last executing test programs: 16m43.833214343s ago: executing program 0 (id=1007): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 16m42.540397301s ago: executing program 0 (id=1012): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r2, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000040)='pim6reg\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=r7, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16m41.360077687s ago: executing program 0 (id=1016): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="f41c0cedfafd", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x80047453, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth1_to_team\x00'}}) r5 = socket$netlink(0x10, 0x3, 0x0) open$dir(0x0, 0xc400, 0x14) open$dir(&(0x7f0000000140)='./file0\x00', 0x80002, 0x16) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x8000, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x800}, &(0x7f0000000440)=0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x44}}, 0x20000000) 16m39.715379929s ago: executing program 0 (id=1022): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x2a000400) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 16m36.595393881s ago: executing program 0 (id=1027): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="f41c0cedfafd", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x80047453, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth1_to_team\x00'}}) r5 = socket$netlink(0x10, 0x3, 0x0) open$dir(0x0, 0xc400, 0x14) open$dir(&(0x7f0000000140)='./file0\x00', 0x80002, 0x16) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @sliced={0x800, [0x5, 0x2, 0x531, 0x0, 0xa, 0x8e, 0x7f, 0x80, 0x4, 0xbff6, 0x2, 0x9, 0x101, 0x5, 0x4, 0x8c3b, 0x2, 0x2, 0x2, 0x4, 0x7ff, 0x401, 0x0, 0x9, 0x0, 0x9, 0x3, 0x7, 0x8, 0x2, 0x4, 0x3ff, 0x8, 0x2, 0x8, 0x0, 0xfff9, 0x3, 0x6, 0x8001, 0x4, 0x0, 0x40, 0x0, 0x4, 0x0, 0x401, 0x9]}}, 0xffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x8000, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, &(0x7f0000000440)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x44}}, 0x20000000) 16m34.894190475s ago: executing program 0 (id=1033): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r0, 0x0, 0x20000023893) 16m19.755584445s ago: executing program 32 (id=1033): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r0, 0x0, 0x20000023893) 19.045650345s ago: executing program 5 (id=3006): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1a, 0x2, 0x2, "b43d70cde5dbbbe40f00f4000011deca00", 0x33524742}) 18.958077546s ago: executing program 5 (id=3007): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000fdff"], 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.127086117s ago: executing program 5 (id=3016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) 14.937508542s ago: executing program 5 (id=3028): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 14.738043784s ago: executing program 5 (id=3030): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f5, 0x68d1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 14.153931392s ago: executing program 5 (id=3034): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, 0x0) r6 = getpid() openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4.764849403s ago: executing program 4 (id=3083): r0 = userfaultfd(0x80001) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20a81) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000280)={0x8001, 0x9, 0x8001, 0xcd, 0x10000, 0xb769, 0x4, 0x1, 0x85fb}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.623982175s ago: executing program 2 (id=3084): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x72) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) fallocate(r2, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0xa8}}, 0xcf2af76fee034a43) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r10, 0xffffffffffffffff, 0x0) 4.387324348s ago: executing program 1 (id=3086): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x26, 0x1, 0x0, "0085838ee05acd3f108e520cf8212bbd092f26e9ceea00000d00", 0x20493859}) 4.209061331s ago: executing program 1 (id=3087): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @loopback}}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'erspan0\x00', 0x0}) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getae={0x40, 0x1f, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xa, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x6974, 0x34ff}}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f00000000c0)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 2.676927702s ago: executing program 3 (id=3092): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 2.505345795s ago: executing program 3 (id=3094): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 2.493901855s ago: executing program 4 (id=3095): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x8000203d}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 2.279204898s ago: executing program 3 (id=3096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) 2.278541748s ago: executing program 4 (id=3097): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4, 0x122}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="bfee05ab5ac3", @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ec820e", 0x10, 0x21, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0xf, 0x0, 0x0, 0x5, 0x7, "03ae81", 0x85, "b925fd"}}}}}}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.784080635s ago: executing program 2 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.783938705s ago: executing program 4 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) 1.618478927s ago: executing program 1 (id=3100): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0x7, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "48f21d"}]}}}]}, 0x54}}, 0x840) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.553543668s ago: executing program 4 (id=3101): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {0x8, 0xfff1}, {0x7, 0xf}}}, 0x24}}, 0x24044094) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x80000000, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0xa0000009, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) r7 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x40000004, 0x200, 0xe, 0x0, 0x0, 0x1}) r8 = socket$l2tp(0x2, 0x2, 0x73) close(r8) 1.287822882s ago: executing program 4 (id=3102): add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x500, 0x2, 0x2, 0x0, 0x1}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x20000003}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffca) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)}], 0x1) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r6, 0x409, 0x7) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000240)=0x9, 0x4) sendto(r1, 0x0, 0x0, 0x8000, &(0x7f00000001c0)=@hci={0x1f, 0xffffffffffffffff}, 0x80) r8 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 746.552969ms ago: executing program 2 (id=3103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 745.518269ms ago: executing program 1 (id=3113): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001340)="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", 0x240}], 0x1}}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc0000000}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000015c0)="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", 0x9e9}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) 452.693153ms ago: executing program 1 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x5d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 338.386795ms ago: executing program 3 (id=3105): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) 337.610315ms ago: executing program 2 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c100}, 0x20000054) 208.085177ms ago: executing program 2 (id=3107): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x8, 0x8, 0x2}) 204.094707ms ago: executing program 3 (id=3108): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) 107.543398ms ago: executing program 1 (id=3109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x7, 0x7f, 0x9, 0x1000000000400001, 0xfffffffffffffffd, 0x1002], 0x1, 0x3e0602}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0xa, 0x0, 0x3, 0x0, 0x7, 0x6, 0x80, 0x6, 0x40, 0x3, 0x5, 0xa, 0x0, 0x5, 0x1, 0x5, 0xb, 0x5, 0xa0, '\x00', 0x7f, 0x8000000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 107.300888ms ago: executing program 2 (id=3110): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x500, 0x2, 0x2, 0x0, 0x1}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x20000003}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffca) syz_io_uring_setup(0x2185, &(0x7f0000000480)={0x0, 0x0, 0x700, 0x2, 0x270}, 0x0, &(0x7f0000000280)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x3}}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 3 (id=3111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ry to recover 1th superblock, ret: 0 [ 1332.689572][T15288] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1332.696154][T15304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1332.875512][T10194] attempt to access beyond end of device [ 1332.875512][T10194] loop1: rw=2049, want=40968, limit=40427 [ 1333.377537][ T4180] attempt to access beyond end of device [ 1333.377537][ T4180] loop2: rw=2049, want=45120, limit=40427 [ 1333.685147][T15322] loop4: detected capacity change from 0 to 40427 [ 1333.762888][T15322] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1333.770011][T15322] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1333.778387][T15322] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1333.787022][T15322] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1333.870639][T15322] F2FS-fs (loop4): invalid crc value [ 1334.835888][T15322] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1334.906417][T15322] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1334.913517][T15322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1335.546301][ T4170] attempt to access beyond end of device [ 1335.546301][ T4170] loop4: rw=2049, want=45120, limit=40427 [ 1335.754653][T15339] loop5: detected capacity change from 0 to 40427 [ 1335.835578][T15339] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1335.842702][T15339] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1335.854483][T15339] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 1335.863148][T15339] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1335.894584][T15339] F2FS-fs (loop5): invalid crc value [ 1335.942501][T15339] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1336.035551][T15352] 9pnet_virtio: no channels available for device @ [ 1336.050713][T15339] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1336.057969][T15339] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1336.308141][T15355] delete_channel: no stack [ 1336.346161][T15351] loop1: detected capacity change from 0 to 40427 [ 1336.417781][T15351] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1336.425654][T15351] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1336.435715][T15351] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1336.444379][T15351] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1336.475275][T15351] F2FS-fs (loop1): invalid crc value [ 1336.562558][T15351] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1336.621819][T15351] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1336.629402][T15351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1336.908342][ T8889] attempt to access beyond end of device [ 1336.908342][ T8889] loop5: rw=2049, want=45120, limit=40427 [ 1337.566621][T15364] loop2: detected capacity change from 0 to 40427 [ 1337.585021][ T4169] attempt to access beyond end of device [ 1337.585021][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1337.772456][T15364] F2FS-fs (loop2): invalid crc value [ 1337.832173][T15364] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1337.875505][T15364] F2FS-fs (loop2): Start checkpoint disabled! [ 1337.880634][T15367] loop4: detected capacity change from 0 to 40427 [ 1337.926864][T15364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1337.959550][T15367] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1337.967243][T15367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1337.997020][T15367] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1338.005780][T15367] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1338.018888][T15367] F2FS-fs (loop4): invalid crc value [ 1338.040407][T15367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1338.144848][T15367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1338.151939][T15367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1338.888594][T15375] loop5: detected capacity change from 0 to 40427 [ 1338.973486][T15375] F2FS-fs (loop5): invalid crc value [ 1338.974671][ T4347] attempt to access beyond end of device [ 1338.974671][ T4347] loop2: rw=2049, want=45104, limit=40427 [ 1338.993770][T15375] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1339.048967][T15375] F2FS-fs (loop5): Start checkpoint disabled! [ 1339.064258][T15375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1339.634886][ T4170] attempt to access beyond end of device [ 1339.634886][ T4170] loop4: rw=2049, want=45120, limit=40427 [ 1339.921513][T15380] Invalid ELF header magic: != ELF [ 1339.928989][T15380] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15380 comm: syz.1.2608) [ 1339.943701][ T26] audit: type=1800 audit(1748964218.906:60): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2608" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51256 res=0 errno=0 [ 1339.978006][ T4350] attempt to access beyond end of device [ 1339.978006][ T4350] loop5: rw=2049, want=40968, limit=40427 [ 1341.562353][T15398] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1342.322861][T15388] delete_channel: no stack [ 1342.820983][T15413] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2609'. [ 1343.585678][T15414] delete_channel: no stack [ 1343.878744][T15396] loop4: detected capacity change from 0 to 40427 [ 1343.924335][T15396] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1343.973213][T15396] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1344.333971][T15420] loop5: detected capacity change from 0 to 40427 [ 1344.373105][T15396] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1344.417910][T15396] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1344.476705][T15396] F2FS-fs (loop4): invalid crc value [ 1344.502069][T15396] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 1344.908578][T15420] F2FS-fs (loop5): invalid crc value [ 1344.926538][T15420] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1344.970846][T15420] F2FS-fs (loop5): Start checkpoint disabled! [ 1344.990114][T15420] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1345.034171][T15427] Invalid ELF header magic: != ELF [ 1345.255502][T15404] loop3: detected capacity change from 0 to 40427 [ 1345.452976][T15424] loop2: detected capacity change from 0 to 40427 [ 1345.467068][T15427] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15427 comm: syz.1.2622) [ 1345.482048][ T26] audit: type=1800 audit(1748964224.446:61): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2622" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51256 res=0 errno=0 [ 1345.608113][T15424] F2FS-fs (loop2): invalid crc value [ 1345.632433][T15424] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1345.675325][T15424] F2FS-fs (loop2): Start checkpoint disabled! [ 1345.698305][ T4350] attempt to access beyond end of device [ 1345.698305][ T4350] loop5: rw=2049, want=40984, limit=40427 [ 1345.709929][T15424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1347.465739][T10194] attempt to access beyond end of device [ 1347.465739][T10194] loop2: rw=2049, want=40968, limit=40427 [ 1349.955775][T15453] loop3: detected