last executing test programs: 3m42.252686409s ago: executing program 2 (id=138): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mq_open(&(0x7f0000000000)='/dev/ptp0\x00', 0x800, 0x100, 0x0) r3 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000340)) r4 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000500)=[{0x33, '\x00', @st={0x4, [{0x2, @uvalue=0x2}, {0x2, @svalue=0xc653}, {0x3, @svalue=0x9}, {0x1, @uvalue=0x9}]}, 0xa}]}) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 3m42.050945861s ago: executing program 2 (id=139): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3m41.880377868s ago: executing program 2 (id=141): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x600, &(0x7f0000003700)={0x77359400}) 3m40.366525754s ago: executing program 2 (id=144): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180cc, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") write(0xffffffffffffffff, &(0x7f0000000140)='&\x00\x00\x00\"', 0x5) setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3m39.011856678s ago: executing program 2 (id=148): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3m35.327036983s ago: executing program 2 (id=167): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 3m19.9816356s ago: executing program 32 (id=167): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 53.791454278s ago: executing program 4 (id=495): socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x108) pipe2$watch_queue(&(0x7f0000000340), 0x80) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x2e0600, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 53.704084282s ago: executing program 4 (id=496): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000600007939f88338c5f33500"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x480, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x1, 0xff, 0x1}}, 0x18) 53.397623455s ago: executing program 4 (id=498): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYRESHEX], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.641018385s ago: executing program 4 (id=501): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c4b454c8325e01cb24c2f3c7bd462c5b8f86ca56891f8085db68de13331ff83f0b12d3c55ab09898b831162e94af5aab93746cc9c2846172beff34b815944f62e60470cf4d16331b53bb359d1c446b18974ae35bced61d48cfc8149eb43bec86d871bc7c43763c6e7daebe349c300000001000000012dc90b9a5f8d0ff4117ef90aff1413e2e919558d4a6412b5fdaa2694c41bab32c5c81e01243ccef8dcd85a46cfb92323a8070db43b1ef562691c070e2749"], 0x1, 0x6f6, &(0x7f0000000b00)="$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") dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) acct(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 46.527083276s ago: executing program 4 (id=524): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="0100000000000000400100000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) 43.330868725s ago: executing program 4 (id=538): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x8300, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x102, 0x8, 'syz0\x00', 0x210002}) 28.259855561s ago: executing program 33 (id=538): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x8300, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x102, 0x8, 'syz0\x00', 0x210002}) 13.598916922s ago: executing program 1 (id=598): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) shutdown(0xffffffffffffffff, 0x1) bind$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 12.509696431s ago: executing program 1 (id=600): r0 = getpgrp(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 11.769513295s ago: executing program 1 (id=601): sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 10.730045513s ago: executing program 1 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES32=0x1], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28) socket$kcm(0x2, 0xa, 0x2) r3 = open(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64842, 0x86) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x35a16}], 0x14, 0x7800, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 10.549514169s ago: executing program 5 (id=609): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) shutdown(0xffffffffffffffff, 0x1) bind$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 9.475488171s ago: executing program 5 (id=612): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0004}]}) epoll_create(0x0) 9.288871776s ago: executing program 5 (id=614): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000022c0)=0x2000000) 9.126095796s ago: executing program 5 (id=616): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 9.042891041s ago: executing program 6 (id=569): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 8.87653767s ago: executing program 5 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xfffffff9, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000021c0)}, 0x1f00) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000300), &(0x7f0000001740)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x3, 0x0, &(0x7f0000002500)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 8.00947606s ago: executing program 0 (id=620): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) 6.973453878s ago: executing program 0 (id=621): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) shutdown(0xffffffffffffffff, 0x1) bind$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 5.883585227s ago: executing program 1 (id=623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4$alg(r0, 0x0, 0x0, 0x80800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001100)="a9", 0x1}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44011}], 0x1, 0x4) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) 5.859726903s ago: executing program 0 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000280)=[{&(0x7f0000003000)=""/4099, 0xffffff04}], 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3d, 0x0, 0x101f, 0x4ab}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x40010000, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) 5.773500647s ago: executing program 6 (id=625): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000600007939f88338c5f33500"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x480, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0xff, 0x1}}, 0x18) 4.132188514s ago: executing program 3 (id=627): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/166, 0xfe) r4 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x20000001) 3.860544453s ago: executing program 6 (id=628): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xffffff7f}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 3.02791926s ago: executing program 6 (id=629): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000780)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 2.949612985s ago: executing program 3 (id=630): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 2.090348896s ago: executing program 0 (id=631): timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.834816159s ago: executing program 6 (id=632): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x96) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000240)=""/120) 1.777497748s ago: executing program 3 (id=633): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000022c0)=0x2000000) 1.685487331s ago: executing program 0 (id=634): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, &(0x7f0000000340)) shutdown(0xffffffffffffffff, 0x1) bind$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 1.583581493s ago: executing program 3 (id=635): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.497542957s ago: executing program 1 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000380)={0xffffffff, 0x1, [{0x100, 0x0, 0x9}, {0x8, 0x0, 0x5}, {0x8}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x7fffffff}, {0x81, 0x0, 0x3}, {0xe6bd, 0x0, 0x8001}, {0x4, 0x0, 0x5}, {0x7, 0x0, 0x3}, {0xef3, 0x0, 0x401}, {0x0, 0x0, 0x7}, {0x5, 0x0, 0x4}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0x4}, {0x9, 0x0, 0xfffffffffffffff7}, {0x40, 0x0, 0x2}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 1.473913092s ago: executing program 5 (id=637): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 250.446256ms ago: executing program 0 (id=638): r0 = userfaultfd(0x1) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_vhci(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce000100"], 0xf4}}, 0x20040084) 210.843989ms ago: executing program 6 (id=639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = mq_open(&(0x7f0000000000)='/dev/ptp0\x00', 0x800, 0x100, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000500)=[{0x33, '\x00', @st={0x4, [{0x2, @uvalue=0x2}, {0x2, @svalue=0xc653}, {0x3, @svalue=0x9}, {0x1, @uvalue=0x9}]}, 0xa}]}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 97.537768ms ago: executing program 3 (id=640): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001000)="baacd010dc73210930ef8ff9f52292be", 0x10}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000017010000030000000100"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 3 (id=641): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = mq_open(&(0x7f0000000000)='/dev/ptp0\x00', 0x800, 0x100, 0x0) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) r5 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000500)=[{0x33, '\x00', @st={0x4, [{0x2, @uvalue=0x2}, {0x2, @svalue=0xc653}, {0x3, @svalue=0x9}, {0x1, @uvalue=0x9}]}, 0xa}]}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): oing over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.737078][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.748822][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.756136][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.782814][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.794325][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.801537][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.828031][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.853854][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.861328][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.888286][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.921957][ T4194] device hsr_slave_0 entered promiscuous mode [ 57.929115][ T4194] device hsr_slave_1 entered promiscuous mode [ 57.983331][ T4196] device hsr_slave_0 entered promiscuous mode [ 57.990338][ T4196] device hsr_slave_1 entered promiscuous mode [ 57.996987][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.005670][ T4196] Cannot create hsr debugfs directory [ 58.019196][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.026803][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.033776][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.041694][ T4189] Cannot create hsr debugfs directory [ 58.067700][ T4192] device hsr_slave_0 entered promiscuous mode [ 58.074978][ T4192] device hsr_slave_1 entered promiscuous mode [ 58.082552][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.090418][ T4192] Cannot create hsr debugfs directory [ 58.116267][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.123504][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.130867][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 58.137566][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.145332][ T4185] Cannot create hsr debugfs directory [ 58.210376][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 58.216891][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 58.216966][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 58.231145][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 58.490484][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.508121][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.517151][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.532052][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.575814][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.595142][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.621879][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.633525][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.652508][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.667762][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.682572][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.705864][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.783365][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.805719][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.841293][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.848530][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.858934][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.907662][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.917332][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.946351][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.957716][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.971464][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.990864][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.000551][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.009488][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.021289][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.028598][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.062500][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.073720][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.084092][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.093646][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.102840][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.110153][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.118576][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.136620][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.151758][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.164161][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.175141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.192368][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.201650][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.211071][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.244540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.253269