last executing test programs: 13.209820451s ago: executing program 2 (id=930): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xf, 0x4, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x9, 0x2, 0x1, 0x0, 0x10}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000002c0)=0x3) close(r2) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$netlink(0x10, 0x3, 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x484, 0x9, 0x5, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket(0x2b, 0x1, 0x1) mlock(&(0x7f00007f9000/0x4000)=nil, 0x4000) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000200)={0xf0f002, 0x6}) 11.946462122s ago: executing program 2 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000008000000181100", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11.042572931s ago: executing program 2 (id=944): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x20001c, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6e6f626172726965722c00bda08f004784af79a0b5b9dd4b4ec26aeb028ef7358e1a7839401a88adb87aa128cc859cb1064815e5ea4ae61aff15d2b9480372a03e8fa9af1351eeddb2fe6f79188cdf7fa09ed66b1cf88addf9f6744f0bac079e20d3fa16cddd800922eae7521da68b5f456464800eb4c722fa3e7c3f7bb1f2610f73d6d710b7a36907f6f2bc1c336ba301ab1aef6914d8e3b5"], 0x1, 0x5fd, &(0x7f0000000000)="$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") syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c910"], 0x15) 10.71464505s ago: executing program 2 (id=945): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x1c, 0xa, 0xaf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 10.617683179s ago: executing program 2 (id=946): waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40), 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x10000]}]}, 0xa0}}, 0x0) 9.889397653s ago: executing program 4 (id=950): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xf, 0x4, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x9, 0x2, 0x1, 0x0, 0x10}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000002c0)=0x3) close(r2) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$netlink(0x10, 0x3, 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x484, 0x9, 0x5, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket(0x2b, 0x1, 0x1) mlock(&(0x7f00007f9000/0x4000)=nil, 0x4000) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000200)={0xf0f002, 0x6}) 8.000025238s ago: executing program 4 (id=956): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x1c, 0xa, 0xaf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 7.498880002s ago: executing program 4 (id=960): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 6.203741266s ago: executing program 0 (id=962): socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) 6.03732417s ago: executing program 0 (id=964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.899864582s ago: executing program 0 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000008000000181100", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4.464775358s ago: executing program 0 (id=967): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xf, 0x4, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x9, 0x2, 0x1, 0x0, 0x10}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000002c0)=0x3) close(r2) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x484, 0x9, 0x5, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket(0x2b, 0x1, 0x1) mlock(&(0x7f00007f9000/0x4000)=nil, 0x4000) r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000200)={0xf0f002, 0x6}) 4.218966439s ago: executing program 4 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 4.125277558s ago: executing program 1 (id=973): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1, 0xf3}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000840)={0x8, 0x0, [{0x0, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x8001, 0x4}, {0x80000000, 0x4, 0x3, 0x10, 0x8000027, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffff7f, 0x5, 0x2}, {0xb, 0x12, 0x1, 0x7, 0xdf4, 0x401, 0x80000001}, {0x0, 0x2bb, 0x0, 0xa, 0x3, 0x400002, 0x400}, {0x40000001, 0xa, 0x0, 0x5, 0x10000, 0x8, 0xf34f}, {0x80000007, 0x9, 0x9, 0x80000000, 0x9, 0x3, 0x7}, {0xd, 0x451, 0x1, 0x7ffe, 0xffffffff, 0xfffffffc, 0x4}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0xa942, 0x0) 4.026996366s ago: executing program 4 (id=974): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f00000000c0)={[{@gid_forget}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@anchor={'anchor', 0x3d, 0x3ff}}, {@shortad}, {@mode={'mode', 0x3d, 0x4}}, {@shortad}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2000005}}]}, 0x1, 0xc4a, &(0x7f0000001b40)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 3.565931557s ago: executing program 4 (id=975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.181681921s ago: executing program 1 (id=977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 3.012482015s ago: executing program 3 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 2.913338844s ago: executing program 1 (id=979): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 2.767239367s ago: executing program 0 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.978554746s ago: executing program 3 (id=981): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x1c, 0xa, 0xaf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.883833314s ago: executing program 1 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.871582036s ago: executing program 0 (id=983): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 765.426063ms ago: executing program 1 (id=984): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5bd, &(0x7f0000000000)="$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") r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x2002, 0x0) 648.753993ms ago: executing program 3 (id=985): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r1, 0x3) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r2, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 256.562117ms ago: executing program 3 (id=986): unshare(0x28000600) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) 185.216573ms ago: executing program 2 (id=987): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1, 0xf3}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000840)={0x8, 0x0, [{0x0, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x8001, 0x4}, {0x80000000, 0x4, 0x3, 0x10, 0x8000027, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffff7f, 0x5, 0x2}, {0xb, 0x12, 0x1, 0x7, 0xdf4, 0x401, 0x80000001}, {0x0, 0x2bb, 0x0, 0xa, 0x3, 0x400002, 0x400}, {0x40000001, 0xa, 0x0, 0x5, 0x10000, 0x8, 0xf34f}, {0x80000007, 0x9, 0x9, 0x80000000, 0x9, 0x3, 0x7}, {0xd, 0x451, 0x1, 0x7ffe, 0xffffffff, 0xfffffffc, 0x4}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0xa942, 0x0) 167.752485ms ago: executing program 1 (id=988): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x1000000}) r1 = socket(0x5, 0x80000, 0x10000087) syz_io_uring_setup(0x800083f, &(0x7f0000000180)={0x0, 0xa9ee, 0x800, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) openat$null(0xffffff9c, &(0x7f0000000080), 0x80001, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r7 = openat$cgroup_pressure(r5, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r7) 76.767733ms ago: executing program 3 (id=989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 0s ago: executing program 3 (id=990): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) r1 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="f5", 0x1}, {&(0x7f0000000040)="22517920d1f96d4ad0a9c6ca476099ab8508809ad3506332bbff1002950d2a77f7ab51d2a645fe46f99fa87a69f4912afdc495", 0x33}, {&(0x7f0000000100)="b33b7210d2331b9bfa0f5786829d349114ae083ae3d33545", 0x18}], 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): evsim4 netdevsim0: renamed from eth0 [ 71.433140][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.445409][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.459073][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.520711][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.555069][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.561987][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.566653][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.585625][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.612258][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.627239][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.639197][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.656280][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.675946][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.755792][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.775541][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.785390][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.799830][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.823791][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.859299][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.869609][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.882688][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.894001][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.913920][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.922327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.935156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.987299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.997410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.009493][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.017281][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.026760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.065405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.076911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.086447][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.093749][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.113136][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.153066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.161967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.187232][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.196798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.214632][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.225145][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.238817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.247104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.258908][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.273150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.284794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.299538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.308366][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.315552][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.326786][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.352277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.362104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.373049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.382010][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.389214][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.398105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.409140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.419536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.430978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.440798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.449262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.458642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.466922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.480932][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.488158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.496569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.508126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.517809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.538113][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.549957][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.561501][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.578003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.602203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.617062][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.624371][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.639028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.650517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.659398][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.666656][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.685474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.694546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.704784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.731808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.744856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.760834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.770599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.779348][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.787068][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.803385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.815552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.829141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.844762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.853864][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.861109][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.872296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.881447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.890673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.899221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.909498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.946771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.956322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.968562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.978082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.986864][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 