capacity change from 0 to 40427 [ 1350.049441][T15453] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1350.056611][T15453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1350.073139][T15453] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1350.081879][T15453] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1350.103652][T15453] F2FS-fs (loop3): invalid crc value [ 1350.183771][T15453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1350.234301][T15453] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1350.241533][T15453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1350.911525][ T4178] attempt to access beyond end of device [ 1350.911525][ T4178] loop3: rw=2049, want=45120, limit=40427 [ 1351.379510][T15458] loop4: detected capacity change from 0 to 40427 [ 1351.425788][T15468] loop2: detected capacity change from 0 to 40427 [ 1351.438233][T15458] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1351.499439][T15468] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1351.506526][T15468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1351.515769][T15468] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1351.524440][T15468] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1351.534673][T15468] F2FS-fs (loop2): invalid crc value [ 1351.545943][T15458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1351.570265][T15458] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1351.585512][T15460] loop5: detected capacity change from 0 to 40427 [ 1351.664060][T15458] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1351.706846][T15458] F2FS-fs (loop4): invalid crc value [ 1351.765123][T15458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1351.806294][T15460] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1351.843614][T15460] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1351.874922][T15472] loop3: detected capacity change from 0 to 40427 [ 1351.884400][T15468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1351.920471][T15460] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 1351.936250][T15468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1351.943450][T15468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1351.964829][T15460] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1351.995173][T15472] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1352.002183][T15472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1352.010929][T15472] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1352.010989][T15460] F2FS-fs (loop5): invalid crc value [ 1352.019549][T15472] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1352.034716][T15472] F2FS-fs (loop3): invalid crc value [ 1352.084888][T15458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1352.092376][T15458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1352.101967][T15472] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1352.219157][T15460] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1352.236808][T15472] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1352.244847][T15472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1352.684837][ T4180] attempt to access beyond end of device [ 1352.684837][ T4180] loop2: rw=2049, want=45120, limit=40427 [ 1352.869943][T15460] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1352.887524][T15460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1353.225315][ T4170] attempt to access beyond end of device [ 1353.225315][ T4170] loop4: rw=2049, want=45120, limit=40427 [ 1353.661973][ T4178] attempt to access beyond end of device [ 1353.661973][ T4178] loop3: rw=2049, want=45120, limit=40427 [ 1353.692441][T15490] Invalid ELF header magic: != ELF [ 1353.713098][T15490] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15490 comm: syz.1.2634) [ 1353.728017][ T26] audit: type=1800 audit(1748964232.696:62): pid=15490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2634" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51256 res=0 errno=0 [ 1353.940499][T15493] loop5: detected capacity change from 0 to 4096 [ 1355.780236][T15511] loop3: detected capacity change from 0 to 40427 [ 1356.242056][T15516] loop1: detected capacity change from 0 to 40427 [ 1356.305180][T15511] F2FS-fs (loop3): invalid crc value [ 1356.340288][T15516] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1356.347638][T15516] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1356.357150][T15516] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1356.365821][T15516] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1356.377344][T15516] F2FS-fs (loop1): invalid crc value [ 1356.388167][T15511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1356.434666][T15511] F2FS-fs (loop3): Start checkpoint disabled! [ 1356.472400][T15511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1356.524630][T15516] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1356.601143][T15516] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1356.608505][T15516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1358.924458][T15525] loop5: detected capacity change from 0 to 40427 [ 1358.935330][T15525] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1358.942484][T15525] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1358.951347][T15525] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 1358.960365][T15525] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1358.970549][T15525] F2FS-fs (loop5): invalid crc value [ 1359.048130][ T4169] attempt to access beyond end of device [ 1359.048130][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1359.097115][T15525] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1359.184094][T15525] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1359.191191][T15525] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1359.272243][T10293] attempt to access beyond end of device [ 1359.272243][T10293] loop3: rw=2049, want=40968, limit=40427 [ 1359.782215][T15535] loop4: detected capacity change from 0 to 40427 [ 1359.996296][T15535] F2FS-fs (loop4): invalid crc value [ 1360.031796][T15535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1360.098991][T15535] F2FS-fs (loop4): Start checkpoint disabled! [ 1360.114272][T15535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1360.135582][ T8889] attempt to access beyond end of device [ 1360.135582][ T8889] loop5: rw=2049, want=45120, limit=40427 [ 1360.662889][ T4350] attempt to access beyond end of device [ 1360.662889][ T4350] loop4: rw=2049, want=40984, limit=40427 [ 1361.619884][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.626663][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.940667][T15553] loop1: detected capacity change from 0 to 4096 [ 1362.110077][T15555] loop5: detected capacity change from 0 to 40427 [ 1362.199537][T15555] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1362.206579][T15555] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1362.226867][T15555] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 1362.236114][T15555] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1362.311104][T15555] F2FS-fs (loop5): invalid crc value [ 1362.638593][T15563] loop1: detected capacity change from 0 to 40427 [ 1362.695680][T15555] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1362.751772][T15555] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1362.759574][T15555] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1362.779852][T15563] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1362.787889][T15563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1362.800229][T15563] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1362.808922][T15563] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1362.859409][T15563] F2FS-fs (loop1): invalid crc value [ 1362.910698][T15563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1363.010132][T15563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1363.017833][T15563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1363.410670][ T8889] attempt to access beyond end of device [ 1363.410670][ T8889] loop5: rw=2049, want=45120, limit=40427 [ 1364.055208][T15579] loop2: detected capacity change from 0 to 40427 [ 1364.065952][ T4169] attempt to access beyond end of device [ 1364.065952][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1364.111993][T15579] F2FS-fs (loop2): invalid crc value [ 1364.127641][T15579] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1364.169178][T15579] F2FS-fs (loop2): Start checkpoint disabled! [ 1364.202557][T15579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1364.616990][T10194] attempt to access beyond end of device [ 1364.616990][T10194] loop2: rw=2049, want=40968, limit=40427 [ 1366.244741][T15606] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2660'. [ 1367.063016][T15604] loop5: detected capacity change from 0 to 4096 [ 1368.057543][T15606] delete_channel: no stack [ 1368.148339][T15621] loop4: detected capacity change from 0 to 40427 [ 1368.198869][T15621] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1368.205944][T15621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1368.214986][T15621] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1368.223563][T15621] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1368.244042][T15621] F2FS-fs (loop4): invalid crc value [ 1368.454630][T15625] loop3: detected capacity change from 0 to 40427 [ 1368.508635][T15621] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1368.597231][T15621] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1368.604498][T15621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1368.620270][T15625] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1368.627309][T15625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1368.639337][T15625] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1368.647973][T15625] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1368.658143][T15625] F2FS-fs (loop3): invalid crc value [ 1369.349369][T15625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1369.451583][T15625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1369.458783][T15625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1369.528485][ T4170] attempt to access beyond end of device [ 1369.528485][ T4170] loop4: rw=2049, want=45120, limit=40427 [ 1369.774127][T15641] loop1: detected capacity change from 0 to 40427 [ 1370.346423][ T4178] attempt to access beyond end of device [ 1370.346423][ T4178] loop3: rw=2049, want=45120, limit=40427 [ 1370.396408][T15641] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1370.403412][T15641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1370.411866][T15641] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1370.420981][T15641] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1370.431631][T15641] F2FS-fs (loop1): invalid crc value [ 1370.476061][T15641] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1370.583713][T15641] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1370.591064][T15641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1371.254845][ T4169] attempt to access beyond end of device [ 1371.254845][ T4169] loop1: rw=2049, want=45112, limit=40427 [ 1373.050764][T15658] loop3: detected capacity change from 0 to 40427 [ 1373.212914][T15658] F2FS-fs (loop3): invalid crc value [ 1373.243109][T15658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1373.272884][T15658] F2FS-fs (loop3): Start checkpoint disabled! [ 1373.285121][T15660] Invalid ELF header magic: != ELF [ 1373.319435][T15660] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15660 comm: syz.4.2669) [ 1373.334591][ T26] audit: type=1800 audit(1748964252.306:63): pid=15660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2669" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51402 res=0 errno=0 [ 1373.379830][T15658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1373.986901][T15672] loop1: detected capacity change from 0 to 40427 [ 1374.007436][ T9] attempt to access beyond end of device [ 1374.007436][ T9] loop3: rw=2049, want=40968, limit=40427 [ 1374.083962][T15672] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1374.090969][T15672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1374.106753][T15672] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1374.116136][T15672] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1374.127106][T15672] F2FS-fs (loop1): invalid crc value [ 1374.146675][T15675] loop2: detected capacity change from 0 to 40427 [ 1374.185306][T15669] loop5: detected capacity change from 0 to 4096 [ 1374.232786][T15672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1374.288368][T15675] F2FS-fs (loop2): invalid crc value [ 1374.329467][T15672] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1374.331580][T15675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1374.336658][T15672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1374.388093][T15675] F2FS-fs (loop2): Start checkpoint disabled! [ 1374.403082][T15675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1375.527830][T15695] loop5: detected capacity change from 0 to 40427 [ 1376.076478][ T4169] attempt to access beyond end of device [ 1376.076478][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1376.129326][T15695] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1376.136443][T15695] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1376.144860][T15695] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 1376.153424][T15695] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1376.165676][T15695] F2FS-fs (loop5): invalid crc value [ 1376.205754][T15695] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1376.286196][T10194] attempt to access beyond end of device [ 1376.286196][T10194] loop2: rw=2049, want=40976, limit=40427 [ 1376.298738][T15695] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1376.306008][T15695] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1376.905301][ T8889] attempt to access beyond end of device [ 1376.905301][ T8889] loop5: rw=2049, want=45120, limit=40427 [ 1377.158458][T15703] loop3: detected capacity change from 0 to 40427 [ 1377.228654][T15703] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1377.235901][T15703] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1377.252889][T15703] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1377.261596][T15703] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1377.272630][T15703] F2FS-fs (loop3): invalid crc value [ 1377.322479][T15703] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1377.386832][T15703] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1377.394004][T15703] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1377.767731][T15709] loop2: detected capacity change from 0 to 40427 [ 1377.857689][T15711] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1377.876780][T15709] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1377.883776][T15709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1377.886035][T15711] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1377.912518][T15709] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1377.921252][T15709] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1377.931583][T15709] F2FS-fs (loop2): invalid crc value [ 1377.995784][T15709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1378.067984][T15709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1378.075219][T15709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1378.085187][T15726] Invalid ELF header magic: != ELF [ 1378.094919][T15726] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15726 comm: syz.4.2686) [ 1378.110385][ T26] audit: type=1800 audit(1748964257.076:64): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2686" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51402 res=0 errno=0 [ 1378.381832][T15728] loop1: detected capacity change from 0 to 40427 [ 1378.453273][T15728] F2FS-fs (loop1): invalid crc value [ 1378.770012][T15728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1379.138418][T15728] F2FS-fs (loop1): Start checkpoint disabled! [ 1379.167868][T15728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1379.267138][ T4180] attempt to access beyond end of device [ 1379.267138][ T4180] loop2: rw=2049, want=45120, limit=40427 [ 1380.119098][T15746] loop4: detected capacity change from 0 to 40427 [ 1380.194877][T15746] F2FS-fs (loop4): invalid crc value [ 1380.214584][T15746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1380.261735][T15746] F2FS-fs (loop4): Start checkpoint disabled! [ 1380.295639][T15746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1380.328118][ T4350] attempt to access beyond end of device [ 1380.328118][ T4350] loop1: rw=2049, want=40968, limit=40427 [ 1381.164773][ T4350] attempt to access beyond end of device [ 1381.164773][ T4350] loop4: rw=2049, want=40976, limit=40427 [ 1381.537105][T15758] loop2: detected capacity change from 0 to 4096 [ 1381.753812][T15756] loop3: detected capacity change from 0 to 40427 [ 1381.796930][T15756] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1381.804303][T15756] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1381.871276][T15756] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1381.880617][T15756] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1381.902372][T15756] F2FS-fs (loop3): invalid crc value [ 1382.037214][T15756] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1382.040328][T15760] loop1: detected capacity change from 0 to 40427 [ 1382.150479][T15760] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1382.150970][T15756] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1382.157868][T15760] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1382.164758][T15756] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1382.180831][T15760] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1382.189516][T15760] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1382.200787][T15760] F2FS-fs (loop1): invalid crc value [ 1382.259974][T15760] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1382.315966][ T4178] attempt to access beyond end of device [ 1382.315966][ T4178] loop3: rw=2049, want=45104, limit=40427 [ 1382.475702][T15760] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1382.482886][T15760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1382.794393][T15779] loop2: detected capacity change from 0 to 40427 [ 1382.806636][T15781] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2696'. [ 1383.677002][T15779] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1383.684111][T15779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1383.692876][T15779] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1383.701550][T15779] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1383.711937][T15779] F2FS-fs (loop2): invalid crc value [ 1383.876478][T15779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1384.064100][T15779] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1384.071224][T15779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1384.155953][ T4169] attempt to access beyond end of device [ 1384.155953][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1384.905419][T10293] attempt to access beyond end of device [ 1384.905419][T10293] loop2: rw=1048577, want=53256, limit=40427 [ 1384.965605][ T4180] attempt to access beyond end of device [ 1384.965605][ T4180] loop2: rw=2049, want=45120, limit=40427 [ 1384.986989][T15791] Invalid ELF header magic: != ELF [ 1384.995925][T15791] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15791 comm: syz.3.2699) [ 1385.010862][ T26] audit: type=1800 audit(1748964263.976:65): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2699" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50495 res=0 errno=0 [ 1385.378839][T15781] delete_channel: no stack [ 1385.452032][T15793] loop3: detected capacity change from 0 to 40427 [ 1385.499766][T15793] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1385.507025][T15793] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1385.515827][T15793] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1385.524502][T15793] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1385.535695][T15793] F2FS-fs (loop3): invalid crc value [ 1385.587439][T15793] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1385.655649][T15793] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1385.662757][T15793] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1386.212522][ T4178] attempt to access beyond end of device [ 1386.212522][ T4178] loop3: rw=2049, want=45120, limit=40427 [ 1386.245183][T15761] delete_channel: no stack [ 1387.184455][T15819] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1387.618912][T15817] loop2: detected capacity change from 0 to 4096 [ 1388.080444][T15796] loop1: detected capacity change from 0 to 40427 [ 1388.182305][T15796] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1388.222751][T15796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1388.246103][T15796] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1388.254871][T15796] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1388.265616][T15796] F2FS-fs (loop1): invalid crc value [ 1388.271021][T15796] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 1388.285267][T15821] loop2: detected capacity change from 0 to 40427 [ 1388.329054][T15821] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1388.336136][T15821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1388.345248][T15821] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1388.353955][T15821] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1388.365986][T15821] F2FS-fs (loop2): invalid crc value [ 1388.436693][T15805] loop4: detected capacity change from 0 to 40427 [ 1388.461154][T15821] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1388.517806][T15805] F2FS-fs (loop4): invalid crc value [ 1388.540551][T15805] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1388.572873][T15821] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1388.580201][T15821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1388.682599][T15805] F2FS-fs (loop4): Start checkpoint disabled! [ 1388.727108][ T4180] attempt to access beyond end of device [ 1388.727108][ T4180] loop2: rw=2049, want=45104, limit=40427 [ 1388.739092][T15805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1388.944494][T15836] loop1: detected capacity change from 0 to 40427 [ 1388.978276][T15836] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1388.985475][T15836] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1388.996896][T15836] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 1389.005601][T15836] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1389.017775][T15836] F2FS-fs (loop1): invalid crc value [ 1389.072745][T15836] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1389.118439][T15836] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1389.125723][T15836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1389.908794][T15818] delete_channel: no stack [ 1389.963958][ T4169] attempt to access beyond end of device [ 1389.963958][ T4169] loop1: rw=2049, want=45120, limit=40427 [ 1390.388285][T15849] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2716'. [ 1394.627202][T15874] loop5: detected capacity change from 0 to 4096 [ 1395.981343][T15893] loop3: detected capacity change from 0 to 40427 [ 1396.050714][T15893] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1396.057815][T15893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1396.067078][T15893] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 1396.075907][T15893] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1396.089951][T15893] F2FS-fs (loop3): invalid crc value [ 1396.119673][T15890] loop1: detected capacity change from 0 to 32768 [ 1396.170966][T15890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2724 (15890) [ 