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.263555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.273986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.283824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.292679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.302245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.310941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.335871][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.349554][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.363028][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.372201][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.380624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.389174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.398366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.408262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.420706][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.435496][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.444825][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.454656][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.461984][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.517616][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.526898][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.537840][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.549191][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.556443][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.565977][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.578179][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.587553][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.594860][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.603647][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.612594][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.622502][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.629807][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.637540][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.647135][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.657446][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.664799][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.672861][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.682533][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.692048][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.701341][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.710317][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.717579][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.725539][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.735455][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.744661][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.753634][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.762583][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.771467][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.779864][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.788916][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.803831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.823427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.839504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.876454][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.905299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.915961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.925104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.937288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.946473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.956180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.965597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.975853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.984628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.993297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.002364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.010809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.019442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.028431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.041011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.049022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.063079][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.075887][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.086820][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.100594][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.110433][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.118803][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.126748][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.137063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.147987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.158783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.167385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.179320][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.197342][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.210392][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 60.232193][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.252699][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.271551][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.297614][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 60.300269][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 60.321213][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 60.330543][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 60.357660][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.370804][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.395731][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.403202][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.418280][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.427537][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.444333][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.451642][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.459820][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.468511][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.478474][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.487280][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.504957][ T4194] device veth0_vlan entered promiscuous mode [ 60.522645][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.539166][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.549418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.577948][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.595153][ T4194] device veth1_vlan entered promiscuous mode [ 60.610424][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.622385][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.634899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.646588][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.663471][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.677384][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.686298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.706854][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.716268][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.727851][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.755913][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.765780][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.776546][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.786787][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.796126][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.815897][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.828375][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.855084][ T4194] device veth0_macvtap entered promiscuous mode [ 60.875858][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.898347][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.909516][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.919092][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.927598][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.937199][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.954006][ T4194] device veth1_macvtap entered promiscuous mode [ 60.994193][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.036968][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.045773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.057663][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.067489][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.077386][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.109986][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.121141][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.138014][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.147606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.163405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.178398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.188077][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.198795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.207017][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.218144][ T4196] device veth0_vlan entered promiscuous mode [ 61.227552][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.242860][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253075][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.262297][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.271713][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.283031][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.291844][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.300985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.309571][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.318715][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.327658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.351214][ T4185] device veth0_vlan entered promiscuous mode [ 61.359410][ T4196] device veth1_vlan entered promiscuous mode [ 61.369575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.381773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.389291][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.409550][ T4185] device veth1_vlan entered promiscuous mode [ 61.442287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.451215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.459476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.468772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.487403][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.507263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.517982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.528606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.545920][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.555014][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.566844][ T4189] device veth0_vlan entered promiscuous mode [ 61.589636][ T4185] device veth0_macvtap entered promiscuous mode [ 61.618084][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.626812][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.639027][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.652228][ T4185] device veth1_macvtap entered promiscuous mode [ 61.662036][ T4196] device veth0_macvtap entered promiscuous mode [ 61.673143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.682481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.691731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.702022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.715759][ T4189] device veth1_vlan entered promiscuous mode [ 61.731303][ T4196] device veth1_macvtap entered promiscuous mode [ 61.787518][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.791758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.796193][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.814446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.826026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.834580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.844041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.853951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.862807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.871612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.884288][ T4192] device veth0_vlan entered promiscuous mode [ 61.914794][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.926065][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.938332][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.959465][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.968607][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.978808][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.987767][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.004307][ T4189] device veth0_macvtap entered promiscuous mode [ 62.016871][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.029099][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.042373][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.053409][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.065579][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.077305][ T4192] device veth1_vlan entered promiscuous mode [ 62.083977][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.094764][ T4189] device veth1_macvtap entered promiscuous mode [ 62.100626][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.111896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.121243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.129109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.137768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.146957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.157643][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.168700][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.184124][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.201375][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.212339][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.222700][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.233471][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.245614][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.254352][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.263918][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.274693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.284404][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.300287][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 