72.992406][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 72.995407][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 73.006100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.015089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.023604][ T4173] Bluetooth: hci2: command 0x041b tx timeout [ 73.026715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.030535][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 73.044586][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.051748][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.059534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.068718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.078484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.087720][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.095225][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.104328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.113937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.123404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.132329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.141609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.151072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.174556][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.186617][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.213430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.222943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.232694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.244076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.253655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.263664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.273092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.282611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.292557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.302200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.311187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.322502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.331836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.341015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.350682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.358684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.367294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.376976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.390327][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.408944][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.420607][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.450748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.458805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.478423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.488652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.505349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.517330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.529405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.538054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.550682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.564704][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.576829][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.723975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.732706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.756151][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.813735][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.850605][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.917779][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.951672][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.961335][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.969458][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.999668][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.007546][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.038425][ T4184] device veth0_vlan entered promiscuous mode [ 74.055424][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.076975][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.088175][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.109116][ T4184] device veth1_vlan entered promiscuous mode [ 74.134978][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.158523][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.168373][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.177478][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.186184][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.194382][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.203184][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.217805][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.236702][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.246978][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.276767][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.287332][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.296897][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.307850][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.335393][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.349275][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.358820][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.367586][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.377362][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.386733][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.406662][ T4188] device veth0_vlan entered promiscuous mode [ 74.415373][ T4184] device veth0_macvtap entered promiscuous mode [ 74.427605][ T4184] device veth1_macvtap entered promiscuous mode [ 74.446858][ T4189] device veth0_vlan entered promiscuous mode [ 74.461517][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.473073][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.481931][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.490754][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.499533][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.517312][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.526765][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.535609][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.545124][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.553741][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.562265][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.570326][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.578379][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.587946][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.598821][ T4186] device veth0_vlan entered promiscuous mode [ 74.611654][ T4188] device veth1_vlan entered promiscuous mode [ 74.621522][ T4187] device veth0_vlan entered promiscuous mode [ 74.636695][ T4186] device veth1_vlan entered promiscuous mode [ 74.651920][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.677500][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.688966][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699966][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.708824][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.718187][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.729039][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.738432][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.749841][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.759058][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.775479][ T4189] device veth1_vlan entered promiscuous mode [ 74.841701][ T4187] device veth1_vlan entered promiscuous mode [ 74.851913][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.878107][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.887662][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.897399][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.912685][ T4188] device veth0_macvtap entered promiscuous mode [ 74.945797][ T4189] device veth0_macvtap entered promiscuous mode [ 74.962638][ T4186] device veth0_macvtap entered promiscuous mode [ 74.977942][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.987243][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.995732][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.005719][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.025880][ T4189] device veth1_macvtap entered promiscuous mode [ 75.051000][ T4186] device veth1_macvtap entered promiscuous mode [ 75.058933][ T4188] device veth1_macvtap entered promiscuous mode [ 75.066089][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 75.067788][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 75.078590][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 75.082693][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 75.093327][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.102933][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.109182][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 75.113768][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.126057][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.160740][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.168947][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.190833][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.204394][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.213837][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.239151][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.251860][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.265591][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.274624][ T4187] device veth0_macvtap entered promiscuous mode [ 75.286289][ T4187] device veth1_macvtap entered promiscuous mode [ 75.302499][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.314846][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.325169][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.336038][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.348104][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.358582][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.368246][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.376698][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.386289][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.395600][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.405128][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.417914][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.429416][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.442393][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.458134][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.472488][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482853][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.494378][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506474][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.517309][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.528991][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.539625][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.554884][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.565188][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.576236][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.587837][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.595786][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.606106][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.615650][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.628853][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.638421][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.649382][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.661983][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671174][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.672346][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.680639][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697882][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704071][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.722582][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.738015][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.751607][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.762476][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.776860][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.788138][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.799600][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.811193][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.822441][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.835775][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.847841][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.858732][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.869517][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.878811][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904881][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.914395][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.925484][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.936388][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.947692][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.959520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.969971][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.980937][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.992423][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.005866][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.017037][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.029192][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.040638][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.050958][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.061800][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.071798][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.083560][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.095069][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.111180][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.123682][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.133725][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.143387][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.159253][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169067][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.178364][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.188678][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.208440][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.221984][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.233448][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.243508][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.391368][ T4275] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 76.431900][ T4275] device syzkaller1 entered promiscuous mode [ 76.455925][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.465723][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.493035][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.507834][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.544531][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.552735][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.605126][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.625433][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.650665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.660297][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.668256][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.725578][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.741494][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 76.779910][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.788160][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.796207][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.811697][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.847146][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.862267][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.880805][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.899183][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.911378][ T4282] loop3: detected capacity change from 0 to 512 [ 76.921141][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.053733][ T4282] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4: iget: bad i_size value: 38620345925642 [ 77.076853][ T4282] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 77.090279][ T4282] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 77.122394][ T4284] Zero length message leads to an empty skb [ 77.140173][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 77.146639][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 77.166011][ T4282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4: bg 0: block 5: invalid block bitmap [ 77.173428][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 77.180655][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 77.200332][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.201152][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 77.208217][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.224416][ T4282] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1 with error 28 [ 77.320338][ T4282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.320338][ T4282] [ 77.352320][ T4282] EXT4-fs (loop3): Total free blocks count 0 [ 77.358563][ T4282] EXT4-fs (loop3): Free/Dirty block details [ 77.365429][ T4282] EXT4-fs (loop3): free_blocks=0 [ 77.374146][ T4282] EXT4-fs (loop3): dirty_blocks=2 [ 77.379520][ T4282] EXT4-fs (loop3): Block reservation details [ 77.394596][ T4282] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 77.412448][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.463060][ T1506] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 77.487613][ T1506] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.487613][ T1506] [ 77.535482][ T4293] loop2: detected capacity change from 0 to 512 [ 77.845442][ T4293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.900011][ T4299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.924950][ T4304] loop1: detected capacity change from 0 to 512 [ 78.136774][ T4304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.196656][ T4304] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.275881][ T4304] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 78.287806][ T4304] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 78.298969][ T4304] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.11: Failed to acquire dquot type 0 [ 80.029706][ C0] sched: RT throttling activated [ 80.594684][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.849235][ T4340] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 81.333551][ T4340] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.410047][ T4335] netlink: 14 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.438864][ T4340] syz.0.21 (4340) used greatest stack depth: 20688 bytes left [ 81.586249][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.621277][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.641608][ T4348] loop3: detected capacity change from 0 to 8192 [ 81.680440][ T4335] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 81.703238][ T4312] loop3: p1 p2[DM] p4 [ 81.708465][ T4312] loop3: p1 start 134217728 is beyond EOD, truncated [ 81.744903][ T4335] bond0 (unregistering): Released all slaves [ 81.754599][ T4312] loop3: p2 start 4292936063 is beyond EOD, truncated [ 81.768035][ T4312] loop3: p4 size 50331648 extends beyond EOD, truncated [ 81.804537][ T4348] loop3: p1 p2[DM] p4 [ 81.810130][ T4348] loop3: p1 start 134217728 is beyond EOD, truncated [ 81.823030][ T4348] loop3: p2 start 4292936063 is beyond EOD, truncated [ 81.833278][ T4348] loop3: p4 size 50331648 extends beyond EOD, truncated [ 82.222476][ T4365] loop3: detected capacity change from 0 to 512 [ 82.313064][ T4365] EXT4-fs (loop3): inline encryption not supported [ 82.342382][ T4365] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 82.380592][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 82.419935][ T4370] bond0: Unable to set up delay as MII monitoring is disabled [ 82.509102][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 82.641536][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.093497][ T4384] loop4: detected capacity change from 0 to 512 [ 83.201602][ T4384] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.220019][ T4384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.296489][ T4384] EXT4-fs (loop4): 1 truncate cleaned up [ 83.385570][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 83.406319][ T4384] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000000008,inode_readahead_blks=0x0000000000000080,nodioread_nolock,errors=remount-ro,auto_da_alloc=0x0000000000000008,. Quota mode: none. [ 83.454553][ T4391] process 'syz.2.38' launched './file1' with NULL argv: empty string added [ 84.110219][ T4414] loop0: detected capacity change from 0 to 512 [ 84.159786][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 84.261616][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.283923][ T4414] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.477975][ T4426] device syzkaller0 entered promiscuous mode [ 86.029510][ T4474] loop2: detected capacity change from 0 to 128 [ 86.053707][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 86.180824][ T4474] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.245577][ T4474] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.312831][ T4487] loop1: detected capacity change from 0 to 1024 [ 86.376242][ T4487] ======================================================= [ 86.376242][ T4487] WARNING: The mand mount option has been deprecated and [ 86.376242][ T4487] and is ignored by this kernel. Remove the mand [ 86.376242][ T4487] option from the mount to silence this warning. [ 86.376242][ T4487] ======================================================= [ 86.457383][ T4487] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 86.518204][ T4487] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.68: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 86.576596][ T4487] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.68: couldn't read orphan inode 11 (err -117) [ 86.600247][ T4487] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 86.673122][ T4487] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.68: Invalid block bitmap block 0 in block_group 0 [ 86.700595][ T4487] Quota error (device loop1): write_blk: dquota write failed [ 86.722616][ T4487] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.768513][ T4487] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.68: Failed to acquire dquot type 0 [ 86.913983][ T7] cfg80211: failed to load regulatory.db [ 87.002236][ T4487] syz.1.68 (4487) used greatest stack depth: 20336 bytes left [ 87.228700][ T4502] device syzkaller1 entered promiscuous mode [ 87.396818][ T4508] loop0: detected capacity change from 0 to 512 [ 87.648889][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 87.714360][ T4508] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.102210][ T4532] loop0: detected capacity change from 0 to 512 [ 88.278771][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 88.357107][ T4532] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.016235][ T4546] loop1: detected capacity change from 0 to 2048 [ 89.545407][ T4546] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 91.598183][ T4585] loop3: detected capacity change from 0 to 32768 [ 91.832078][ T4585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.101 (4585) [ 91.848759][ T4588] loop1: detected capacity change from 0 to 128 [ 93.212072][ T4585] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.221241][ T4585] BTRFS info (device loop3): metadata ratio 2 [ 93.227359][ T4585] BTRFS info (device loop3): force zlib compression, level 3 [ 93.234898][ T4585] BTRFS info (device loop3): enabling auto defrag [ 93.242913][ T4585] BTRFS info (device loop3): max_inline at 0 [ 93.249445][ T4585] BTRFS info (device loop3): using free space tree [ 93.256044][ T4585] BTRFS info (device loop3): has skinny extents [ 93.292004][ T4595] loop4: detected capacity change from 0 to 512 [ 93.316603][ T4588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.347996][ T4588] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.369396][ T4596] device dummy0 entered promiscuous mode [ 93.389223][ T4596] device vlan2 entered promiscuous mode [ 93.429479][ T4595] EXT4-fs (loop4): invalid inodes per group: 44576 [ 93.429479][ T4595] [ 93.474957][ T4585] BTRFS info (device loop3): enabling ssd optimizations [ 95.669161][ T4652] loop0: detected capacity change from 0 to 4096 [ 95.727254][ T4652] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 95.796752][ T26] audit: type=1800 audit(1771596104.045:2): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 95.826277][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4312) [ 96.429150][ T4683] tipc: Started in network mode [ 96.494692][ T4683] tipc: Node identity 0af4e4642d8d, cluster identity 4711 [ 96.560873][ T4683] tipc: Enabled bearer , priority 0 [ 96.595423][ T4683] tipc: Resetting bearer [ 96.711298][ T4684] device syzkaller0 entered promiscuous mode [ 96.725374][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 96.904321][ T4689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.912101][ T4689] IPv6: NLM_F_CREATE should be set when creating new route [ 97.231296][ T4676] tipc: Resetting bearer [ 97.277654][ T4676] tipc: Disabling bearer [ 98.013469][ T4714] loop0: detected capacity change from 0 to 256 [ 98.048489][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.057342][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.107919][ T26] audit: type=1800 audit(1771596106.355:3): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 98.131995][ T4714] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.157553][ T4714] FAT-fs (loop0): Filesystem has been set read-only [ 99.113247][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.153539][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.291672][ T4692] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.300920][ T4692] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.310260][ T4692] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.319349][ T4692] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.449183][ T4723] netlink: 6 bytes leftover after parsing attributes in process `syz.0.141'. [ 99.480260][ T4723] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 100.038580][ T4761] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.155'. [ 100.736624][ T4797] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 100.769829][ T4797] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.171'. [ 100.882824][ T4805] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 100.919291][ T4804] loop0: detected capacity change from 0 to 128 [ 100.964792][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.993426][ T4805] team0: Port device bond0 added [ 101.748603][ T4820] device syzkaller0 entered promiscuous mode [ 102.396584][ T4852] netlink: 'syz.4.194': attribute type 21 has an invalid length. [ 102.458984][ T4855] netlink: 'syz.2.197': attribute type 25 has an invalid length. [ 