1396.222623][T15893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1396.254007][T15890] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1396.267477][T15890] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1396.467034][T15893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1396.474199][T15893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1396.512637][T15890] BTRFS info (device loop1): turning on sync discard [ 1396.550861][T15890] BTRFS info (device loop1): setting datacow [ 1396.579611][T15890] BTRFS info (device loop1): doing ref verification [ 1396.606906][T15890] BTRFS info (device loop1): turning off barriers [ 1396.613434][T15890] BTRFS info (device loop1): enabling ssd optimizations [ 1396.934036][T15890] BTRFS info (device loop1): using spread ssd allocation scheme [ 1396.941866][T15890] BTRFS info (device loop1): setting datasum [ 1396.952199][T15890] BTRFS info (device loop1): turning on barriers [ 1396.975839][T15890] BTRFS info (device loop1): not using ssd optimizations [ 1396.983062][T15890] BTRFS info (device loop1): not using spread ssd allocation scheme [ 1396.983410][T15888] loop4: detected capacity change from 0 to 40427 [ 1397.047916][T15888] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1397.104105][T15890] BTRFS info (device loop1): using free space tree [ 1397.114116][T15888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1397.148455][T15888] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 1397.183446][ T4178] attempt to access beyond end of device [ 1397.183446][ T4178] loop3: rw=2049, want=45120, limit=40427 [ 1397.220559][T15890] BTRFS info (device loop1): has skinny extents [ 1397.234281][T15888] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1397.286925][T15888] F2FS-fs (loop4): invalid crc value [ 1397.310819][T15888] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1400.509865][T15942] loop4: detected capacity change from 0 to 40427 [ 1401.224885][T15942] F2FS-fs (loop4): invalid crc value [ 1401.235963][T15942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1401.337857][T15942] F2FS-fs (loop4): Start checkpoint disabled! [ 1401.379587][T15942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1404.014809][T15961] loop2: detected capacity change from 0 to 40427 [ 1404.079833][T15961] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1404.086940][T15961] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1404.099231][T15961] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1404.108047][T15961] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1404.120214][T15961] F2FS-fs (loop2): invalid crc value [ 1404.178816][T15961] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1404.192548][T15962] loop5: detected capacity change from 0 to 4096 [ 1404.227223][T15961] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1404.234428][T15961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1406.644421][ T4180] attempt to access beyond end of device [ 1406.644421][ T4180] loop2: rw=2049, want=45120, limit=40427 [ 1406.952963][T15984] loop4: detected capacity change from 0 to 4096 [ 1407.854459][T15992] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 1408.431173][T15990] loop2: detected capacity change from 0 to 32768 [ 1409.190719][T15976] delete_channel: no stack [ 1409.218673][T15990] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2740 (15990) [ 1409.265450][T15990] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1409.274527][T15990] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1409.282931][T15990] BTRFS info (device loop2): turning on sync discard [ 1409.290351][T15990] BTRFS info (device loop2): setting datacow [ 1409.297228][T15990] BTRFS info (device loop2): doing ref verification [ 1409.313683][T15990] BTRFS info (device loop2): turning off barriers [ 1409.324145][T15990] BTRFS info (device loop2): enabling ssd optimizations [ 1409.343590][T15990] BTRFS info (device loop2): using spread ssd allocation scheme [ 1409.359438][T15990] BTRFS info (device loop2): setting datasum [ 1409.367463][T15990] BTRFS info (device loop2): turning on barriers [ 1409.374608][T15990] BTRFS info (device loop2): not using ssd optimizations [ 1409.381840][T15990] BTRFS info (device loop2): not using spread ssd allocation scheme [ 1409.390640][T15990] BTRFS info (device loop2): using free space tree [ 1409.398103][T15990] BTRFS info (device loop2): has skinny extents [ 1409.800558][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1409.809759][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1410.596883][T16028] loop5: detected capacity change from 0 to 40427 [ 1411.141403][T16028] F2FS-fs (loop5): invalid crc value [ 1411.165023][T16028] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1411.198798][T16028] F2FS-fs (loop5): Start checkpoint disabled! [ 1411.214499][T16028] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1412.086890][T16052] loop4: detected capacity change from 0 to 4096 [ 1413.511213][T16057] overlayfs: failed to resolve './file1': -2 [ 1414.284943][T16083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1414.296741][T16083] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1414.411302][T16084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1414.422852][T16084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1416.477247][T16089] loop2: detected capacity change from 0 to 40427 [ 1416.582331][T16089] F2FS-fs (loop2): invalid crc value [ 1416.604461][T16089] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1416.644944][T16089] F2FS-fs (loop2): Start checkpoint disabled! [ 1416.670720][T16089] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1417.324301][T16104] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2766'. [ 1418.347542][T16106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1418.359318][T16106] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1420.079488][T16101] delete_channel: no stack [ 1421.507362][T16131] overlayfs: missing 'lowerdir' [ 1422.311058][T16132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1422.320003][T16132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1422.934349][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.940753][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.237217][T16148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1424.248482][T16148] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1425.776018][T16140] delete_channel: no stack [ 1426.323473][T16161] loop1: detected capacity change from 0 to 4096 [ 1427.778547][T16181] overlayfs: missing 'lowerdir' [ 1427.909844][T16185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1427.921512][T16185] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1429.419794][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2792'. [ 1429.457336][T16196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 1430.753868][T16228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1430.765220][T16228] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1430.982960][T16229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1433.621409][T16229] delete_channel: no stack [ 1435.848801][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2806'. [ 1435.894978][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 1435.993326][T16244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.000754][T16244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.431342][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1436.483073][T16263] device macvtap1 entered promiscuous mode [ 1436.897249][T16248] loop2: detected capacity change from 0 to 40427 [ 1436.934214][T16277] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2819'. [ 1436.970840][T16248] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1437.003033][T16248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1437.043039][T16248] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 1437.117224][T16248] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 