62.321563][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.331392][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.340611][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.349334][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.365235][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.374633][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 62.374918][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 62.380798][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 62.380829][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 62.383093][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.409436][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.420667][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.446184][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.464383][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.476372][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.495150][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.507053][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.524231][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.545205][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.591885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.618951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.628297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.638242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.650302][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.661521][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.671818][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.682594][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.693472][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.704300][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.715959][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.731493][ T4192] device veth0_macvtap entered promiscuous mode [ 62.748740][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.758268][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.768901][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.783435][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.794672][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.803776][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.813745][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.866564][ T4192] device veth1_macvtap entered promiscuous mode [ 62.893487][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.913070][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.954698][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.958053][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.973099][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.983996][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.994949][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.004883][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.005302][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.024021][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.034239][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.045843][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.057361][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.082556][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.092269][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.102247][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.115155][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.126919][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.137064][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.148327][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.158632][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.169311][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.181216][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 63.185267][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.197181][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.209400][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.218743][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.221065][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.236080][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.239132][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.254176][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.263350][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.286713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.297523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.306741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.338243][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.347104][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.365845][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.398760][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.425810][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.460760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.469490][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.479550][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.510287][ T4229] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 63.524374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.534882][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.546723][ T4229] usb 4-1: Product: syz [ 63.554287][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.567066][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.576756][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.584964][ T4229] usb 4-1: Manufacturer: syz [ 63.589631][ T4229] usb 4-1: SerialNumber: syz [ 63.603030][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.612810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.648313][ T4229] usb 4-1: config 0 descriptor?? [ 63.654960][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.701763][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.718545][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.770244][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.869751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.879795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.889735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.899729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.909582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.918893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.928305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.937322][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.946430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.955521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.771646][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 64.777915][ T4224] Bluetooth: hci2: command 0x0419 tx timeout [ 64.784519][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 64.791068][ T4224] Bluetooth: hci3: command 0x0419 tx timeout [ 64.797261][ T4224] Bluetooth: hci4: command 0x0419 tx timeout [ 64.854486][ T13] usb 4-1: USB disconnect, device number 2 [ 65.007587][ T4269] loop2: detected capacity change from 0 to 4096 [ 66.209458][ T4265] loop4: detected capacity change from 0 to 40427 [ 66.417909][ T4265] F2FS-fs (loop4): invalid crc value [ 66.528425][ T4265] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.942810][ T26] audit: type=1326 audit(1772478171.021:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.552280][ T26] audit: type=1326 audit(1772478171.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.601090][ T26] audit: type=1326 audit(1772478171.021:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.618081][ T4265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.625533][ T26] audit: type=1326 audit(1772478171.021:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.689755][ T26] audit: type=1326 audit(1772478171.031:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.749750][ T26] audit: type=1326 audit(1772478171.031:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.837025][ T26] audit: type=1326 audit(1772478171.031:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.861622][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 67.885250][ T26] audit: type=1326 audit(1772478171.031:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.923782][ T26] audit: type=1326 audit(1772478171.031:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 67.957157][ T26] audit: type=1326 audit(1772478171.031:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 69.719649][ T4323] loop4: detected capacity change from 0 to 40427 [ 69.860605][ T4323] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 69.868567][ T4323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.909653][ T4323] F2FS-fs (loop4): invalid crc value [ 70.044816][ T4323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.210547][ T4323] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.217955][ T4323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.419967][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.494556][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.501429][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.580279][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.664437][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.951392][ T13] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.031270][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.161684][ T13] usb 4-1: SerialNumber: syz [ 74.545954][ T13] usb 4-1: cannot find UAC_HEADER [ 74.652921][ T13] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 74.741199][ T13] usb 4-1: USB disconnect, device number 3 [ 74.811605][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.809698][ C0] sched: RT throttling activated [ 76.569890][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.849942][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 77.130027][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 77.159931][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.223424][ T7] usb 3-1: Product: syz [ 77.227776][ T7] usb 3-1: Manufacturer: syz [ 77.274143][ T7] usb 3-1: SerialNumber: syz [ 77.290929][ T7] usb 3-1: config 0 descriptor?? [ 78.858242][ T7] usb 3-1: can't set config #0, error -71 [ 78.955719][ T4356] loop4: detected capacity change from 0 to 32768 [ 78.967841][ T7] usb 3-1: USB disconnect, device number 2 [ 79.298556][ T4356] XFS (loop4): Mounting V5 Filesystem [ 79.489836][ T4356] XFS (loop4): Ending clean mount [ 79.503077][ T4356] XFS (loop4): Quotacheck needed: Please wait. [ 79.599728][ T4356] XFS (loop4): Quotacheck: Done. [ 81.669577][ T4376] ODEBUG: Out of memory. ODEBUG disabled [ 81.769342][ T1324] cfg80211: failed to load regulatory.db [ 82.835624][ T4385] loop3: detected capacity change from 0 to 40427 [ 82.955090][ T4385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.000542][ T4385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.033813][ T4385] F2FS-fs (loop3): invalid crc value [ 83.177142][ T4196] XFS (loop4): Unmounting Filesystem [ 83.856309][ T4385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.890225][ T7] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.074965][ T4385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.082619][ T4385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.161606][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 84.197811][ T4406] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 84.267957][ T26] kauditd_printk_skb: 298 callbacks suppressed [ 84.276334][ T26] audit: type=1800 audit(1772478188.361:310): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.28" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=10 res=0 errno=0 [ 84.485348][ T4406] overlayfs: failed to resolve './bus': -2 [ 86.045608][ T4226] Bluetooth: hci0: command 0x0406 tx timeout [ 86.165951][ T4263] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.568308][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 87.409949][ T4263] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 87.438620][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.457496][ T4263] usb 2-1: Product: syz [ 87.462350][ T4263] usb 2-1: Manufacturer: syz [ 87.467074][ T4263] usb 2-1: SerialNumber: syz [ 87.504979][ T4263] usb 2-1: config 0 descriptor?? [ 87.780806][ T4419] loop4: detected capacity change from 0 to 40427 [ 87.929865][ T4426] loop3: detected capacity change from 0 to 40427 [ 87.971917][ T4426] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.980103][ T4426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.992958][ T4426] F2FS-fs (loop3): invalid crc value [ 88.006515][ T4419] F2FS-fs (loop4): invalid crc value [ 88.044741][ T4426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.074907][ T1324] usb 2-1: USB disconnect, device number 2 [ 88.081776][ T4426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.089262][ T4426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.222994][ T4419] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.407520][ T4419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.878923][ T4438] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 89.129217][ T4440] loop1: detected capacity change from 0 to 32768 [ 89.161991][ T4376] Set syz1 is full, maxelem 65536 reached [ 89.624417][ T4440] XFS (loop1): Mounting V5 Filesystem [ 89.751117][ T4440] XFS (loop1): Ending clean mount [ 89.758237][ T4440] XFS (loop1): Quotacheck needed: Please wait. [ 89.964056][ T4440] XFS (loop1): Quotacheck: Done. [ 93.886672][ T4483] loop2: detected capacity change from 0 to 40427 [ 93.931328][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 93.976811][ T4483] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.984923][ T4483] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.996046][ T4483] F2FS-fs (loop2): invalid crc value [ 94.035135][ T4483] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.089801][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.105871][ T4483] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.113178][ T4483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.339865][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 94.410894][ T4192] XFS (loop1): Unmounting Filesystem [ 94.460000][ T4226] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.526102][ T4226] usb 5-1: config 0 has no interface number 0 [ 94.739960][ T4226] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 94.810794][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.058127][ T4226] usb 5-1: Product: syz [ 95.063394][ T4226] usb 5-1: Manufacturer: syz [ 95.068197][ T4226] usb 5-1: SerialNumber: syz [ 95.080540][ T4226] usb 5-1: config 0 descriptor?? [ 95.238488][ T26] audit: type=1326 audit(1772478199.321:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 95.704635][ T26] audit: type=1326 audit(1772478199.321:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 95.848690][ T4226] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 95.857709][ T4226] usb 5-1: selecting invalid altsetting 1 [ 95.863648][ T4226] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 95.878651][ T4226] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.890601][ T4226] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 95.899246][ T4226] usb 5-1: media controller created [ 95.925042][ T26] audit: type=1326 audit(1772478199.321:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 95.946994][ T4501] loop2: detected capacity change from 0 to 1024 [ 95.953507][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.990376][ T4501] hfsplus: creator requires a 4 character value [ 95.990999][ T26] audit: type=1326 audit(1772478199.321:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.017939][ T4501] hfsplus: unable to parse mount options [ 96.062632][ T26] audit: type=1326 audit(1772478199.321:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.093810][ T4226] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 96.119863][ T4226] zl10353_read_register: readreg error (reg=127, ret==-71) [ 96.140000][ T4226] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 96.163562][ T26] audit: type=1326 audit(1772478199.321:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.240633][ T26] audit: type=1326 audit(1772478199.321:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.270912][ T4226] usb 5-1: USB disconnect, device number 2 [ 96.306794][ T26] audit: type=1326 audit(1772478199.321:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.361135][ T26] audit: type=1326 audit(1772478199.321:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.417822][ T26] audit: type=1326 audit(1772478199.321:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5a79799 code=0x7ffc0000 [ 96.538139][ T4496] loop1: detected capacity change from 0 to 40427 [ 96.775062][ T4496] F2FS-fs (loop1): invalid crc value [ 97.279327][ T4496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.400144][ T4496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.064075][ T4537] loop4: detected capacity change from 0 to 40427 [ 102.136713][ T4537] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 102.144807][ T4537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.173093][ T4537] F2FS-fs (loop4): invalid crc value [ 102.256403][ T4537] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.296232][ T4537] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.303658][ T4537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.579890][ T4528] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.761409][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.786810][ T4551] loop1: detected capacity change from 0 to 32768 [ 102.884971][ T4551] XFS (loop1): Mounting V5 Filesystem [ 102.948776][ T4551] XFS (loop1): Ending clean mount [ 102.993921][ T4551] XFS (loop1): Quotacheck needed: Please wait. [ 103.030026][ T4528] usb 1-1: Using ep0 maxpacket: 32 [ 103.040010][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 103.169366][ T4551] XFS (loop1): Quotacheck: Done. [ 103.579842][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 103.579884][ T26] audit: type=1326 audit(1772478207.471:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 103.763036][ T26] audit: type=1326 audit(1772478207.471:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 103.990971][ T26] audit: type=1326 audit(1772478207.471:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.013818][ T26] audit: type=1326 audit(1772478207.471:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.048049][ T26] audit: type=1326 audit(1772478207.471:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.080523][ T4528] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.088194][ T26] audit: type=1326 audit(1772478207.471:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.088955][ T4528] usb 1-1: config 0 has no interface number 0 [ 104.117717][ T4227] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 104.126009][ T26] audit: type=1326 audit(1772478207.471:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.126658][ T4227] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 104.158738][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 104.168220][ T4227] usb 4-1: config 1 has no interface number 0 [ 104.176369][ T4227] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.180202][ T26] audit: type=1326 audit(1772478207.471:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.213667][ T4227] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 104.227289][ T4227] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 104.236878][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.239857][ T26] audit: type=1326 audit(1772478207.481:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.272111][ T26] audit: type=1326 audit(1772478207.481:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ac68a799 code=0x7ffc0000 [ 104.417036][ T4528] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 104.432271][ T4528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.443460][ T4528] usb 1-1: Product: syz [ 104.447972][ T4528] usb 1-1: Manufacturer: syz [ 104.453235][ T4528] usb 1-1: SerialNumber: syz [ 104.473054][ T4227] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 104.494031][ T4528] usb 1-1: config 0 descriptor?? [ 104.679527][ T4549] udc-core: couldn't find an available UDC or it's busy [ 104.697224][ T4528] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.706290][ T4528] usb 1-1: selecting invalid altsetting 1 [ 104.706409][ T4549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.723695][ T4528] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 105.491337][ T4227] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 105.821456][ T4528] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.833630][ T4528] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 105.842769][ T4528] usb 1-1: media controller created [ 105.886917][ T4528] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.771818][ T4227] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 106.809776][ T4528] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 106.816981][ T4528] zl10353_read_register: readreg error (reg=127, ret==-71) [ 106.840599][ T1108] usb 4-1: USB disconnect, device number 4 [ 106.850000][ T4528] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 106.892771][ T1108] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 106.935464][ T4528] usb 1-1: USB disconnect, device number 2 [ 107.138717][ T4192] XFS (loop1): Unmounting Filesystem [ 109.039857][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 109.039871][ T26] audit: type=1326 audit(1772478212.461:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.068747][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.103107][ T26] audit: type=1326 audit(1772478212.461:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.145266][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 109.208708][ T26] audit: type=1326 audit(1772478212.461:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.295260][ T26] audit: type=1326 audit(1772478212.461:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.399631][ T26] audit: type=1326 audit(1772478212.461:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.496900][ T26] audit: type=1326 audit(1772478212.461:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.589919][ T26] audit: type=1326 audit(1772478212.461:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.617588][ T4582] loop4: detected capacity change from 0 to 40427 [ 109.644021][ T26] audit: type=1326 audit(1772478212.461:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.704703][ T4582] F2FS-fs (loop4): invalid crc value [ 109.712367][ T26] audit: type=1326 audit(1772478212.461:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.743255][ T26] audit: type=1326 audit(1772478212.461:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 109.842304][ T4582] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.655329][ T4606] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.837245][ T4604] loop3: detected capacity change from 0 to 40427 [ 110.896729][ T4604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 110.904769][ T4604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.916557][ T4604] F2FS-fs (loop3): invalid crc value [ 110.983830][ T4604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.037907][ T4604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.045525][ T4604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.330954][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.660060][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 111.785977][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.819861][ T13] usb 2-1: config 0 has no interface number 0 [ 112.072908][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 112.084366][ T4626] overlayfs: unrecognized mount option "verity=require" or missing value [ 112.093170][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.105584][ T13] usb 2-1: Product: syz [ 112.111444][ T13] usb 2-1: Manufacturer: syz [ 112.116169][ T13] usb 2-1: SerialNumber: syz [ 112.123808][ T13] usb 2-1: config 0 descriptor?? [ 112.134684][ T4626] overlayfs: missing 'lowerdir' [ 112.163323][ T13] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 112.172441][ T13] usb 2-1: selecting invalid altsetting 1 [ 112.179786][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 112.188983][ T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.210055][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 112.218748][ T13] usb 2-1: media controller created [ 112.344554][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.542842][ T13] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 112.564416][ T13] zl10353_read_register: readreg error (reg=127, ret==-71) [ 112.610454][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 112.747305][ T13] usb 2-1: USB disconnect, device number 3 [ 112.915484][ T4633] loop0: detected capacity change from 0 to 32768 [ 113.243221][ T4633] XFS (loop0): Mounting V5 Filesystem [ 113.394292][ T4633] XFS (loop0): Ending clean mount [ 113.418040][ T4633] XFS (loop0): Quotacheck needed: Please wait. [ 113.607620][ T4633] XFS (loop0): Quotacheck: Done. [ 115.958381][ T4658] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 116.089933][ T4185] XFS (loop0): Unmounting Filesystem [ 116.615376][ T4667] loop3: detected capacity change from 0 to 40427 [ 116.657679][ T4667] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 116.665744][ T4667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.690814][ T4667] F2FS-fs (loop3): invalid crc value [ 116.749265][ T4667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.782318][ T4667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.789957][ T4667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.869167][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 118.179831][ T4225] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.429799][ T4225] usb 2-1: Using ep0 maxpacket: 32 [ 118.549990][ T4225] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.569060][ T4225] usb 2-1: config 0 has no interface number 0 [ 118.682038][ T4674] loop0: detected capacity change from 0 to 40427 [ 118.759941][ T4225] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 118.786710][ T4674] F2FS-fs (loop0): invalid crc value [ 118.802854][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.852837][ T4225] usb 2-1: Product: syz [ 118.871714][ T4674] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.882706][ T4225] usb 2-1: Manufacturer: syz [ 118.916605][ T4225] usb 2-1: SerialNumber: syz [ 118.984362][ T4225] usb 2-1: config 0 descriptor?? [ 119.063329][ T4225] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 119.093536][ T4225] usb 2-1: selecting invalid altsetting 1 [ 119.095493][ T4691] ======================================================= [ 119.095493][ T4691] WARNING: The mand mount option has been deprecated and [ 119.095493][ T4691] and is ignored by this kernel. Remove the mand [ 119.095493][ T4691] option from the mount to silence this warning. [ 119.095493][ T4691] ======================================================= [ 119.119222][ T4225] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 119.157977][ T4674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.224211][ T4225] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.409056][ T4225] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 119.461902][ T4694] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 119.474706][ T4225] usb 2-1: media controller created [ 119.626777][ T4225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.100383][ T4225] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 120.107932][ T4225] zl10353_read_register: readreg error (reg=127, ret==-71) [ 120.229821][ T4225] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 121.092802][ T4225] usb 2-1: USB disconnect, device number 4 [ 121.256413][ T4706] autofs4:pid:4706:autofs_fill_super: called with bogus options [ 121.714088][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 121.720731][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 121.735301][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 121.758165][ T4709] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.790378][ T4709] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.257744][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 122.265613][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 122.272694][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 122.279903][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 122.286962][ T4709] wlan0 speed is unknown, defaulting to 1000 [ 122.891063][ T4713] loop2: detected capacity change from 0 to 40427 [ 122.953424][ T4713] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 122.961348][ T4713] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.990475][ T4713] F2FS-fs (loop2): invalid crc value [ 123.395990][ T4713] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.674667][ T4713] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 123.682206][ T4713] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.938162][ T4730] loop4: detected capacity change from 0 to 1024 [ 127.459625][ T4225] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.707247][ T4259] hfsplus: b-tree write err: -5, ino 4 [ 129.732844][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 130.229816][ T2339] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.619952][ T2339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.711466][ T2339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.029770][ T4225] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.170015][ T2339] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.319419][ T2339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.110217][ T4225] usb 4-1: can't read configurations, error -71 [ 132.140983][ T2339] usb 5-1: SerialNumber: syz [ 132.560992][ T4778] loop3: detected capacity change from 0 to 40427 [ 132.582305][ T4780] siw: device registration error -23 [ 133.211925][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230030][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.321248][ T4778] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.329308][ T4778] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.340921][ T4778] F2FS-fs (loop3): invalid crc value [ 133.463632][ T4778] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.550288][ T4778] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 133.557564][ T4778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.232821][ T2339] usb 5-1: cannot find UAC_HEADER [ 134.317661][ T2339] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 134.365501][ T2339] usb 5-1: USB disconnect, device number 3 [ 134.642641][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.035578][ T4782] loop1: detected capacity change from 0 to 32768 [ 136.207516][ T4782] XFS (loop1): Mounting V5 Filesystem [ 136.368859][ T4782] XFS (loop1): Ending clean mount [ 136.430362][ T4782] XFS (loop1): Quotacheck needed: Please wait. [ 136.566995][ T4782] XFS (loop1): Quotacheck: Done. [ 136.605065][ T4192] XFS (loop1): Unmounting Filesystem [ 137.019306][ T4815] loop3: detected capacity change from 0 to 40427 [ 137.079421][ T4815] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 137.102812][ T4815] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 137.130633][ T4815] F2FS-fs (loop3): invalid crc value [ 137.176807][ T4815] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 137.504127][ T4838] loop0: detected capacity change from 0 to 40427 [ 137.514638][ T4815] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 137.552430][ T4838] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 137.560893][ T4838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 137.572029][ T4838] F2FS-fs (loop0): invalid crc value [ 137.610016][ T4815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.620279][ T4838] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.709619][ T4838] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.717001][ T4838] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.322123][ T4262] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.729992][ T4262] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.758887][ T4262] usb 1-1: config 0 has no interface number 0 [ 140.920015][ T4262] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 140.980067][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.988662][ T4262] usb 1-1: Product: syz [ 141.043629][ T4262] usb 1-1: Manufacturer: syz [ 141.064621][ T4262] usb 1-1: SerialNumber: syz [ 141.089936][ T4262] usb 1-1: config 0 descriptor?? [ 142.090972][ T4262] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.640753][ T4262] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.677502][ T4875] loop2: detected capacity change from 0 to 512 [ 143.732451][ T4262] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.799553][ T4262] usb 1-1: media controller created [ 143.878373][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.979831][ T4262] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 144.189257][ T4262] usb 1-1: USB disconnect, device number 3 [ 144.269853][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.539766][ T2339] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.401343][ T4226] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 145.422074][ T4226] usb 5-1: config 0 has no interface number 0 [ 145.432900][ T4226] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.455069][ T4226] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.466033][ T4226] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 145.475250][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.493927][ T4226] usb 5-1: config 0 descriptor?? [ 145.540214][ T2339] usb 3-1: Using ep0 maxpacket: 16 [ 145.689848][ T2339] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.721181][ T2339] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.729111][ T2339] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 145.739302][ T2339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.769275][ T2339] usb 3-1: config 0 descriptor?? [ 145.985714][ T4226] elo 0003:04E7:0030.0001: item fetching failed at offset 6/7 [ 146.001077][ T4226] elo 0003:04E7:0030.0001: parse failed [ 146.007948][ T4226] elo: probe of 0003:04E7:0030.0001 failed with error -22 [ 146.185441][ T4226] usb 5-1: USB disconnect, device number 4 [ 146.270540][ T2339] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 146.741024][ T4226] usb 3-1: USB disconnect, device number 3 [ 148.554169][ T4941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.167'. [ 154.754384][ T4972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.177'. [ 157.606230][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 158.311971][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 160.274244][ T4994] loop1: detected capacity change from 0 to 32768 [ 162.923647][ T5026] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 163.683578][ T5038] ubi0: attaching mtd0 [ 163.707001][ T5038] ubi0: scanning is finished [ 163.707269][ T5038] ubi0: empty MTD device detected [ 165.446152][ T5038] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 166.804325][ T5053] wlan0 speed is unknown, defaulting to 1000 [ 166.856347][ T4189] syz-executor (4189) used greatest stack depth: 20592 bytes left [ 168.454150][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.525677][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.534141][ T2339] Bluetooth: hci1: command 0x0409 tx timeout [ 168.569875][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.617043][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.071264][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.537050][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.609744][ T2339] Bluetooth: hci1: command 0x041b tx timeout [ 170.708465][ T5065] loop1: detected capacity change from 0 to 32768 [ 170.748391][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.082351][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.689735][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 172.873069][ T5053] chnl_net:caif_netlink_parms(): no params data found [ 173.039845][ T4229] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 173.319804][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 173.362776][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.409904][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.419217][ T5053] device bridge_slave_0 entered promiscuous mode [ 173.439879][ T4229] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 173.456624][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.459970][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.474510][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.484381][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.549769][ T5053] device bridge_slave_1 entered promiscuous mode [ 173.649897][ T4229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.665246][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.674164][ T4229] usb 5-1: Product: syz [ 173.678762][ T4229] usb 5-1: Manufacturer: syz [ 173.684940][ T4229] usb 5-1: SerialNumber: syz [ 173.913031][ T5053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.975305][ T5053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.160000][ T4229] usb 5-1: 0:2 : does not exist [ 174.236526][ T5106] loop0: detected capacity change from 0 to 32768 [ 174.257021][ T5053] team0: Port device team_slave_0 added [ 174.301346][ T5053] team0: Port device team_slave_1 added [ 174.464301][ T5106] XFS (loop0): Mounting V5 Filesystem [ 174.491776][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.510611][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.619509][ T5106] XFS (loop0): Ending clean mount [ 174.647090][ T5106] XFS (loop0): Quotacheck needed: Please wait. [ 174.696738][ T5053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.769808][ T2339] Bluetooth: hci1: command 0x0419 tx timeout [ 174.839789][ T5106] XFS (loop0): Quotacheck: Done. [ 174.846971][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.865207][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.935717][ T5053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.156856][ T5053] device hsr_slave_0 entered promiscuous mode [ 175.172054][ T5053] device hsr_slave_1 entered promiscuous mode [ 175.195302][ T5053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.214407][ T5053] Cannot create hsr debugfs directory [ 175.430054][ T144] device hsr_slave_0 left promiscuous mode [ 175.437017][ T144] device hsr_slave_1 left promiscuous mode [ 175.448738][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.696358][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.753343][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.820219][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.860833][ T144] device bridge_slave_1 left promiscuous mode [ 175.868707][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.106542][ T144] device bridge_slave_0 left promiscuous mode [ 176.130309][ T4229] usb 5-1: USB disconnect, device number 5 [ 176.590514][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.209542][ T144] device veth1_macvtap left promiscuous mode [ 177.230355][ T144] device veth0_macvtap left promiscuous mode [ 177.255677][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.277440][ T144] device veth1_vlan left promiscuous mode [ 177.299351][ T144] device veth0_vlan left promiscuous mode [ 179.374064][ T144] team0 (unregistering): Port device team_slave_1 removed [ 179.393311][ T4185] XFS (loop0): Unmounting Filesystem [ 179.473693][ T144] team0 (unregistering): Port device team_slave_0 removed [ 179.535600][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.586267][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.047040][ T144] bond0 (unregistering): Released all slaves [ 181.089799][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 181.096015][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 181.303867][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 181.426673][ T5053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.563614][ T5053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.741976][ T5053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.531117][ T5053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.840736][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.913123][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.960425][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.033317][ T5053] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.207854][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.217477][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.329138][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.336748][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.395602][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.488400][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.544342][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.565789][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.573047][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.644115][ T5236] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 183.691355][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.838689][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.011049][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.072920][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.110416][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.163758][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.196243][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.247536][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.290839][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.342060][ T5053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.391880][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.454434][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.485021][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.514361][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.537407][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.601810][ T5053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.240723][ T5292] overlayfs: failed to resolve './file1': -2 [ 188.919775][ T4225] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 189.006145][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.045278][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.099469][ T5053] device veth0_vlan entered promiscuous mode [ 189.113745][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.126188][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.145400][ T5053] device veth1_vlan entered promiscuous mode [ 189.160416][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.169742][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 189.176228][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.184985][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.257879][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.275539][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.290023][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 189.307710][ T4225] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping [ 189.321640][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.350700][ T5053] device veth0_macvtap entered promiscuous mode [ 189.398768][ T5053] device veth1_macvtap entered promiscuous mode [ 189.451496][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.485819][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.527502][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.529899][ T4225] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 189.585304][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.602214][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.623149][ T4225] usb 5-1: Product: syz [ 189.624078][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.669470][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.735611][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.783545][ T4225] usb 5-1: Manufacturer: syz [ 189.786959][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.788861][ T4225] usb 5-1: SerialNumber: syz [ 189.804408][ T4225] usb 5-1: config 0 descriptor?? [ 189.842054][ T4225] radioshark 5-1:0.0: Invalid radioSHARK device [ 189.848495][ T4225] radioshark: probe of 5-1:0.0 failed with error -22 [ 190.007581][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.204362][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.404655][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.613456][ T4225] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 190.621711][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.623222][ T4225] usb 5-1: USB disconnect, device number 6 [ 190.699710][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.738848][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.988403][ T5316] loop1: detected capacity change from 0 to 32768 [ 190.999673][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.034040][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.083771][ T5316] XFS (loop1): Mounting V5 Filesystem [ 191.086003][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.197617][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.221824][ T5316] XFS (loop1): Ending clean mount [ 191.271374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.303610][ T5316] XFS (loop1): Quotacheck needed: Please wait. [ 191.346097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.379004][ T5316] XFS (loop1): Quotacheck: Done. [ 191.538505][ T5053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.655175][ T5357] overlayfs: failed to resolve './file1': -2 [ 191.667971][ T5053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.008463][ T5053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.027794][ T5053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.444303][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.560608][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.785917][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.829126][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.877018][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.939187][ T4192] XFS (loop1): Unmounting Filesystem [ 192.955840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.383199][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392486][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.890570][ T5385] netlink: 80 bytes leftover after parsing attributes in process `syz.0.265'. [ 196.027772][ T5399] Zero length message leads to an empty skb [ 199.183592][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 199.194863][ T5415] loop0: detected capacity change from 0 to 32768 [ 199.460948][ T5415] XFS (loop0): Mounting V5 Filesystem [ 200.204544][ T5415] XFS (loop0): Ending clean mount [ 200.501247][ T5415] XFS (loop0): Quotacheck needed: Please wait. [ 200.502763][ T5459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.583629][ T5415] XFS (loop0): Quotacheck: Done. [ 202.168340][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 202.416964][ T4185] XFS (loop0): Unmounting Filesystem [ 207.105336][ T5538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'. [ 209.154479][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 210.936946][ T5567] team0: Port device team_slave_0 removed [ 213.830663][ T4188] Bluetooth: hci1: link tx timeout [ 213.836186][ T4188] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.847226][ T4188] Bluetooth: hci1: link tx timeout [ 213.971941][ T4188] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.996884][ T4188] Bluetooth: hci1: link tx timeout [ 214.049408][ T4188] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.160478][ T4188] Bluetooth: hci1: link tx timeout [ 214.167739][ T4188] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.889865][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 217.007673][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 219.195016][ T5627] loop4: detected capacity change from 0 to 32768 [ 219.665390][ T5629] siw: device registration error -23 [ 219.935747][ T5627] XFS (loop4): Mounting V5 Filesystem [ 220.637796][ T5627] XFS (loop4): Ending clean mount [ 220.645823][ T5627] XFS (loop4): Quotacheck needed: Please wait. [ 220.823938][ T5627] XFS (loop4): Quotacheck: Done. [ 221.698812][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 221.698832][ T26] audit: type=1800 audit(1772478325.391:528): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.315" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 221.940388][ T4196] XFS (loop4): Unmounting Filesystem [ 222.560975][ T5676] ubi0: attaching mtd0 [ 222.581618][ T5676] ubi0: scanning is finished [ 223.405584][ T5676] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 223.597253][ T5650] loop5: detected capacity change from 0 to 40427 [ 227.118892][ T5705] loop4: detected capacity change from 0 to 1024 [ 228.493323][ T5725] netlink: 'syz.0.333': attribute type 5 has an invalid length. [ 229.100919][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 229.358483][ T1472] hfsplus: b-tree write err: -5, ino 4 [ 229.921994][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.330965][ T5748] ubi0: attaching mtd0 [ 230.336964][ T5748] ubi0: scanning is finished [ 230.722766][ T5748] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 230.898355][ T1108] usb 1-1: device descriptor read/64, error -71 [ 230.964405][ T5753] process 'syz.5.338' launched '/dev/fd/9/./file1' with NULL argv: empty string added [ 231.189742][ T1108] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 231.930953][ T1108] usb 1-1: device descriptor read/64, error -71 [ 232.089926][ T1108] usb usb1-port1: attempt power cycle [ 234.208781][ T5776] loop1: detected capacity change from 0 to 1024 [ 234.424872][ T5783] siw: device registration error -23 [ 234.588304][ T5787] autofs4:pid:5787:autofs_fill_super: called with bogus options [ 234.836776][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 235.014410][ C1] hrtimer: interrupt took 49502 ns [ 235.452456][ T4259] hfsplus: b-tree write err: -5, ino 4 [ 236.831668][ T5798] loop1: detected capacity change from 0 to 32768 [ 236.866287][ T5807] ubi0: attaching mtd0 [ 236.871818][ T5807] ubi0: scanning is finished [ 236.919017][ T5807] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 236.926922][ T5807] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 236.934979][ T5807] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 236.942157][ T5807] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 236.949796][ T5807] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 236.956687][ T5807] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 236.965010][ T5807] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 272369046 [ 236.975172][ T5807] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 236.986953][ T5808] ubi0: background thread "ubi_bgt0d" started, PID 5808 [ 237.117189][ T5798] XFS (loop1): Mounting V5 Filesystem [ 237.267548][ T5798] XFS (loop1): Ending clean mount [ 237.275938][ T5798] XFS (loop1): Quotacheck needed: Please wait. [ 237.371743][ T5798] XFS (loop1): Quotacheck: Done. [ 238.204161][ T4192] XFS (loop1): Unmounting Filesystem [ 239.068164][ T5851] siw: device registration error -23 [ 239.157065][ T5828] loop0: detected capacity change from 0 to 40427 [ 239.735406][ T5828] F2FS-fs (loop0): invalid crc value [ 239.882657][ T5828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 240.924165][ T4226] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.931948][ T26] audit: type=1804 audit(1772478344.241:529): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.359" name="/newroot/69/file1" dev="fuse" ino=1 res=1 errno=0 [ 241.083988][ T26] audit: type=1804 audit(1772478344.251:530): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.359" name="/newroot/69/file1" dev="fuse" ino=1 res=1 errno=0 [ 241.239755][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 241.479808][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.491346][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.291869][ T4226] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 242.301932][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.327618][ T4226] usb 5-1: config 0 descriptor?? [ 242.670274][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 243.631846][ T4226] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 244.051734][ T7] usb 5-1: USB disconnect, device number 7 [ 245.068817][ T5913] fido_id[5913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 245.594034][ T5925] siw: device registration error -23 [ 250.315759][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.601815][ T5965] loop5: detected capacity change from 0 to 32768 [ 251.789805][ T4188] Bluetooth: hci1: link tx timeout [ 251.795320][ T4188] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.879381][ T26] audit: type=1326 audit(1772478356.001:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.091511][ T26] audit: type=1326 audit(1772478356.001:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.181220][ T26] audit: type=1326 audit(1772478356.001:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.259207][ T26] audit: type=1326 audit(1772478356.001:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.281566][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.352430][ T5965] XFS (loop5): Mounting V5 Filesystem [ 252.370325][ T26] audit: type=1326 audit(1772478356.031:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.396827][ T26] audit: type=1326 audit(1772478356.031:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.420105][ T26] audit: type=1326 audit(1772478356.031:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.442935][ T26] audit: type=1326 audit(1772478356.031:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 252.548264][ T26] audit: type=1326 audit(1772478356.031:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 253.183222][ T26] audit: type=1326 audit(1772478356.031:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd0d4799 code=0x7ffc0000 [ 253.374447][ T5965] XFS (loop5): Ending clean mount [ 253.384620][ T5965] XFS (loop5): Quotacheck needed: Please wait. [ 255.304777][ T5965] XFS (loop5): Quotacheck: Done. [ 255.822983][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.833785][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853882][ T5053] XFS (loop5): Unmounting Filesystem [ 255.989727][ T6011] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.069780][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 256.450456][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.113790][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.325392][ T1108] usb 5-1: string descriptor 0 read error: -71 [ 257.349945][ T1108] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.359037][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.579898][ T1108] usb 5-1: can't set config #1, error -71 [ 257.590071][ T1108] usb 5-1: USB disconnect, device number 8 [ 257.636427][ T1324] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 257.668388][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 259.139517][ T6018] loop0: detected capacity change from 0 to 40427 [ 259.213058][ T6018] F2FS-fs (loop0): invalid crc value [ 260.111951][ T6018] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 260.199968][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.401233][ T1324] usb 2-1: unable to read config index 0 descriptor/all [ 260.408523][ T1324] usb 2-1: can't read configurations, error -71 [ 260.940526][ T6065] siw: device registration error -23 [ 265.159818][ T4263] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.589841][ T4263] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.617865][ T4263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.810048][ T4263] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.007748][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.047066][ T4263] usb 6-1: SerialNumber: syz [ 266.869756][ T4263] usb 6-1: can't set config #1, error -71 [ 266.899935][ T4263] usb 6-1: USB disconnect, device number 2 [ 269.433097][ T6100] loop5: detected capacity change from 0 to 40427 [ 269.516430][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 270.386718][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 270.386734][ T26] audit: type=1804 audit(1772478374.511:607): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.414" name="/newroot/89/file1" dev="fuse" ino=1 res=1 errno=0 [ 270.472137][ T6120] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.687303][ T26] audit: type=1804 