102.486057][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 102.665814][ T4872] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 102.695369][ T4872] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.204'. [ 102.778561][ T4878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 102.807724][ T4878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 102.825653][ T4878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 102.861448][ T4878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 103.077999][ T4896] netlink: 'syz.1.216': attribute type 13 has an invalid length. [ 103.115572][ T4896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.216'. [ 103.400209][ T4913] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.439879][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.704724][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 103.831209][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.880207][ T13] usb 3-1: config 0 has no interfaces? [ 103.888697][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 103.901130][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 103.917286][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.949099][ T13] usb 3-1: config 0 descriptor?? [ 104.087477][ T4933] netlink: 'syz.1.228': attribute type 4 has an invalid length. [ 104.625480][ T4941] loop1: detected capacity change from 0 to 32768 [ 105.710768][ T4949] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.782219][ T4951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 105.789278][ T4951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.796898][ T4952] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 105.803624][ T4952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.921834][ T4951] vhci_hcd vhci_hcd.0: Device attached [ 105.956210][ T4949] bond1: (slave lo): Enslaving as an active interface with an up link [ 106.012096][ T4952] vhci_hcd vhci_hcd.0: Device attached [ 106.060674][ T4949] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 106.180257][ T13] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 106.265012][ T4959] __nla_validate_parse: 1 callbacks suppressed [ 106.265026][ T4959] netlink: 14 bytes leftover after parsing attributes in process `syz.2.234'. [ 106.301547][ T4661] usb 3-1: USB disconnect, device number 2 [ 106.348315][ T4959] device hsr_slave_0 left promiscuous mode [ 106.438013][ T4959] device hsr_slave_1 left promiscuous mode [ 106.446192][ T4953] vhci_hcd: connection reset by peer [ 106.446769][ T4954] vhci_hcd: connection closed [ 106.478505][ T157] vhci_hcd: stop threads [ 106.491954][ T157] vhci_hcd: release socket [ 106.531212][ T157] vhci_hcd: disconnect device [ 106.569072][ T157] vhci_hcd: stop threads [ 106.595971][ T157] vhci_hcd: release socket [ 106.639824][ T157] vhci_hcd: disconnect device [ 106.884561][ T4979] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 107.033463][ T4979] team0: Port device wlan1 added [ 107.273719][ T4988] loop2: detected capacity change from 0 to 32768 [ 107.513765][ T4995] netlink: 'syz.0.245': attribute type 4 has an invalid length. [ 107.559729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 107.569058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 107.578217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 107.587515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 107.597120][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 107.608096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 107.617494][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 107.626684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 107.635819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 111.081775][ T5038] loop2: detected capacity change from 0 to 32768 [ 111.092440][ T26] audit: type=1326 audit(1771596119.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68b653629 code=0x7ffc0000 [ 111.299976][ T13] vhci_hcd: vhci_device speed not set [ 111.329813][ T26] audit: type=1326 audit(1771596119.365:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68b653629 code=0x7ffc0000 [ 112.038730][ T26] audit: type=1326 audit(1771596119.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.093226][ T26] audit: type=1326 audit(1771596119.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.127220][ T26] audit: type=1326 audit(1771596119.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.259897][ T26] audit: type=1326 audit(1771596119.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.472369][ T26] audit: type=1326 audit(1771596119.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.619510][ T26] audit: type=1326 audit(1771596119.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.733394][ T26] audit: type=1326 audit(1771596119.465:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 112.873370][ T26] audit: type=1326 audit(1771596119.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 113.141757][ T4654] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.909948][ T4654] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 113.974049][ T4654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.186043][ T4654] usb 2-1: config 0 descriptor?? [ 115.223412][ T4654] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 115.400503][ T5073] loop0: detected capacity change from 0 to 32768 [ 116.356631][ T4654] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 116.420161][ T4654] gspca_cpia1: usb_control_msg 01, error -32 [ 116.580144][ T4654] gspca_cpia1: usb_control_msg 01, error -71 [ 116.586828][ T4654] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 116.644929][ T4654] usb 2-1: USB disconnect, device number 2 [ 116.980017][ T4657] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.152839][ T5097] binder: transaction release 5 bad handle 1, ret = -22 [ 117.257472][ T5101] binder: 5100:5101 unknown command 255 [ 117.263662][ T4657] usb 1-1: Using ep0 maxpacket: 16 [ 117.309942][ T5101] binder: 5100:5101 ioctl c0306201 2000000001c0 returned -22 [ 117.519956][ T4657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.146860][ T4657] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.177293][ T4657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.209072][ T4657] usb 1-1: config 0 descriptor?? [ 119.603280][ T5114] loop3: detected capacity change from 0 to 32768 [ 119.728764][ T5114] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 119.738096][ T5114] BTRFS info (device loop3): metadata ratio 2 [ 119.744603][ T5114] BTRFS info (device loop3): force zlib compression, level 3 [ 119.752266][ T5114] BTRFS info (device loop3): enabling auto defrag [ 119.758803][ T5114] BTRFS info (device loop3): max_inline at 0 [ 119.765648][ T5114] BTRFS info (device loop3): using free space tree [ 119.772532][ T5114] BTRFS info (device loop3): has skinny extents [ 119.792387][ T4657] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 119.953136][ T5093] udc-core: couldn't find an available UDC or it's busy [ 119.978161][ T5093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.104723][ T5114] BTRFS info (device loop3): enabling ssd optimizations [ 121.460418][ T5148] usb 1-1: USB disconnect, device number 2 [ 121.571076][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.689383][ T26] audit: type=1326 audit(1771596130.935:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5157 comm="syz.0.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x0 [ 122.857747][ T26] audit: type=1800 audit(1771596131.105:15): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.292" name="/" dev="fuse" ino=9 res=0 errno=0 [ 123.129778][ T5181] loop2: detected capacity change from 0 to 32768 [ 123.192903][ T5181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.295 (5181) [ 123.274401][ T5181] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 123.283619][ T5181] BTRFS info (device loop2): metadata ratio 2 [ 123.290458][ T5181] BTRFS info (device loop2): force zlib compression, level 3 [ 123.298133][ T5181] BTRFS info (device loop2): enabling auto defrag [ 123.305164][ T5181] BTRFS info (device loop2): max_inline at 0 [ 123.311508][ T5181] BTRFS info (device loop2): using free space tree [ 123.318115][ T5181] BTRFS info (device loop2): has skinny extents [ 123.338246][ T5186] loop4: detected capacity change from 0 to 128 [ 123.426186][ T5189] device syzkaller0 entered promiscuous mode [ 123.950129][ T5181] BTRFS info (device loop2): enabling ssd optimizations [ 124.031416][ T5224] device vlan2 entered promiscuous mode [ 124.037086][ T5224] device bridge0 entered promiscuous mode [ 125.714339][ T5252] loop3: detected capacity change from 0 to 128 [ 125.867700][ T5260] device syzkaller0 entered promiscuous mode [ 126.160159][ T5268] binder: 5266:5268 ioctl c0306201 200000000680 returned -14 [ 126.636624][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 126.952341][ T5280] device syzkaller0 entered promiscuous mode [ 127.935021][ T4657] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.190249][ T4657] usb 1-1: Using ep0 maxpacket: 32 [ 128.330635][ T4657] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.355691][ T4657] usb 1-1: config 0 has no interfaces? [ 128.382472][ T4657] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 128.424945][ T4657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.472072][ T4657] usb 1-1: config 0 descriptor?? [ 128.668127][ T5305] binder: 5304:5305 ioctl c0306201 200000000680 returned -14 [ 128.777878][ T4657] usb 1-1: USB disconnect, device number 3 [ 129.015859][ T5313] sg_read: process 170 (syz.2.327) changed security contexts after opening file descriptor, this is not allowed. [ 129.608460][ T5340] device syzkaller0 entered promiscuous mode [ 129.839980][ T4240] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.883092][ T5349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.890269][ T5349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 130.087061][ T4240] usb 1-1: Using ep0 maxpacket: 32 [ 130.210018][ T4240] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 130.225583][ T4240] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 130.265213][ T4240] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 130.317497][ T4240] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 130.318186][ T4240] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.470384][ T4240] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.488532][ T4240] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.499497][ T4240] usb 1-1: Product: syz [ 130.512019][ T4240] usb 1-1: Manufacturer: syz [ 130.519130][ T4240] usb 1-1: SerialNumber: syz [ 130.571643][ T4240] usb 1-1: config 0 descriptor?? [ 130.634517][ T4240] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 130.723595][ T4240] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.853133][ T5336] ldusb 1-1:0.0: Write buffer overflow, 64804 bytes dropped [ 130.871577][ T4240] usb 1-1: USB disconnect, device number 4 [ 130.892568][ T4240] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 132.267819][ T5385] device syzkaller0 entered promiscuous mode [ 132.981836][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988833][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.026622][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 133.089832][ T5149] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.094915][ T5409] device bond0 entered promiscuous mode [ 133.142648][ T5412] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 133.194670][ T5406] libceph: resolve '0..' (ret=-3): failed [ 133.221732][ T5412] bond0: (slave gre1): Error -95 calling set_mac_address [ 133.339832][ T5149] usb 2-1: Using ep0 maxpacket: 32 [ 133.460018][ T5149] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 133.650031][ T5149] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.673863][ T5149] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.692731][ T5149] usb 2-1: Product: syz [ 133.716108][ T5149] usb 2-1: Manufacturer: syz [ 133.738700][ T5149] usb 2-1: SerialNumber: syz [ 133.754200][ T5149] usb 2-1: config 0 descriptor?? [ 133.770016][ T5401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.151337][ T5422] udc-core: couldn't find an available UDC or it's busy [ 134.225759][ T5422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.356883][ T5444] delete_channel: no stack [ 135.884331][ T4240] usb 2-1: USB disconnect, device number 3 [ 137.007284][ T5493] device syzkaller0 entered promiscuous mode [ 137.039799][ T4657] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.299751][ T4657] usb 4-1: Using ep0 maxpacket: 16 [ 137.660034][ T4657] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 137.677548][ T4657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.702141][ T4657] usb 4-1: Product: syz [ 137.711110][ T4657] usb 4-1: Manufacturer: syz [ 137.721572][ T4657] usb 4-1: SerialNumber: syz [ 137.735811][ T4657] usb 4-1: config 0 descriptor?? [ 137.791554][ T4657] safe_serial 4-1:0.0: safe_serial converter detected [ 137.813671][ T4657] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 138.025525][ T5150] usb 4-1: USB disconnect, device number 2 [ 138.057303][ T5150] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 138.075217][ T5150] safe_serial 4-1:0.0: device disconnected [ 138.454946][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.462677][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.068907][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.160034][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.891164][ T5507] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.901401][ T5507] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.911376][ T5507] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.920857][ T5507] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.293865][ T5555] binder: transaction release 23 bad handle 1, ret = -22 [ 141.604653][ T5563] device syzkaller0 entered