b5f5fe0 [ 415.238196][ T7954] RBP: ffffc90004c0f718 R08: dffffc0000000000 R09: fffffbfff1d417a6 [ 415.246159][ T7954] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de71ca8 [ 415.254121][ T7954] R13: ffffea0001a02040 R14: ffffea0001a02040 R15: ffffea0001a02040 [ 415.262084][ T7954] FS: 0000555567774500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 415.271006][ T7954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.277578][ T7954] CR2: 0000200000000500 CR3: 000000005dae5000 CR4: 00000000003526e0 [ 415.285545][ T7954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.293507][ T7954] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.301470][ T7954] Call Trace: [ 415.304737][ T7954] [ 415.307660][ T7954] __filemap_remove_folio+0xc7/0xaa0 [ 415.312944][ T7954] ? __rwlock_init+0x140/0x140 [ 415.317707][ T7954] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 415.324725][ T7954] ? _raw_spin_lock_irq+0xdb/0x110 [ 415.329833][ T7954] ? _raw_spin_lock_irqsave+0x120/0x120 [ 415.335378][ T7954] ? find_get_entries+0x710/0x710 [ 415.340400][ T7954] filemap_remove_folio+0x105/0x2e0 [ 415.345601][ T7954] truncate_inode_folio+0x59/0x70 [ 415.350619][ T7954] shmem_undo_range+0x570/0x2390 [ 415.355567][ T7954] ? shmem_truncate_range+0xb0/0xb0 [ 415.360788][ T7954] shmem_evict_inode+0x265/0xa60 [ 415.365715][ T7954] ? inode_wait_for_writeback+0x21f/0x280 [ 415.371431][ T7954] ? shmem_free_in_core_inode+0xb0/0xb0 [ 415.376970][ T7954] ? bit_waitqueue+0x30/0x30 [ 415.381556][ T7954] ? do_raw_spin_unlock+0x137/0x8a0 [ 415.386755][ T7954] ? shmem_free_in_core_inode+0xb0/0xb0 [ 415.392296][ T7954] evict+0x529/0x930 [ 415.396187][ T7954] ? proc_nr_inodes+0x310/0x310 [ 415.401034][ T7954] ? _raw_spin_unlock+0x24/0x40 [ 415.405878][ T7954] ? iput+0x73f/0x980 [ 415.409858][ T7954] __dentry_kill+0x436/0x650 [ 415.414447][ T7954] dentry_kill+0xbb/0x290 [ 415.418765][ T7954] ? dput+0x37/0x1d0 [ 415.422647][ T7954] dput+0xfb/0x1d0 [ 415.426356][ T7954] __fput+0x62e/0x8d0 [ 415.430336][ T7954] task_work_run+0x246/0x300 [ 415.434922][ T7954] ? task_work_cancel+0x2e0/0x2e0 [ 415.439946][ T7954] ? exit_to_user_mode_loop+0x39/0x100 [ 415.445411][ T7954] exit_to_user_mode_loop+0xde/0x100 [ 415.450723][ T7954] exit_to_user_mode_prepare+0xb1/0x140 [ 415.456271][ T7954] syscall_exit_to_user_mode+0x60/0x270 [ 415.461817][ T7954] do_syscall_64+0x47/0x80 [ 415.466264][ T7954] ? clear_bhb_loop+0x45/0xa0 [ 415.470947][ T7954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.476836][ T7954] RIP: 0033:0x7f3885f8e169 [ 415.481250][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.500846][ T7954] RSP: 002b:00007ffcc505a208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 415.509253][ T7954] RAX: 0000000000000000 RBX: 0000000000065250 RCX: 00007f3885f8e169 [ 415.517222][ T7954] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 415.525183][ T7954] RBP: 00007f38861b7ba0 R08: 0000000000000001 R09: 00000007c505a4ff [ 415.533144][ T7954] R10: 00007f3885c00000 R11: 0000000000000246 R12: 00007f38861b608c [ 415.541109][ T7954] R13: 00007f38861b6080 R14: ffffffffffffffff R15: 00007ffcc505a320 [ 415.549082][ T7954] [ 415.552094][ T7954] Modules linked in: [ 415.555990][ T7954] ---[ end trace 0000000000000000 ]--- [ 415.561432][ T7954] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 415.567671][ T7954] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 67 2e 2b 00 e9 14 fe ff ff e8 1d cf d3 ff 4c 89 ef 48 c7 c6 e0 1e 15 8b e8 4e 5c 13 00 <0f> 0b e8 07 cf d3 ff 4c 89 ef 48 c7 c6 60 24 15 8b e8 38 5c 13 00 [ 415.587276][ T7954] RSP: 0018:ffffc90004c0f578 EFLAGS: 00010046 [ 415.593332][ T7954] RAX: 66d311a44268a800 RBX: ffff88807de71ca8 RCX: ffffc90004c0f303 [ 415.601295][ T7954] RDX: 0000000000000002 RSI: ffffffff8b0c1dc0 RDI: ffffffff8b5f5fe0 [ 415.609263][ T7954] RBP: ffffc90004c0f718 R08: dffffc0000000000 R09: fffffbfff1d417a6 [ 415.617233][ T7954] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de71ca8 [ 415.625196][ T7954] R13: ffffea0001a02040 R14: ffffea0001a02040 R15: ffffea0001a02040 [ 415.633157][ T7954] FS: 0000555567774500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 415.642076][ T7954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.648651][ T7954] CR2: 0000200000000500 CR3: 000000005dae5000 CR4: 00000000003526e0 [ 415.656617][ T7954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.664581][ T7954] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.672545][ T7954] Kernel panic - not syncing: Fatal exception [ 415.678998][ T7954] Kernel Offset: disabled [ 415.683320][ T7954] Rebooting in 86400 seconds..