audit(1772478374.541:608): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.414" name="/newroot/89/file1" dev="fuse" ino=1 res=1 errno=0 [ 270.708115][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.664802][ T4728] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.219968][ T4728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.245935][ T4728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.349955][ T4728] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.365633][ T4728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.384209][ T4728] usb 6-1: SerialNumber: syz [ 274.673564][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 274.699430][ T6160] netlink: 'syz.3.426': attribute type 7 has an invalid length. [ 274.735687][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 274.795008][ T6160] device ip6gretap0 entered promiscuous mode [ 274.835001][ T6160] device syz_tun entered promiscuous mode [ 274.874288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 276.334770][ T6171] loop4: detected capacity change from 0 to 1024 [ 276.411734][ T4728] usb 6-1: cannot find UAC_HEADER [ 276.418181][ T9] hfsplus: b-tree write err: -5, ino 4 [ 276.468816][ T4728] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 276.669908][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.430'. [ 276.712376][ T4728] usb 6-1: USB disconnect, device number 3 [ 277.809824][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.392828][ T6204] autofs4:pid:6204:autofs_fill_super: called with bogus options [ 286.318980][ T6220] loop4: detected capacity change from 0 to 1024 [ 286.339695][ T4263] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 286.718302][ T26] audit: type=1326 audit(1772478390.831:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 286.720503][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 287.827033][ T26] audit: type=1326 audit(1772478390.831:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 287.969178][ T26] audit: type=1326 audit(1772478390.831:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 287.995446][ T26] audit: type=1326 audit(1772478390.831:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.024952][ T26] audit: type=1326 audit(1772478390.831:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.047819][ T26] audit: type=1326 audit(1772478390.831:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.070624][ T26] audit: type=1326 audit(1772478390.831:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.093710][ T26] audit: type=1326 audit(1772478390.831:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.120155][ T26] audit: type=1326 audit(1772478390.831:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.232999][ T26] audit: type=1326 audit(1772478390.831:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c7b7e799 code=0x7ffc0000 [ 288.331841][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 290.802888][ T6266] loop5: detected capacity change from 0 to 40427 [ 291.423095][ T6266] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 291.431173][ T6266] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 291.466512][ T6266] F2FS-fs (loop5): invalid crc value [ 291.800561][ T6266] F2FS-fs (loop5): Found nat_bits in checkpoint [ 291.969967][ T4728] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.119138][ T6266] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 293.126380][ T6266] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 293.389064][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 293.389079][ T26] audit: type=1800 audit(1772478397.511:665): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.453" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=10 res=0 errno=0 [ 293.464120][ T6282] overlayfs: failed to resolve './bus': -2 [ 293.902840][ T6286] loop3: detected capacity change from 0 to 1024 [ 294.019915][ T4728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.044967][ T4728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.084826][ T4236] hfsplus: b-tree write err: -5, ino 4 [ 294.249839][ T4728] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.259341][ T4728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.142663][ T4728] usb 5-1: SerialNumber: syz [ 296.474167][ T4728] usb 5-1: cannot find UAC_HEADER [ 296.783786][ T4728] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 297.519985][ T4728] usb 5-1: USB disconnect, device number 9 [ 297.780324][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.947431][ T6332] loop4: detected capacity change from 0 to 1024 [ 299.417904][ T6342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.459864][ T4228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 302.850018][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.991008][ T4228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.707861][ T1472] hfsplus: b-tree write err: -5, ino 4 [ 303.940990][ T4228] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.106888][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.289027][ T4228] usb 6-1: SerialNumber: syz [ 305.247017][ T6374] capability: warning: `syz.0.481' uses 32-bit capabilities (legacy support in use) [ 306.242644][ T4228] usb 6-1: cannot find UAC_HEADER [ 306.264700][ T6371] can: request_module (can-proto-0) failed. [ 306.305845][ T4228] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 306.324721][ T6379] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 306.345516][ T4228] usb 6-1: USB disconnect, device number 4 [ 306.624075][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.863794][ T6385] siw: device registration error -23 [ 310.377583][ T6433] loop4: detected capacity change from 0 to 1024 [ 312.872940][ T6477] ubi: mtd0 is already attached to ubi0 [ 314.099498][ T6491] xt_hashlimit: max too large, truncated to 1048576 [ 314.107252][ T6491] No such timeout policy "syz1" [ 314.117671][ T6491] binder: 6485:6491 unknown command 1074553619 [ 314.123909][ T6491] binder: 6485:6491 ioctl c0306201 2000000001c0 returned -22 [ 315.574508][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 316.830446][ T6518] ubi: mtd0 is already attached to ubi0 [ 317.275666][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.296477][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.530918][ T6548] loop3: detected capacity change from 0 to 1024 [ 320.943818][ T6574] ubi: mtd0 is already attached to ubi0 [ 323.672071][ T4318] hfsplus: b-tree write err: -5, ino 4 [ 324.134642][ T6600] loop0: detected capacity change from 0 to 32768 [ 324.919266][ T6600] XFS (loop0): Mounting V5 Filesystem [ 325.109827][ T6600] XFS (loop0): Ending clean mount [ 325.120265][ T6600] XFS (loop0): Quotacheck needed: Please wait. [ 325.188162][ T6600] XFS (loop0): Quotacheck: Done. [ 326.262129][ T4185] XFS (loop0): Unmounting Filesystem [ 329.821628][ T6639] loop3: detected capacity change from 0 to 1024 [ 331.032968][ T6649] loop1: detected capacity change from 0 to 32768 [ 331.385610][ T6649] XFS (loop1): Mounting V5 Filesystem [ 331.850925][ T6649] XFS (loop1): Ending clean mount [ 331.965383][ T6649] XFS (loop1): Quotacheck needed: Please wait. [ 332.181527][ T6649] XFS (loop1): Quotacheck: Done. [ 333.888735][ T26] audit: type=1804 audit(1772478438.011:666): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.566" name="/newroot/118/file1" dev="fuse" ino=1 res=1 errno=0 [ 334.183739][ T26] audit: type=1800 audit(1772478438.311:667): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.562" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 334.234333][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 334.563263][ T4192] XFS (loop1): Unmounting Filesystem [ 335.084378][ T6684] wlan0 speed is unknown, defaulting to 1000 [ 335.908834][ T4229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 337.231998][ T4383] Bluetooth: hci5: command 0x0409 tx timeout [ 337.270629][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 337.330130][ T4229] usb 1-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 337.346202][ T4229] usb 1-1: config 1 interface 0 has no altsetting 0 [ 337.570001][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 337.719152][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.858048][ T4229] usb 1-1: Product: syz [ 337.936794][ T4229] usb 1-1: Manufacturer: syz [ 338.040090][ T4229] usb 1-1: SerialNumber: syz [ 338.331434][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.472429][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.962661][ T6684] device bridge_slave_0 entered promiscuous mode [ 338.971505][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.989473][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.108545][ T6718] loop1: detected capacity change from 0 to 1024 [ 339.117514][ T6684] device bridge_slave_1 entered promiscuous mode [ 339.119769][ T4229] usb 1-1: can't set config #1, error -71 [ 339.139271][ T4229] usb 1-1: USB disconnect, device number 8 [ 339.265518][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 339.286917][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.328218][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.155762][ T6684] team0: Port device team_slave_0 added [ 340.179106][ T6684] team0: Port device team_slave_1 added [ 340.267417][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.322268][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.589632][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.637524][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.665077][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.755327][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.154195][ T4383] Bluetooth: hci5: command 0x040f tx timeout [ 342.180205][ T6684] device hsr_slave_0 entered promiscuous mode [ 342.227742][ T6684] device hsr_slave_1 entered promiscuous mode [ 342.244922][ T6684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.256912][ T6684] Cannot create hsr debugfs directory [ 342.440441][ T6684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.458193][ T6684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.477051][ T6684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.487892][ T6684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.519640][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 342.616527][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.646093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.662788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.677215][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.693723][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.702999][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.720168][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.727413][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.759657][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 342.765353][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.779322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.795433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.815819][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.823190][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.849358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.883044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.901029][ T144] hfsplus: b-tree write err: -5, ino 4 [ 342.911953][ T4229] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 342.929496][ T4229] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.948986][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.955981][ T4229] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 343.003304][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.035008][ T6684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.045980][ T6684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.120757][ T4229] usb 1-1: config 0 descriptor?? [ 343.129398][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.350920][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.361453][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.208838][ T4229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 344.567878][ T5374] Bluetooth: hci5: command 0x0419 tx timeout [ 344.586525][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.606093][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.739876][ T26] audit: type=1804 audit(1772478448.821:668): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.589" name="/newroot/63/file1" dev="fuse" ino=1 res=1 errno=0 [ 344.789046][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.806110][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.510500][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.520920][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.528995][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.587778][ T1324] usb 1-1: USB disconnect, device number 9 [ 345.666522][ T6781] xt_hashlimit: max too large, truncated to 1048576 [ 345.748558][ T6781] No such timeout policy "syz1" [ 346.049985][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 346.460004][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.104613][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.420348][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.534433][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.667762][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.680020][ T21] usb 4-1: SerialNumber: syz [ 347.715171][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.142523][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.295611][ T6790] loop0: detected capacity change from 0 to 1024 [ 349.602483][ T21] usb 4-1: cannot find UAC_HEADER [ 351.079268][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.138872][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.206100][ T6684] device veth0_vlan entered promiscuous mode [ 351.251268][ T21] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 351.265727][ T21] usb 4-1: USB disconnect, device number 7 [ 351.288174][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.306596][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.344279][ T6684] device veth1_vlan entered promiscuous mode [ 351.366549][ T6824] autofs4:pid:6824:autofs_fill_super: called with bogus options [ 