promiscuous mode [ 142.340725][ T5553] device bridge_slave_0 left promiscuous mode [ 142.369104][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.418261][ T5553] device bridge_slave_1 left promiscuous mode [ 142.434200][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.456262][ T5553] bond0: (slave bond_slave_0): Releasing backup interface [ 142.478210][ T5553] bond0: (slave bond_slave_1): Releasing backup interface [ 142.518986][ T5553] team0: Port device team_slave_0 removed [ 142.818610][ T5553] team0: Port device team_slave_1 removed [ 142.826563][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.863677][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.153957][ T5589] tipc: Cannot configure node identity twice [ 143.523787][ T5600] netlink: 64 bytes leftover after parsing attributes in process `syz.2.426'. [ 143.980117][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.229750][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 144.380015][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 144.590097][ T4233] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.627169][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.686872][ T4233] usb 2-1: Product: syz [ 144.696162][ T4233] usb 2-1: Manufacturer: syz [ 144.721923][ T4233] usb 2-1: SerialNumber: syz [ 144.779341][ T4233] usb 2-1: config 0 descriptor?? [ 144.840134][ T5602] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.231132][ T5621] udc-core: couldn't find an available UDC or it's busy [ 145.292215][ T5621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.595016][ T5626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 146.657865][ T5640] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 146.769203][ T4661] usb 2-1: USB disconnect, device number 4 [ 146.790563][ T5640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.870917][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 146.984894][ T5643] bond2: (slave bridge1): making interface the new active one [ 147.062254][ T5643] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 147.165803][ T5645] device macvlan2 entered promiscuous mode [ 147.190117][ T5645] device bond2 entered promiscuous mode [ 147.202520][ T5645] device bridge1 entered promiscuous mode [ 147.217374][ T5645] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.240149][ T5645] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.294459][ T5645] device bond2 left promiscuous mode [ 147.305828][ T5645] device bridge1 left promiscuous mode [ 147.393096][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 147.540694][ T5658] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 147.592625][ T5658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.625583][ T5663] device ip6erspan0 entered promiscuous mode [ 147.638960][ T5663] bond1: (slave ip6erspan0): making interface the new active one [ 147.650456][ T5663] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 147.659751][ T5149] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.669183][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 147.899799][ T4657] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.949958][ T5149] usb 1-1: Using ep0 maxpacket: 32 [ 148.139968][ T5149] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 148.289883][ T4657] usb 3-1: Using ep0 maxpacket: 16 [ 148.680840][ T4657] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.708933][ T4657] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 148.844177][ T4657] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 148.856955][ T4657] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.697906][ T5149] usb 1-1: config 1 interface 0 has no altsetting 0 [ 149.860008][ T5149] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 149.870178][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.878237][ T5149] usb 1-1: Product: syz [ 149.890539][ T4657] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 149.900760][ T4657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.908828][ T4657] usb 3-1: Product: syz [ 149.931105][ T4657] usb 3-1: Manufacturer: syz [ 149.936029][ T4657] usb 3-1: SerialNumber: syz [ 149.945523][ T4657] usb 3-1: config 0 descriptor?? [ 149.950473][ T5149] usb 1-1: Manufacturer: syz [ 149.973209][ T5149] usb 1-1: SerialNumber: syz [ 150.248583][ T4657] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 150.283815][ T5650] netlink: 'syz.0.444': attribute type 2 has an invalid length. [ 150.308977][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 150.350148][ T5650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.382401][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 150.427892][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 150.475697][ T5666] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 150.505492][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 150.538064][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 150.569141][ T4657] usb 3-1: USB disconnect, device number 3 [ 151.022964][ T5149] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 151.098070][ T5149] usb 1-1: USB disconnect, device number 5 [ 151.254178][ T5149] appletouch 1-1:1.0: input: appletouch disconnected [ 152.419424][ T5714] device syzkaller0 entered promiscuous mode [ 152.560260][ T5718] input: syz1 as /devices/virtual/input/input8 [ 152.643880][ T5720] program syz.4.467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.860136][ T5703] netlink: 68 bytes leftover after parsing attributes in process `syz.2.463'. [ 152.896109][ T5703] netlink: 64 bytes leftover after parsing attributes in process `syz.2.463'. [ 153.864677][ T5739] device syzkaller0 entered promiscuous mode [ 154.143027][ T26] audit: type=1326 audit(1771596162.395:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.1.472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9a9510629 code=0x0 [ 155.064059][ T5767] device syzkaller0 entered promiscuous mode [ 155.219904][ T5149] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.469851][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 155.504672][ T5771] device syzkaller0 entered promiscuous mode [ 155.556844][ T5773] device syzkaller1 entered promiscuous mode [ 155.590067][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.634801][ T5149] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.706872][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.741393][ T5149] usb 1-1: config 0 descriptor?? [ 156.242914][ T5149] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 156.495659][ T5149] usb 1-1: USB disconnect, device number 6 [ 156.933426][ T5791] input: syz1 as /devices/virtual/input/input9 [ 157.072370][ T5792] netlink: 104 bytes leftover after parsing attributes in process `syz.4.485'. [ 158.336763][ T26] audit: type=1326 audit(1771596166.585:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe00efec629 code=0x0 [ 158.452377][ T5808] device syzkaller0 entered promiscuous mode [ 159.029056][ T5815] device macsec1 entered promiscuous mode [ 160.117406][ T5837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.124803][ T5837] IPv6: NLM_F_CREATE should be set when creating new route [ 161.793133][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.801167][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.454721][ T5862] ODEBUG: Out of memory. ODEBUG disabled [ 163.677021][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.898979][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.355807][ T5837] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.370864][ T5837] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.402748][ T5837] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.419914][ T5837] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.715652][ T5862] Set syz1 is full, maxelem 65536 reached [ 168.940047][ T5932] input: syz1 as /devices/virtual/input/input10 [ 169.791225][ T5946] device syzkaller0 entered promiscuous mode [ 170.133763][ T5951] tipc: Enabling of bearer rejected, failed to enable media [ 170.589786][ T4233] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 170.979971][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.000523][ T4233] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 171.029727][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.060660][ T4233] usb 2-1: config 0 descriptor?? [ 171.080117][ T5954] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.581822][ T4233] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 171.601743][ T4233] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 171.649821][ T4233] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 171.687357][ T4233] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 171.728029][ T4233] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 171.826867][ T4233] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 171.898599][ T4233] usb 2-1: USB disconnect, device number 5 [ 172.033370][ T26] audit: type=1326 audit(1771596180.285:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fddcee629 code=0x0 [ 172.078695][ T5987] device syzkaller0 entered promiscuous mode [ 172.195624][ T5983] fido_id[5983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.403751][ T5994] input: syz1 as /devices/virtual/input/input11 [ 172.575391][ T5150] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.821049][ T5150] usb 1-1: Using ep0 maxpacket: 8 [ 172.953242][ T5150] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 173.140191][ T5150] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 173.164960][ T5150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.239975][ T5150] usb 1-1: Product: syz [ 173.258655][ T5150] usb 1-1: Manufacturer: syz [ 173.271826][ T5150] usb 1-1: SerialNumber: syz [ 173.329265][ T5150] usb 1-1: config 0 descriptor?? [ 173.391732][ T5150] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 173.593784][ T5150] usb 1-1: USB disconnect, device number 7 [ 173.777608][ T6031] device syzkaller0 entered promiscuous mode [ 174.255936][ T6040] input: syz1 as /devices/virtual/input/input12 [ 174.349853][ T5150] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.476685][ T26] audit: type=1326 audit(1771596182.725:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe00efec629 code=0x0 [ 174.599751][ T5150] usb 5-1: Using ep0 maxpacket: 16 [ 174.720065][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.775188][ T5150] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 174.908019][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.974996][ T5150] usb 5-1: config 0 descriptor?? [ 175.172893][ T6068] device syzkaller0 entered promiscuous mode [ 175.217289][ T6069] device syzkaller0 entered promiscuous mode [ 175.270525][ T6038] udc-core: couldn't find an available UDC or it's busy [ 175.279002][ T6038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.325860][ T6038] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 175.344570][ T6038] PKCS7: Only support pkcs7_signedData type [ 175.375870][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 175.769968][ T6081] input: syz1 as /devices/virtual/input/input13 [ 176.062115][ T5150] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 2/5 [ 176.111894][ T5150] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 176.144066][ T5150] mcp2221: probe of 0003:04D8:00DD.0004 failed with error -22 [ 176.269357][ T5150] usb 5-1: USB disconnect, device number 2 [ 176.842185][ T6104] loop0: detected capacity change from 0 to 32768 [ 176.894938][ T26] audit: type=1326 audit(1771596185.145:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fddcee629 code=0x0 [ 176.929930][ T6104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.577 (6104) [ 176.948405][ T6104] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.957762][ T6104] BTRFS info (device loop0): metadata ratio 2 [ 176.964046][ T6104] BTRFS info (device loop0): force zlib compression, level 3 [ 176.972156][ T6104] BTRFS info (device loop0): enabling auto defrag [ 176.978755][ T6104] BTRFS info (device loop0): max_inline at 0 [ 176.985141][ T6104] BTRFS info (device loop0): using free space tree [ 176.992314][ T6104] BTRFS info (device loop0): has skinny extents [ 177.059086][ T6112] device syzkaller0 entered promiscuous mode [ 177.166094][ T6104] BTRFS info (device loop0): enabling ssd optimizations [ 178.309499][ T6154] binder_alloc: 6151: binder_alloc_buf, no vma [ 178.701544][ T6173] device syzkaller0 entered promiscuous mode [ 179.028181][ T26] audit: type=1326 audit(1771596187.275:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.4.