1437.180851][T16248] F2FS-fs (loop2): invalid crc value [ 1437.273545][T16248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1437.458597][T16248] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1437.485057][T16248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1437.596563][ T4180] attempt to access beyond end of device [ 1437.596563][ T4180] loop2: rw=2049, want=45104, limit=40427 [ 1438.054498][T13388] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1438.444340][T13388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.466865][T13388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.534682][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1438.579739][T13388] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1438.611071][T13388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.650864][T13388] usb 5-1: config 0 descriptor?? [ 1438.807598][ T4323] usb 6-1: Using ep0 maxpacket: 16 [ 1438.977895][T10293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.989169][T10293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.094149][ T4323] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1439.113144][ T26] audit: type=1326 audit(1748964318.076:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16339 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb885c5a969 code=0x7fc00000 [ 1439.137661][T10293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.164003][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.164817][T10293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.233082][T13388] hid-generic 0003:1044:7A4D.0001: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0 [ 1439.247909][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1439.256197][ T4323] usb 6-1: Product: syz [ 1439.282621][T10293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.293093][T10293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.343986][ T4323] usb 6-1: Manufacturer: syz [ 1439.374623][ T4323] usb 6-1: SerialNumber: syz [ 1439.386059][T10293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.421922][ T4323] r8152-cfgselector 6-1: config 0 descriptor?? [ 1439.429888][T13388] usb 5-1: USB disconnect, device number 3 [ 1439.449900][T10293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.536761][T16356] netlink: 'syz.3.2851': attribute type 10 has an invalid length. [ 1439.580687][T16356] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2851'. [ 1439.592997][T16356] device bond0 entered promiscuous mode [ 1439.601176][T16356] device bond_slave_0 entered promiscuous mode [ 1439.611331][T16356] device bond_slave_1 entered promiscuous mode [ 1439.620755][T16356] device wlan1 entered promiscuous mode [ 1439.630550][T16356] bridge0: port 3(bond0) entered blocking state [ 1439.639863][T16356] bridge0: port 3(bond0) entered disabled state [ 1439.653289][T16344] chnl_net:caif_netlink_parms(): no params data found [ 1439.703258][T16355] fido_id[16355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1439.733647][T16337] device bridge0 entered promiscuous mode [ 1439.758712][T16337] device macsec1 entered promiscuous mode [ 1439.804658][T16337] device bridge0 left promiscuous mode [ 1439.924323][ T4323] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1439.976655][ T4323] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1439.983255][ T4323] r8152-cfgselector 6-1: bad CDC descriptors [ 1440.014064][ T4323] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1440.030881][ T4323] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 1440.094147][ T7707] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1440.187801][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.213339][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.248738][T16344] device bridge_slave_0 entered promiscuous mode [ 1440.288994][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.290090][T16380] loop6: detected capacity change from 0 to 7 [ 1440.329061][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.351607][T16344] device bridge_slave_1 entered promiscuous mode [ 1440.364536][ T7707] usb 4-1: Using ep0 maxpacket: 32 [ 1440.372448][T16380] Dev loop6: unable to read RDB block 7 [ 1440.408426][T16380] loop6: AHDI p1 p2 p3 p4 [ 1440.412919][T16380] loop6: partition table partially beyond EOD, truncated [ 1440.531991][T16030] Bluetooth: hci5: command 0x0409 tx timeout [ 1440.542239][ T7707] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1440.548959][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2863'. [ 1440.560112][ T7707] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1440.563754][T16380] loop6: p1 start 2401632844 is beyond EOD, [ 1440.580446][ T7707] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1440.587879][T16380] truncated [ 1440.599042][T16380] loop6: p2 size 47 extends beyond EOD, truncated [ 1440.618007][T16380] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1440.620782][ T7707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1440.641880][ T7707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1440.652400][ T7707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1440.674145][ T7707] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1440.683420][ T7707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.728369][ T7707] usb 4-1: config 0 descriptor?? [ 1440.797317][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1440.828886][T16344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.884542][T16344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.025346][T16344] team0: Port device team_slave_0 added [ 1441.057952][T16408] xt_connbytes: Forcing CT accounting to be enabled [ 1441.058965][ T7707] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1441.120128][ T7707] usb 4-1: USB disconnect, device number 3 [ 1441.151947][ T7707] usblp0: removed [ 1441.185230][T16344] team0: Port device team_slave_1 added [ 1441.297355][T16344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.323363][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.440105][T16344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.529992][T16344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.541599][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.600775][T16344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.649927][ T7707] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1441.767232][T10293] bond1: (slave gretap1): Releasing active interface [ 1441.942527][T16344] device hsr_slave_0 entered promiscuous mode [ 1441.954121][ T7707] usb 4-1: Using ep0 maxpacket: 32 [ 1441.965699][T16344] device hsr_slave_1 entered promiscuous mode [ 1441.984168][ T7402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1442.073518][T10293] bond0: (slave wlan1): Releasing backup interface [ 1442.104138][ T7707] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1442.112531][ T7707] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1442.336901][ T7707] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1442.468117][ T7707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1442.554096][ T7402] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.576957][ T7707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1442.608749][ T7402] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1442.640530][ T7402] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1442.667842][ T7402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.778018][ T7707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1442.963942][ T7707] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1443.011426][ T7707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.041697][ T7707] usb 4-1: config 0 descriptor?? [ 1443.068269][ T4160] Bluetooth: hci5: command 0x041b tx timeout [ 1443.074649][ T7707] usb 4-1: can't set config #0, error -71 [ 1443.125858][ T7707] usb 4-1: USB disconnect, device number 4 [ 