351.376258][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.405698][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.440764][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.474317][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.489459][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.491810][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.500423][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.543489][ T6684] device veth0_macvtap entered promiscuous mode [ 351.562285][ T6684] device veth1_macvtap entered promiscuous mode [ 351.618936][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.637319][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.649526][ T6829] autofs4:pid:6829:autofs_fill_super: called with bogus options [ 351.668849][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.688447][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.698745][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.715628][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.725868][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.757199][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.775395][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.787106][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.803308][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.817799][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.828247][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.844693][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.862444][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.877870][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.895195][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.916561][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.929840][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.946587][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.957456][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.975942][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.998009][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.016978][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.120513][ T6684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.139768][ T6684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.148613][ T6684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.184091][ T6684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.464994][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.354549][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.400273][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 353.489054][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.514462][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.530912][ T26] audit: type=1326 audit(1772478457.661:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.533233][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.618626][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.728090][ T26] audit: type=1326 audit(1772478457.701:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.752086][ T26] audit: type=1326 audit(1772478457.701:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.797522][ T26] audit: type=1326 audit(1772478457.701:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.830394][ T26] audit: type=1326 audit(1772478457.701:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.854137][ T26] audit: type=1326 audit(1772478457.701:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 353.878091][ T26] audit: type=1326 audit(1772478457.701:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.5.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f95c4309799 code=0x7ffc0000 [ 354.599731][ T2339] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 354.660027][ T6838] loop1: detected capacity change from 0 to 40427 [ 354.685649][ T6838] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 354.696207][ T6838] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 354.716866][ T6838] F2FS-fs (loop1): invalid crc value [ 354.872198][ T6838] F2FS-fs (loop1): Found nat_bits in checkpoint [ 355.980023][ T2339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.005053][ T2339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.109773][ T2339] usb 7-1: string descriptor 0 read error: -71 [ 357.717232][ T6901] binder: 6897:6901 ioctl 4018620d 0 returned -22 [ 358.735993][ T2339] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.746127][ T2339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 358.809781][ T2339] usb 7-1: can't set config #1, error -71 [ 358.833286][ T2339] usb 7-1: USB disconnect, device number 2 [ 360.507884][ T6921] xt_hashlimit: max too large, truncated to 1048576 [ 360.514985][ T6921] No such timeout policy "syz1" [ 361.026092][ T6929] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 363.149595][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 363.925634][ T6963] ================================================================== [ 363.934156][ T6963] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 363.941561][ T6963] Write of size 4 at addr ffff88802a0d27a0 by task syz.3.641/6963 [ 363.949381][ T6963] [ 363.951810][ T6963] CPU: 0 PID: 6963 Comm: syz.3.641 Not tainted syzkaller #0 [ 363.959186][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.969282][ T6963] Call Trace: [ 363.972566][ T6963] [ 363.975496][ T6963] dump_stack_lvl+0x188/0x250 [ 363.980192][ T6963] ? show_regs_print_info+0x20/0x20 [ 363.985474][ T6963] ? _printk+0xda/0x130 [ 363.989770][ T6963] ? load_image+0x400/0x400 [ 363.994285][ T6963] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 363.999745][ T6963] print_address_description+0x60/0x2d0 [ 364.005378][ T6963] ? try_module_get+0x4f/0xf0 [ 364.010154][ T6963] kasan_report+0xdf/0x130 [ 364.014809][ T6963] ? try_module_get+0x4f/0xf0 [ 364.019497][ T6963] kasan_check_range+0x235/0x290 [ 364.024480][ T6963] try_module_get+0x4f/0xf0 [ 364.029133][ T6963] dvb_device_open+0xf1/0x370 [ 364.033832][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 364.039138][ T6963] chrdev_open+0x5c5/0x6a0 [ 364.043686][ T6963] ? cd_forget+0x160/0x160 [ 364.048166][ T6963] ? fsnotify_perm+0x3a7/0x560 [ 364.053112][ T6963] ? cd_forget+0x160/0x160 [ 364.057672][ T6963] do_dentry_open+0x7ff/0xf80 [ 364.062679][ T6963] path_openat+0x26f5/0x2fa0 [ 364.067407][ T6963] ? verify_lock_unused+0x140/0x140 [ 364.072725][ T6963] ? slab_post_alloc_hook+0x4c/0x380 [ 364.078034][ T6963] ? do_filp_open+0x410/0x410 [ 364.082751][ T6963] do_filp_open+0x1e2/0x410 [ 364.087481][ T6963] ? vfs_tmpfile+0x300/0x300 [ 364.092231][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 364.097091][ T6963] ? alloc_fd+0x598/0x630 [ 364.101424][ T6963] do_sys_openat2+0x150/0x4b0 [ 364.106198][ T6963] ? __lock_acquire+0x7d10/0x7d10 [ 364.111439][ T6963] ? do_sys_open+0xe0/0xe0 [ 364.115942][ T6963] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.122354][ T6963] ? lock_chain_count+0x20/0x20 [ 364.127201][ T6963] ? vtime_user_exit+0x2c8/0x3e0 [ 364.132174][ T6963] __x64_sys_openat+0x135/0x160 [ 364.137249][ T6963] do_syscall_64+0x4c/0xa0 [ 364.141704][ T6963] ? clear_bhb_loop+0x30/0x80 [ 364.146421][ T6963] ? clear_bhb_loop+0x30/0x80 [ 364.151137][ T6963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.157144][ T6963] RIP: 0033:0x7fcdcd094fce [ 364.161678][ T6963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.181516][ T6963] RSP: 002b:00007fcdcb30cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.190007][ T6963] RAX: ffffffffffffffda RBX: 00007fcdcb30d6c0 RCX: 00007fcdcd094fce [ 364.198298][ T6963] RDX: 0000000000000e82 RSI: 00007fcdcb30cc00 RDI: ffffffffffffff9c [ 364.206314][ T6963] RBP: 00007fcdcb30cc00 R08: 0000000000000000 R09: 0000000000000000 [ 364.214521][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 364.222622][ T6963] R13: 00007fcdcd34e128 R14: 00007fcdcd34e090 R15: 00007ffd11537198 [ 364.230832][ T6963] [ 364.233884][ T6963] [ 364.236327][ T6963] Allocated by task 1: [ 364.240416][ T6963] __kasan_kmalloc+0xb5/0xf0 [ 364.245129][ T6963] dvb_register_device+0x311/0x2170 [ 364.250571][ T6963] dvb_dmxdev_init+0x2c5/0x420 [ 364.255363][ T6963] vidtv_bridge_probe+0xb56/0xf70 [ 364.260427][ T6963] platform_probe+0x137/0x1c0 [ 364.265217][ T6963] really_probe+0x284/0xc80 [ 364.269772][ T6963] __driver_probe_device+0x18c/0x330 [ 364.275083][ T6963] driver_probe_device+0x4f/0x420 [ 364.280155][ T6963] __driver_attach+0x46b/0x670 [ 364.285304][ T6963] bus_for_each_dev+0x182/0x1f0 [ 364.290440][ T6963] bus_add_driver+0x30a/0x5a0 [ 364.295149][ T6963] driver_register+0x32d/0x430 [ 364.299936][ T6963] vidtv_bridge_init+0x39/0x70 [ 364.304723][ T6963] do_one_initcall+0x272/0x730 [ 364.309550][ T6963] do_initcall_level+0x137/0x1f0 [ 364.314612][ T6963] do_initcalls+0x4b/0x90 [ 364.319051][ T6963] kernel_init_freeable+0x3e9/0x570 [ 364.324379][ T6963] kernel_init+0x19/0x1b0 [ 364.328750][ T6963] ret_from_fork+0x1f/0x30 [ 364.333278][ T6963] [ 364.335630][ T6963] The buggy address belongs to the object at ffff88802a0d2600 [ 364.335630][ T6963] which belongs to the cache kmalloc-256 of size 256 [ 364.349904][ T6963] The buggy address is located 160 bytes to the right of [ 364.349904][ T6963] 256-byte region [ffff88802a0d2600, ffff88802a0d2700) [ 364.363829][ T6963] The buggy address belongs to the page: [ 364.369489][ T6963] page:ffffea0000a83480 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a0d2000 pfn:0x2a0d2 [ 364.381074][ T6963] head:ffffea0000a83480 order:1 compound_mapcount:0 [ 364.387705][ T6963] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 364.395819][ T6963] raw: 00fff00000010200 ffffea00008ea888 ffffea0000ad8b88 ffff888016c41b40 [ 364.404477][ T6963] raw: ffff88802a0d2000 000000000010000e 00000001ffffffff 0000000000000000 [ 364.413220][ T6963] page dumped because: kasan: bad access detected [ 364.419742][ T6963] page_owner tracks the page as allocated [ 364.425475][ T6963] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2837, ts 13623096491, free_ts 0 [ 364.444110][ T6963] get_page_from_freelist+0x1bbd/0x1ca0 [ 364.449708][ T6963] __alloc_pages+0x1ee/0x480 [ 364.454691][ T6963] new_slab+0xc0/0x4b0 [ 364.459217][ T6963] ___slab_alloc+0x80a/0xdd0 [ 364.463927][ T6963] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 364.469595][ T6963] kthread+0x10b/0x520 [ 364.473877][ T6963] ret_from_fork+0x1f/0x30 [ 364.478418][ T6963] page_owner free stack trace missing [ 364.483815][ T6963] [ 364.486156][ T6963] Memory state around the buggy address: [ 364.491889][ T6963] ffff88802a0d2680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 364.500142][ T6963] ffff88802a0d2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.508337][ T6963] >ffff88802a0d2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.516451][ T6963] ^ [ 364.522120][ T6963] ffff88802a0d2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.530246][ T6963] ffff88802a0d2880: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 364.538585][ T6963] ================================================================== [ 364.546672][ T6963] Disabling lock debugging due to kernel taint [ 364.557188][ T6963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 364.564614][ T6963] CPU: 0 PID: 6963 Comm: syz.3.641 Tainted: G B syzkaller #0 [ 364.573336][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.583565][ T6963] Call Trace: [ 364.586878][ T6963] [ 364.589940][ T6963] dump_stack_lvl+0x188/0x250 [ 364.594656][ T6963] ? show_regs_print_info+0x20/0x20 [ 364.599895][ T6963] ? load_image+0x400/0x400 [ 364.604440][ T6963] panic+0x2e5/0x810 [ 364.608405][ T6963] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.614589][ T6963] ? bpf_jit_dump+0xd0/0xd0 [ 364.619102][ T6963] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 364.625071][ T6963] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 364.631276][ T6963] ? _raw_spin_unlock+0x40/0x40 [ 364.636221][ T6963] ? try_module_get+0x4f/0xf0 [ 364.640908][ T6963] check_panic_on_warn+0x80/0xa0 [ 364.646104][ T6963] ? try_module_get+0x4f/0xf0 [ 364.650950][ T6963] end_report+0x6d/0xf0 [ 364.655107][ T6963] kasan_report+0x102/0x130 [ 364.659722][ T6963] ? try_module_get+0x4f/0xf0 [ 364.664391][ T6963] kasan_check_range+0x235/0x290 [ 364.669481][ T6963] try_module_get+0x4f/0xf0 [ 364.674000][ T6963] dvb_device_open+0xf1/0x370 [ 364.678754][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 364.684121][ T6963] chrdev_open+0x5c5/0x6a0 [ 364.688540][ T6963] ? cd_forget+0x160/0x160 [ 364.693041][ T6963] ? fsnotify_perm+0x3a7/0x560 [ 364.697811][ T6963] ? cd_forget+0x160/0x160 [ 364.702315][ T6963] do_dentry_open+0x7ff/0xf80 [ 364.707020][ T6963] path_openat+0x26f5/0x2fa0 [ 364.711740][ T6963] ? verify_lock_unused+0x140/0x140 [ 364.717082][ T6963] ? slab_post_alloc_hook+0x4c/0x380 [ 364.722353][ T6963] ? do_filp_open+0x410/0x410 [ 364.727184][ T6963] do_filp_open+0x1e2/0x410 [ 364.731765][ T6963] ? vfs_tmpfile+0x300/0x300 [ 364.736434][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 364.741463][ T6963] ? alloc_fd+0x598/0x630 [ 364.745885][ T6963] do_sys_openat2+0x150/0x4b0 [ 364.750641][ T6963] ? __lock_acquire+0x7d10/0x7d10 [ 364.755761][ T6963] ? do_sys_open+0xe0/0xe0 [ 364.760267][ T6963] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.766238][ T6963] ? lock_chain_count+0x20/0x20 [ 364.771168][ T6963] ? vtime_user_exit+0x2c8/0x3e0 [ 364.776097][ T6963] __x64_sys_openat+0x135/0x160 [ 364.780935][ T6963] do_syscall_64+0x4c/0xa0 [ 364.785345][ T6963] ? clear_bhb_loop+0x30/0x80 [ 364.790012][ T6963] ? clear_bhb_loop+0x30/0x80 [ 364.794860][ T6963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.800739][ T6963] RIP: 0033:0x7fcdcd094fce [ 364.805166][ T6963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.824904][ T6963] RSP: 002b:00007fcdcb30cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.833419][ T6963] RAX: ffffffffffffffda RBX: 00007fcdcb30d6c0 RCX: 00007fcdcd094fce [ 364.841585][ T6963] RDX: 0000000000000e82 RSI: 00007fcdcb30cc00 RDI: ffffffffffffff9c [ 364.849565][ T6963] RBP: 00007fcdcb30cc00 R08: 0000000000000000 R09: 0000000000000000 [ 364.857668][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 364.866062][ T6963] R13: 00007fcdcd34e128 R14: 00007fcdcd34e090 R15: 00007ffd11537198 [ 364.874028][ T6963] [ 364.877585][ T6963] Kernel Offset: disabled [ 364.881922][ T6963] Rebooting in 86400 seconds..