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7df69f629 code=0x0 [ 179.479933][ T5150] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.759855][ T5150] usb 3-1: Using ep0 maxpacket: 32 [ 179.909954][ T5150] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 180.111078][ T5150] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.138551][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.158932][ T5150] usb 3-1: Product: syz [ 180.171152][ T5150] usb 3-1: Manufacturer: syz [ 180.176030][ T5150] usb 3-1: SerialNumber: syz [ 180.233365][ T5150] usb 3-1: config 0 descriptor?? [ 180.250373][ T6187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.488231][ T6206] tipc: Enabling of bearer rejected, failed to enable media [ 180.524531][ T6206] device syzkaller0 entered promiscuous mode [ 180.626674][ T6208] device syzkaller0 entered promiscuous mode [ 180.725552][ T6211] delete_channel: no stack [ 181.019871][ T5150] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.400103][ T5150] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.444350][ T5150] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.489082][ T5150] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.529065][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.590291][ T6211] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 182.265000][ T5150] usb 3-1: USB disconnect, device number 4 [ 182.387565][ T26] audit: type=1326 audit(1771596190.635:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fddcee629 code=0x0 [ 184.599510][ T6160] usb 2-1: USB disconnect, device number 6 [ 184.888008][ T6262] input: syz1 as /devices/virtual/input/input17 [ 185.289876][ T4240] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.540107][ T4240] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 186.579825][ T4240] usb 3-1: config 0 has no interface number 0 [ 186.629940][ T4240] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 186.664300][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.699063][ T4240] usb 3-1: config 0 descriptor?? [ 186.762827][ T4240] ttusbir 3-1:0.83: cannot find expected altsetting [ 186.837760][ T6290] device ip6gretap1 entered promiscuous mode [ 186.977365][ T4240] usb 3-1: USB disconnect, device number 5 [ 187.358025][ T6300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 187.529786][ T6160] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.624235][ T6306] input: syz1 as /devices/virtual/input/input19 [ 187.950128][ T6160] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.964750][ T6160] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.008375][ T6160] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.038346][ T6160] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 188.093111][ T6160] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 188.154881][ T6324] device syzkaller0 entered promiscuous mode [ 188.280099][ T6160] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.298954][ T6160] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.328155][ T6160] usb 1-1: Product: syz [ 188.338289][ T6160] usb 1-1: Manufacturer: syz [ 188.410936][ T6160] cdc_wdm 1-1:1.0: skipping garbage [ 188.426857][ T6160] cdc_wdm 1-1:1.0: skipping garbage [ 188.470711][ T6160] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 188.494395][ T6160] cdc_wdm 1-1:1.0: Unknown control protocol [ 188.607487][ T6331] loop4: detected capacity change from 0 to 512 [ 188.673824][ T6334] input: syz1 as /devices/virtual/input/input20 [ 188.682415][ T6160] usb 1-1: USB disconnect, device number 8 [ 188.772150][ T6331] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.829815][ T6331] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.019336][ T6331] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 189.148470][ T6351] loop1: detected capacity change from 0 to 256 [ 189.238300][ T6351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 190.124209][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 190.502527][ T6378] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 190.511195][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.511234][ T6378] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 190.527853][ T6378] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 191.841141][ T4654] Bluetooth: hci1: command 0x0406 tx timeout [ 191.844344][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 191.854524][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 191.871568][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 191.899941][ T4233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 191.919812][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 191.928726][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.962328][ T6396] netlink: 'syz.3.668': attribute type 10 has an invalid length. [ 191.970836][ T4233] usb 2-1: Product: syz [ 191.975503][ T4233] usb 2-1: Manufacturer: syz [ 191.980718][ T6396] netlink: 228 bytes leftover after parsing attributes in process `syz.3.668'. [ 191.990825][ T4233] usb 2-1: SerialNumber: syz [ 192.039377][ T6392] loop0: detected capacity change from 0 to 4096 [ 192.057967][ T4233] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.178411][ T6392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.198990][ T6399] loop4: detected capacity change from 0 to 1 [ 192.259094][ T6399] Dev loop4: unable to read RDB block 1 [ 192.298427][ T6399] loop4: unable to read partition table [ 192.337300][ T6399] loop4: partition table beyond EOD, truncated [ 192.350134][ T6399] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 192.745018][ T6413] loop0: detected capacity change from 0 to 2048 [ 192.810187][ T4233] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.851105][ T6413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.884551][ T6388] Set syz1 is full, maxelem 65536 reached [ 192.915988][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 193.215881][ T6364] udc-core: couldn't find an available UDC or it's busy [ 193.269984][ T6364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.312270][ T6160] usb 2-1: USB disconnect, device number 7 [ 193.387186][ T6431] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 193.939889][ T4233] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 194.007057][ T4233] ath9k_htc: Failed to initialize the device [ 194.040246][ T6160] usb 2-1: ath9k_htc: USB layer deinitialized [ 194.433599][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.440206][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549850][ T6161] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 195.206680][ T6454] loop4: detected capacity change from 0 to 32768 [ 195.229896][ T26] audit: type=1326 audit(1771596203.485:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 195.334733][ T6454] JBD2: Ignoring recovery information on journal [ 195.369580][ T6454] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.389865][ T6161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.459799][ T6161] usb 1-1: not running at top speed; connect to a high speed hub [ 195.488355][ T26] audit: type=1326 audit(1771596203.485:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 195.570187][ T6161] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 195.665483][ T26] audit: type=1326 audit(1771596203.515:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 195.728357][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 195.749927][ T6161] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 195.766614][ T6471] input: syz1 as /devices/virtual/input/input21 [ 195.773597][ T6161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.800627][ T6161] usb 1-1: Product: syz [ 195.805751][ T6161] usb 1-1: Manufacturer: syz [ 195.810571][ T6161] usb 1-1: SerialNumber: syz [ 195.838739][ T26] audit: type=1326 audit(1771596203.515:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9a94d0ece code=0x7ffc0000 [ 195.897267][ T26] audit: type=1326 audit(1771596203.515:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 195.931312][ T26] audit: type=1326 audit(1771596203.515:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 195.962809][ T26] audit: type=1326 audit(1771596203.515:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 196.030042][ T26] audit: type=1326 audit(1771596203.515:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 196.074060][ T26] audit: type=1326 audit(1771596203.515:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 196.172821][ T26] audit: type=1326 audit(1771596203.515:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a9510629 code=0x7ffc0000 [ 196.414414][ T6492] loop2: detected capacity change from 0 to 1024 [ 196.729877][ T4240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.779918][ T6161] usb 1-1: reset full-speed USB device number 9 using dummy_hcd [ 196.999862][ T4240] usb 4-1: Using ep0 maxpacket: 32 [ 197.130179][ T4240] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 197.150043][ T6161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.209738][ T5150] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 197.220385][ T6161] usb 1-1: device firmware changed [ 197.253781][ T6161] usb 1-1: USB disconnect, device number 9 [ 197.351265][ T4240] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.360832][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.372339][ T4240] usb 4-1: Product: syz [ 197.376711][ T4240] usb 4-1: Manufacturer: syz [ 197.382412][ T4240] usb 4-1: SerialNumber: syz [ 197.397279][ T4240] usb 4-1: config 0 descriptor?? [ 197.420109][ T6494] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.479739][ T5150] usb 5-1: Using ep0 maxpacket: 16 [ 197.599915][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.682189][ T6494] udc-core: couldn't find an available UDC or it's busy [ 197.698656][ T6514] loop1: detected capacity change from 0 to 16 [ 197.716602][ T6516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.741774][ T6494] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.767780][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop1 [ 197.806374][ T6161] usb 4-1: USB disconnect, device number 3 [ 197.810850][ T5150] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.828211][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.868206][ T5150] usb 5-1: Product: syz [ 197.873329][ T5150] usb 5-1: Manufacturer: syz [ 197.878701][ T5150] usb 5-1: SerialNumber: syz [ 197.891099][ T5150] usb 5-1: config 0 descriptor?? [ 197.937573][ T5150] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.986462][ T5150] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 198.382360][ T6541] loop3: detected capacity change from 0 to 1024 [ 198.538273][ T6541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.569421][ T6545] device syzkaller0 entered promiscuous mode [ 198.590023][ T5150] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 198.716797][ T6551] loop2: detected capacity change from 0 to 512 [ 198.831970][ T6551] EXT4-fs (loop2): Ignoring removed oldalloc option [ 198.857119][ T6551] EXT4-fs (loop2): 1 truncate cleaned up [ 198.872598][ T6551] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,usrquota,. Quota mode: writeback. [ 198.894002][ T6551] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.721: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 198.924118][ T6551] EXT4-fs (loop2): Remounting filesystem read-only [ 199.067342][ T6558] input: syz1 as /devices/virtual/input/input22 [ 199.074200][ T4240] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.134235][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 199.161306][ T5150] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 199.176140][ T5150] em28xx 5-1:0.0: board has no eeprom [ 199.182215][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 199.339789][ T4240] usb 1-1: Using ep0 maxpacket: 32 [ 199.410097][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 199.499871][ T4240] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 199.623600][ T6565] Set syz1 is full, maxelem 65536 reached [ 199.670216][ T4240] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.680360][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.688636][ T4240] usb 1-1: Product: syz [ 199.693746][ T4240] usb 1-1: Manufacturer: syz [ 199.698553][ T4240] usb 1-1: SerialNumber: syz [ 199.716058][ T4240] usb 1-1: config 0 descriptor?? [ 199.721485][ T4234] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 199.742641][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.763345][ T4234] usb 4-1: Product: syz [ 199.770121][ T6553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.779153][ T4234] usb 4-1: Manufacturer: syz [ 199.785329][ T4234] usb 4-1: SerialNumber: syz [ 199.815405][ T4234] usb 4-1: config 0 descriptor?? [ 199.861101][ T4234] usb-storage 4-1:0.0: USB Mass Storage device detected [ 199.881596][ T4234] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 199.899781][ T4234] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 199.899781][ T4234] Please send a copy of this message to and [ 199.925436][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.220244][ T4234] usb 4-1: USB disconnect, device number 4 [ 200.228664][ T6553] udc-core: couldn't find an available UDC or it's busy [ 200.233966][ T6586] input: syz1 as /devices/virtual/input/input23 [ 200.299554][ T6553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.341100][ T4233] usb 1-1: USB disconnect, device number 10 [ 200.429737][ T5150] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 200.439524][ T5150] em28xx 5-1:0.0: dvb set to bulk mode. [ 200.495450][ T4240] em28xx 5-1:0.0: Binding DVB extension [ 200.523572][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 200.543753][ T5150] usb 5-1: USB disconnect, device number 3 [ 200.588403][ T5150] em28xx 5-1:0.0: Disconnecting em28xx [ 200.703157][ T4240] em28xx 5-1:0.0: Registering input extension [ 200.745091][ T5150] em28xx 5-1:0.0: Closing input extension [ 200.939275][ T5150] em28xx 5-1:0.0: Freeing device [ 201.101643][ T6605] syz.4.741 uses old SIOCAX25GETINFO [ 201.577201][ T6623] loop4: detected capacity change from 0 to 128 [ 201.586710][ T6617] input: syz1 as /devices/virtual/input/input25 [ 201.776577][ T6628] loop1: detected capacity change from 0 to 512 [ 201.819775][ T6628] EXT4-fs (loop1): Invalid want_extra_isize 4096 [ 202.490735][ T6654] input: syz1 as /devices/virtual/input/input26 [ 202.527565][ T6656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.534934][ T6656] IPv6: NLM_F_CREATE should be set when creating new route [ 203.616229][ T6674] binder: transaction release 39 bad handle 1, ret = -22 [ 203.682024][ T6676] loop3: detected capacity change from 0 to 16 [ 203.688928][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.696807][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.794516][ T4312] udevd[4312]: incorrect cramfs checksum on /dev/loop3 [ 203.900711][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.931119][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.055136][ T6659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.065442][ T6659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.074953][ T6659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.086578][ T6659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.198757][ T6680] tipc: Started in network mode [ 204.215509][ T6680] tipc: Node identity 4, cluster identity 4711 [ 204.299533][ T6680] tipc: Node number set to 4 [ 204.845759][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 205.186709][ T6709] input: syz1 as /devices/virtual/input/input27 [ 205.328656][ T6682] Set syz1 is full, maxelem 65536 reached [ 205.353707][ T6716] tipc: Started in network mode [ 205.395408][ T6716] tipc: Node identity 4, cluster identity 4711 [ 205.448574][ T6716] tipc: Node number set to 4 [ 205.466550][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 205.466565][ T26] audit: type=1326 audit(1771596213.715:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.499618][ T26] audit: type=1326 audit(1771596213.745:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.523238][ T26] audit: type=1326 audit(1771596213.755:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.550898][ T26] audit: type=1326 audit(1771596213.755:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.573813][ T6161] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.588599][ T26] audit: type=1326 audit(1771596213.765:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.618243][ T26] audit: type=1326 audit(1771596213.765:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.647709][ T26] audit: type=1326 audit(1771596213.765:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fddcee629 code=0x7ffc0000 [ 205.719174][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 206.029948][ T6161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.060465][ T6161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.089576][ T6161] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 206.139464][ T6161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.174899][ T6161] usb 1-1: config 0 descriptor?? [ 206.302504][ T6742] input: syz1 as /devices/virtual/input/input28 [ 206.313388][ T6741] loop3: detected capacity change from 0 to 1024 [ 206.367858][ T6745] fuse: Bad value for 'fd' [ 206.438642][ T6741] EXT4-fs (loop3): Ignoring removed bh option [ 206.511462][ T6753] tipc: Cannot configure node identity twice [ 206.539883][ T6741] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,commit=0x0000000000000000,usrjquota=,lazytime,errors=remount-ro,errors=remount-ro,bh,init_itable,. Quota mode: none. [ 206.681751][ T6161] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 206.692567][ T6161] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 206.899992][ T6161] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 207.029779][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 207.055866][ T6767] kvm: emulating exchange as write [ 207.252266][ T6776] input: syz1 as /devices/virtual/input/input29 [ 207.453344][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.480270][ T23] usb 2-1: config 0 has no interfaces? [ 207.601914][ T6793] tipc: Started in network mode [ 207.607040][ T6793] tipc: Node identity 4, cluster identity 4711 [ 207.629759][ T6793] tipc: Node number set to 4 [ 207.670114][ T23] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 207.679516][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.734531][ T23] usb 2-1: Product: syz [ 207.738792][ T23] usb 2-1: Manufacturer: syz [ 207.765678][ T5148] usb 1-1: USB disconnect, device number 11 [ 207.769835][ T23] usb 2-1: SerialNumber: syz [ 207.804625][ T23] usb 2-1: config 0 descriptor?? [ 208.087931][ T23] usb 2-1: USB disconnect, device number 8 [ 208.098877][ T6807] input: syz1 as /devices/virtual/input/input30 [ 208.319787][ T4728] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.579930][ T4728] usb 5-1: Using ep0 maxpacket: 32 [ 208.642461][ T6828] tipc: Cannot configure node identity twice [ 208.700237][ T4728] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.856186][ T6836] tipc: Started in network mode [ 208.860561][ T4728] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 208.887450][ T6836] tipc: Node identity 4, cluster identity 4711 [ 208.894515][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.912277][ T6836] tipc: Node number set to 4 [ 208.936667][ T4728] usb 5-1: Product: syz [ 208.946449][ T4728] usb 5-1: Manufacturer: syz [ 208.957100][ T4728] usb 5-1: SerialNumber: syz [ 209.018529][ T4728] usb 5-1: config 0 descriptor?? [ 210.539791][ T4728] usb 5-1: USB disconnect, device number 4 [ 210.757302][ T26] audit: type=1326 audit(1771596219.005:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 210.825038][ T26] audit: type=1326 audit(1771596219.035:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 210.955305][ T26] audit: type=1326 audit(1771596219.035:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.045804][ T26] audit: type=1326 audit(1771596219.035:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.108427][ T26] audit: type=1326 audit(1771596219.035:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.131014][ T26] audit: type=1326 audit(1771596219.035:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.172265][ T26] audit: type=1326 audit(1771596219.035:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.265827][ T26] audit: type=1326 audit(1771596219.035:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.291509][ T26] audit: type=1326 audit(1771596219.035:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 211.390598][ T26] audit: type=1326 audit(1771596219.035:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe00efec629 code=0x7ffc0000 [ 212.990123][ T6915] device bond1 entered promiscuous mode [ 213.046820][ T6915] device macvlan2 entered promiscuous mode [ 213.073088][ T6915] bond1: (slave macvlan2): Opening slave failed [ 214.848635][ T6939] input: syz1 as /devices/virtual/input/input31 [ 215.265315][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.541709][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 215.770420][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 216.629996][ T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.640153][ T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.649148][ T23] usb 1-1: Product: syz [ 216.662216][ T23] usb 1-1: Manufacturer: syz [ 216.671006][ T23] usb 1-1: SerialNumber: syz [ 216.678772][ T23] usb 1-1: config 0 descriptor?? [ 216.700072][ T6953] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.890644][ T6982] input: syz1 as /devices/virtual/input/input32 [ 217.027034][ T6986] udc-core: couldn't find an available UDC or it's busy [ 217.056230][ T6986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 217.304436][ T4728] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.830058][ T4728] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.866039][ T4728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.875494][ T4728] usb 2-1: Product: syz [ 217.905578][ T4728] usb 2-1: Manufacturer: syz [ 217.911139][ T4728] usb 2-1: SerialNumber: syz [ 217.981044][ T4728] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.152640][ T23] usb 1-1: USB disconnect, device number 12 [ 218.230655][ T6994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.238215][ T6994] IPv6: NLM_F_CREATE should be set when creating new route [ 218.570008][ T4728] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.708079][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 218.708094][ T26] audit: type=1326 audit(1771596226.955:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.4.873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7df69f629 code=0x0 [ 218.870165][ T7006] loop3: detected capacity change from 0 to 1024 [ 218.898700][ T7006] EXT4-fs (loop3): Ignoring removed orlov option [ 218.948256][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.955807][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.975005][ T6985] udc-core: couldn't find an available UDC or it's busy [ 218.982173][ T7006] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 219.026139][ T6985] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.045739][ T4276] usb 2-1: USB disconnect, device number 9 [ 219.615441][ T7017] input: syz1 as /devices/virtual/input/input33 [ 219.620724][ T4728] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 219.647032][ T4728] ath9k_htc: Failed to initialize the device [ 219.669864][ T4276] usb 2-1: ath9k_htc: USB layer deinitialized [ 219.724325][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.967391][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.673570][ T6994] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.682890][ T6994] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.692349][ T6994] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.701358][ T6994] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.859525][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 220.980218][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.885'. [ 221.109169][ T7050] loop2: detected capacity change from 0 to 4096 [ 221.199848][ T4728] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 221.274406][ T7058] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.459848][ T4728] usb 4-1: Using ep0 maxpacket: 16 [ 221.580000][ T4728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.613858][ T4728] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.629861][ T4728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.653939][ T4728] usb 4-1: config 0 descriptor?? [ 223.570858][ T7069] loop4: detected capacity change from 0 to 512 [ 223.622251][ T4728] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 223.810194][ T7069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.869325][ T7069] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.038355][ T6161] usb 4-1: USB disconnect, device number 5 [ 224.595263][ T7080] loop4: detected capacity change from 0 to 764 [ 225.040201][ T7099] loop4: detected capacity change from 0 to 512 [ 225.112392][ T7099] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.140333][ T7099] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.212047][ T7099] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 228.090157][ T4728] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.339832][ T4728] usb 2-1: Using ep0 maxpacket: 32 [ 228.465463][ T4728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 228.540661][ T4237] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 228.643406][ T4728] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.677750][ T4728] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.708864][ T4728] usb 2-1: Product: syz [ 228.747974][ T4728] usb 2-1: Manufacturer: syz [ 228.759055][ T4728] usb 2-1: SerialNumber: syz [ 228.784869][ T4728] usb 2-1: config 0 descriptor?? [ 228.810314][ T7112] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.960009][ T4237] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.990861][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.058812][ T4237] usb 4-1: config 0 descriptor?? [ 229.123643][ T7147] udc-core: couldn't find an available UDC or it's busy [ 229.203862][ T7147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.329940][ T4237] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 229.352455][ T4237] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 229.435414][ T26] audit: type=1326 audit(1771596237.685:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.526473][ T26] audit: type=1326 audit(1771596237.715:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.586586][ T4237] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 229.597527][ T4237] [drm] Initialized udl on minor 2 [ 229.642222][ T26] audit: type=1326 audit(1771596237.715:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.674252][ T26] audit: type=1326 audit(1771596237.715:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.708144][ T26] audit: type=1326 audit(1771596237.715:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.741498][ T26] audit: type=1326 audit(1771596237.715:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.779934][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err 0 [ 229.790382][ T26] audit: type=1326 audit(1771596237.715:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.825691][ T4237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 229.840408][ T7153] fuse: Bad value for 'fd' [ 229.920658][ T26] audit: type=1326 audit(1771596237.715:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 229.997814][ T6161] usb 4-1: USB disconnect, device number 6 [ 230.004524][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 230.089209][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 230.101751][ T26] audit: type=1326 audit(1771596237.715:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 230.136887][ T4237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 230.360483][ T26] audit: type=1326 audit(1771596237.715:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7df69f629 code=0x7ffc0000 [ 230.462345][ T7157] loop4: detected capacity change from 0 to 256 [ 230.654463][ T7157] exfat: Bad value for 'uid' [ 231.282008][ T6161] usb 2-1: USB disconnect, device number 10 [ 231.963443][ T7185] fuse: Bad value for 'fd' [ 232.309711][ T4237] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 232.419783][ T4728] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.470439][ T7197] loop1: detected capacity change from 0 to 4096 [ 232.581471][ T7201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.679947][ T4728] usb 1-1: Using ep0 maxpacket: 32 [ 232.690051][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.726955][ T4237] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.759031][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.776298][ T4237] usb 5-1: config 0 descriptor?? [ 232.825053][ T4237] pwc: Askey VC010 type 2 USB webcam detected. [ 232.840092][ T4728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 232.947750][ T7209] loop1: detected capacity change from 0 to 2048 [ 233.008761][ T7209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.060128][ T4728] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.080148][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.106868][ T4728] usb 1-1: Product: syz [ 233.117864][ T4728] usb 1-1: Manufacturer: syz [ 233.127206][ T4728] usb 1-1: SerialNumber: syz [ 233.145073][ T4728] usb 1-1: config 0 descriptor?? [ 233.170050][ T7192] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 233.261847][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.332210][ T7217] xt_recent: Unsupported userspace flags (000000de) [ 233.339979][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.390397][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.459966][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.499331][ T7220] udc-core: couldn't find an available UDC or it's busy [ 233.509990][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.520678][ T7220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.559903][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.577448][ T7222] fuse: Bad value for 'fd' [ 233.602232][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.787824][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 233.829790][ T4237] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.869975][ T4237] pwc: recv_control_msg error -32 req 02 val 2500 [ 234.175539][ T4237] pwc: recv_control_msg error -32 req 02 val 2400 [ 234.480148][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.500249][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.524790][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.547594][ T7240] loop2: detected capacity change from 0 to 1024 [ 234.551231][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.608331][ T4237] pwc: Registered as video103. [ 234.622213][ T7240] hfsplus: invalid btree flag [ 234.640205][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 234.643245][ T7240] hfsplus: failed to load catalog file [ 234.698949][ T4237] usb 5-1: USB disconnect, device number 5 [ 234.920803][ T7241] [U]  [ 235.128766][ T7241] [U] K{ [ 235.144905][ T7241] [U] T 1ŠFFˊ`GJǘGO/MC [ 235.178378][ T7241] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 235.200729][ T7241] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 235.215856][ T4237] usb 1-1: USB disconnect, device number 13 [ 235.257650][ T7241] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 235.417328][ T7241] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 235.504844][ T7241] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 235.563561][ T7241] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 235.619486][ T7241] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 242.914106][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.932849][ T7352] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 242.958135][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.966981][ T7352] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 242.982693][ T7352] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 243.000149][ T7352] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 243.126191][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.135401][ T7352] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 243.148515][ T7352] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 243.163119][ T7352] [U] 22Ʃ۩X?0;3U [ 243.173819][ T7352] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 243.203740][ T7352] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 243.214948][ T7352] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 243.224898][ T7352] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 243.234131][ T7352] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 243.248027][ T7352] [U] EC [ 243.254119][ T7352] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 243.414892][ T7347] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 243.629073][ T7357] loop3: detected capacity change from 0 to 512 [ 244.072889][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.213714][ T7357] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.766066][ T7357] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 244.829122][ T7369] loop1: detected capacity change from 0 to 2048 [ 245.009980][ T7369] loop1: p3 < > p4 < > [ 245.014555][ T7369] loop1: partition table partially beyond EOD, truncated [ 245.081552][ T7369] loop1: p3 start 4284289 is beyond EOD, truncated [ 245.199169][ T3560] loop1: p3 < > p4 < > [ 245.204271][ T3560] loop1: partition table partially beyond EOD, truncated [ 245.230533][ T3560] loop1: p3 start 4284289 is beyond EOD, truncated [ 245.410772][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 245.566321][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 245.614169][ T7388] [ 245.616706][ T7388] ====================================================== [ 245.623761][ T7388] WARNING: possible circular locking dependency detected [ 245.631929][ T7388] syzkaller #0 Not tainted [ 245.637394][ T7388] ------------------------------------------------------ [ 245.646090][ T7388] syz.3.990/7388 is trying to acquire lock: [ 245.653566][ T7388] ffff88807a508b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 245.664650][ T7388] [ 245.664650][ T7388] but task is already holding lock: [ 245.676993][ T7388] ffff88807a508ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 245.689751][ T7388] [ 245.689751][ T7388] which lock already depends on the new lock. [ 245.689751][ T7388] [ 245.701261][ T7388] [ 245.701261][ T7388] the existing dependency chain (in reverse order) is: [ 245.711072][ T7388] [ 245.711072][ T7388] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 245.719656][ T7388] __mutex_lock_common+0x1e3/0x2400 [ 245.726190][ T7388] mutex_lock_nested+0x17/0x20 [ 245.731838][ T7388] hci_dev_do_close+0x5f/0x1030 [ 245.737954][ T7388] hci_rfkill_set_block+0x10a/0x190 [ 245.743838][ T7388] rfkill_set_block+0x1c6/0x420 [ 245.749538][ T7388] rfkill_fop_write+0x452/0x560 [ 245.755618][ T7388] vfs_write+0x30b/0xd60 [ 245.761210][ T7388] ksys_write+0x152/0x260 [ 245.766401][ T7388] do_syscall_64+0x4c/0xa0 [ 245.771612][ T7388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.780129][ T7388] [ 245.780129][ T7388] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 245.788722][ T7388] __mutex_lock_common+0x1e3/0x2400 [ 245.794839][ T7388] mutex_lock_nested+0x17/0x20 [ 245.800372][ T7388] rfkill_register+0x33/0x8a0 [ 245.806441][ T7388] hci_register_dev+0x452/0x970 [ 245.812821][ T7388] vhci_create_device+0x32c/0x5c0 [ 245.819356][ T7388] vhci_write+0x391/0x450 [ 245.824439][ T7388] vfs_write+0x745/0xd60 [ 245.829704][ T7388] ksys_write+0x152/0x260 [ 245.835076][ T7388] do_syscall_64+0x4c/0xa0 [ 245.841148][ T7388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.848193][ T7388] [ 245.848193][ T7388] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 245.857317][ T7388] __mutex_lock_common+0x1e3/0x2400 [ 245.863585][ T7388] mutex_lock_nested+0x17/0x20 [ 245.870099][ T7388] vhci_send_frame+0x88/0x100 [ 245.876999][ T7388] hci_send_frame+0x1a9/0x2e0 [ 245.883176][ T7388] hci_tx_work+0x9f9/0x1710 [ 245.888324][ T7388] process_one_work+0x85f/0x1010 [ 245.895726][ T7388] worker_thread+0xaa6/0x1290 [ 245.903327][ T7388] kthread+0x436/0x520 [ 245.909607][ T7388] ret_from_fork+0x1f/0x30 [ 245.915975][ T7388] [ 245.915975][ T7388] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 245.926190][ T7388] __lock_acquire+0x2c42/0x7d10 [ 245.932250][ T7388] lock_acquire+0x19e/0x400 [ 245.937938][ T7388] __flush_work+0x116/0x210 [ 245.944411][ T7388] hci_dev_do_close+0x1e7/0x1030 [ 245.950504][ T7388] hci_rfkill_set_block+0x10a/0x190 [ 245.957304][ T7388] rfkill_set_block+0x1c6/0x420 [ 245.963084][ T7388] rfkill_fop_write+0x452/0x560 [ 245.968959][ T7388] vfs_write+0x30b/0xd60 [ 245.973867][ T7388] ksys_write+0x152/0x260 [ 245.979893][ T7388] do_syscall_64+0x4c/0xa0 [ 245.985476][ T7388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.992681][ T7388] [ 245.992681][ T7388] other info that might help us debug this: [ 245.992681][ T7388] [ 246.003354][ T7388] Chain exists of: [ 246.003354][ T7388] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 246.003354][ T7388] [ 246.020175][ T7388] Possible unsafe locking scenario: [ 246.020175][ T7388] [ 246.028576][ T7388] CPU0 CPU1 [ 246.034336][ T7388] ---- ---- [ 246.040851][ T7388] lock(&hdev->req_lock); [ 246.045611][ T7388] lock(rfkill_global_mutex); [ 246.053546][ T7388] lock(&hdev->req_lock); [ 246.061549][ T7388] lock((work_completion)(&hdev->tx_work)); [ 246.068278][ T7388] [ 246.068278][ T7388] *** DEADLOCK *** [ 246.068278][ T7388] [ 246.077764][ T7388] 2 locks held by syz.3.990/7388: [ 246.082947][ T7388] #0: ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 246.094372][ T7388] #1: ffff88807a508ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 246.105424][ T7388] [ 246.105424][ T7388] stack backtrace: [ 246.111478][ T7388] CPU: 0 PID: 7388 Comm: syz.3.990 Not tainted syzkaller #0 [ 246.119276][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.130142][ T7388] Call Trace: [ 246.134163][ T7388] [ 246.137419][ T7388] dump_stack_lvl+0x188/0x250 [ 246.142682][ T7388] ? load_image+0x400/0x400 [ 246.147617][ T7388] ? show_regs_print_info+0x20/0x20 [ 246.152898][ T7388] ? print_circular_bug+0x12b/0x1a0 [ 246.158376][ T7388] check_noncircular+0x296/0x330 [ 246.163476][ T7388] ? look_up_lock_class+0x71/0x110 [ 246.168747][ T7388] ? add_chain_block+0x940/0x940 [ 246.173943][ T7388] ? lockdep_lock+0xf1/0x1f0 [ 246.178592][ T7388] ? mark_lock+0x94/0x320 [ 246.183231][ T7388] __lock_acquire+0x2c42/0x7d10 [ 246.188153][ T7388] ? lockdep_unlock+0x143/0x2e0 [ 246.194214][ T7388] ? mark_lock+0x94/0x320 [ 246.198828][ T7388] ? verify_lock_unused+0x140/0x140 [ 246.204512][ T7388] ? __lock_acquire+0x12e8/0x7d10 [ 246.210026][ T7388] lock_acquire+0x19e/0x400 [ 246.214614][ T7388] ? __flush_work+0xfa/0x210 [ 246.219577][ T7388] ? verify_lock_unused+0x140/0x140 [ 246.225585][ T7388] ? __mutex_trylock_common+0x155/0x260 [ 246.231187][ T7388] ? read_lock_is_recursive+0x10/0x10 [ 246.236632][ T7388] __flush_work+0x116/0x210 [ 246.241398][ T7388] ? __flush_work+0xfa/0x210 [ 246.246329][ T7388] ? flush_work+0x20/0x20 [ 246.250992][ T7388] ? hci_leds_update_powered+0x148/0x160 [ 246.257209][ T7388] ? rcu_lock_release+0x5/0x20 [ 246.262128][ T7388] ? __lock_acquire+0x7d10/0x7d10 [ 246.267317][ T7388] hci_dev_do_close+0x1e7/0x1030 [ 246.272812][ T7388] ? _raw_spin_unlock+0x40/0x40 [ 246.277940][ T7388] hci_rfkill_set_block+0x10a/0x190 [ 246.282382][ T4237] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.283310][ T7388] ? rcu_lock_release+0x20/0x20 [ 246.296597][ T7388] rfkill_set_block+0x1c6/0x420 [ 246.301942][ T7388] rfkill_fop_write+0x452/0x560 [ 246.306864][ T7388] ? rfkill_fop_read+0x4d0/0x4d0 [ 246.312241][ T7388] ? common_file_perm+0xc0/0x1c0 [ 246.317226][ T7388] ? fsnotify_perm+0x5d/0x560 [ 246.321959][ T7388] ? security_file_permission+0x75/0xa0 [ 246.327546][ T7388] ? rfkill_fop_read+0x4d0/0x4d0 [ 246.332628][ T7388] vfs_write+0x30b/0xd60 [ 246.336933][ T7388] ? file_end_write+0x250/0x250 [ 246.341846][ T7388] ? __fget_files+0x40f/0x480 [ 246.346573][ T7388] ? __fdget_pos+0x1e2/0x370 [ 246.351356][ T7388] ? ksys_write+0x71/0x260 [ 246.355909][ T7388] ksys_write+0x152/0x260 [ 246.360286][ T7388] ? __ia32_sys_read+0x80/0x80 [ 246.365180][ T7388] ? lockdep_hardirqs_on+0x94/0x140 [ 246.370413][ T7388] do_syscall_64+0x4c/0xa0 [ 246.374879][ T7388] ? clear_bhb_loop+0x30/0x80 [ 246.379596][ T7388] ? clear_bhb_loop+0x30/0x80 [ 246.384630][ T7388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.390772][ T7388] RIP: 0033:0x7fa68b653629 [ 246.395312][ T7388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.415501][ T7388] RSP: 002b:00007fa6898ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.424148][ T7388] RAX: ffffffffffffffda RBX: 00007fa68b8ccfa0 RCX: 00007fa68b653629 [ 246.432775][ T7388] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000003 [ 246.440932][ T7388] RBP: 00007fa68b6e9b39 R08: 0000000000000000 R09: 0000000000000000 [ 246.449030][ T7388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.458044][ T7388] R13: 00007fa68b8cd038 R14: 00007fa68b8ccfa0 R15: 00007fff51ccb078 [ 246.466442][ T7388] [ 246.469929][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.549800][ T4237] usb 2-1: Using ep0 maxpacket: 8 [ 246.571255][ T7391] loop3: detected capacity change from 0 to 512 [ 246.669749][ T4237] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.681790][ T4237] usb 2-1: config 179 has no interface number 0 [ 246.748888][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.776167][ T7391] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.788996][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.802161][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.815423][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.829755][ T4237] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.845308][ T4237] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.855936][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.889993][ T7390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 246.956411][ T7388] loop3: detected capacity change from 0 to 2048 [ 246.987661][ T7388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.201118][ T4237] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input37 [ 247.387921][ T7390] udc-core: couldn't find an available UDC or it's busy [ 247.395644][ T7390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.610591][ T4237] usb 2-1: USB disconnect, device number 11 [ 247.619767][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 247.630573][ T4237] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 247.787353][ T7339] Set syz1 is full, maxelem 65536 reached