1443.502715][T10293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.524987][T10293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.574585][T10293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.652427][T10293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.681182][T10293] device bridge_slave_1 left promiscuous mode [ 1443.706348][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.756823][T10293] device bridge_slave_0 left promiscuous mode [ 1443.763096][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.969305][T10293] device veth1_macvtap left promiscuous mode [ 1444.058809][T10293] device veth0_macvtap left promiscuous mode [ 1444.074226][ T4665] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1444.143630][T10293] device veth1_vlan left promiscuous mode [ 1444.237248][T10293] device veth0_vlan left promiscuous mode [ 1444.494290][ T4665] usb 5-1: config 0 has no interfaces? [ 1444.704397][ T4665] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1444.754775][ T4665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.850462][ T4665] usb 5-1: Product: syz [ 1444.897058][ T4665] usb 5-1: Manufacturer: syz [ 1444.937424][ T4665] usb 5-1: SerialNumber: syz [ 1444.998158][ T4665] usb 5-1: config 0 descriptor?? [ 1445.154114][ T4665] Bluetooth: hci5: command 0x040f tx timeout [ 1445.256830][ T4665] usb 3-1: USB disconnect, device number 3 [ 1445.399572][T10293] bond1 (unregistering): Released all slaves [ 1445.524972][ T26] audit: type=1326 audit(1748964324.496:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.2.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1c6c4d969 code=0x0 [ 1446.292488][T10293] team0 (unregistering): Port device team_slave_1 removed [ 1446.384937][T10293] team0 (unregistering): Port device team_slave_0 removed [ 1446.417159][T10293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.441403][T10293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.611845][T10293] bond0 (unregistering): Released all slaves [ 1446.857191][T16487] bond0: (slave wlan1): Releasing backup interface [ 1446.934720][T16496] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 1446.959836][T16496] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1447.012832][T16496] device bond0 entered promiscuous mode [ 1447.022072][T16496] device bond_slave_0 entered promiscuous mode [ 1447.038737][T16496] device bond_slave_1 entered promiscuous mode [ 1447.051217][T16496] device wlan1 entered promiscuous mode [ 1447.062250][T16496] bridge0: port 3(bond0) entered blocking state [ 1447.074329][T16496] bridge0: port 3(bond0) entered disabled state [ 1447.085099][T16496] bridge0: port 3(bond0) entered blocking state [ 1447.091475][T16496] bridge0: port 3(bond0) entered forwarding state [ 1447.234079][T16030] Bluetooth: hci5: command 0x0419 tx timeout [ 1447.267938][T16030] usb 5-1: USB disconnect, device number 4 [ 1447.798057][T16030] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1448.141630][T16344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1448.188465][T16030] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1448.221332][T16030] usb 5-1: config 0 has no interface number 0 [ 1448.235581][T16030] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1448.259176][T16030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.279710][T16030] usb 5-1: config 0 descriptor?? [ 1448.287680][T16344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1448.335737][T16030] usb 5-1: selecting invalid altsetting 1 [ 1448.351121][T16344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1448.375290][T16030] dvb_ttusb_budget: ttusb_init_controller: error [ 1448.432634][T16030] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1448.571840][T16344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1448.673033][T16030] DVB: Unable to find symbol cx22700_attach() [ 1448.833370][T16030] DVB: Unable to find symbol tda10046_attach() [ 1448.849859][T16030] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1448.924151][T16030] usb 5-1: USB disconnect, device number 5 [ 1449.031611][T16344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.077673][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1449.096789][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1449.156533][T16344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.187783][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1449.209734][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1449.243737][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.251001][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.300557][T16546] netlink: 'syz.4.2896': attribute type 10 has an invalid length. [ 1449.313316][T16546] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2896'. [ 1449.371533][T16546] device bond0 entered promiscuous mode [ 1449.429674][T16546] device bond_slave_0 entered promiscuous mode [ 1449.461017][T16546] device bond_slave_1 entered promiscuous mode [ 1449.489246][T16546] device wlan1 entered promiscuous mode [ 1449.500698][T16549] netlink: 372 bytes leftover after parsing attributes in process `syz.5.2897'. [ 1449.509039][T16546] bridge0: port 3(bond0) entered blocking state [ 1449.558762][T16546] bridge0: port 3(bond0) entered disabled state [ 1449.596918][T16546] bridge0: port 3(bond0) entered blocking state [ 1449.603309][T16546] bridge0: port 3(bond0) entered forwarding state [ 1449.679421][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1449.708141][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1449.726377][T16553] vivid-008: ================= START STATUS ================= [ 1449.757091][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1449.765411][T16553] vivid-008: Generate PTS: true [ 1449.785751][T16553] vivid-008: Generate SCR: true [ 1449.790845][T16553] tpg source WxH: 640x360 (Y'CbCr) [ 1449.824610][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.832065][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.902902][T16553] tpg field: 1 [ 1449.923140][T16553] tpg crop: 640x360@0x0 [ 1449.933680][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1449.965852][T16553] tpg compose: 640x360@0x0 [ 1450.001503][T16553] tpg colorspace: 8 [ 1450.015602][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1450.032193][T16553] tpg transfer function: 0/0 [ 1450.064543][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1450.076659][T16553] tpg Y'CbCr encoding: 0/0 [ 1450.111752][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1450.115517][T16553] tpg quantization: 0/0 [ 1450.131335][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1450.142809][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1450.152930][T16553] tpg RGB range: 0/2 [ 1450.167057][T16553] vivid-008: ================== END STATUS ================== [ 1450.167156][T16564] device netdevsim0 entered promiscuous mode [ 1450.194930][T16564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1450.228953][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1450.247484][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1450.337100][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1450.392959][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1450.415294][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1450.443280][T16570] syz.4.2904 uses obsolete (PF_INET,SOCK_PACKET) [ 1450.448074][T16344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.488746][T16569] device syzkaller1 entered promiscuous mode [ 1450.708092][ T26] audit: type=1326 audit(1748964329.676:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16574 comm="syz.4.2906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84fc622969 code=0x0 [ 1451.227117][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1451.244871][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1451.326157][T16344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.442549][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1451.459463][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1451.544172][ T4160] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1451.564967][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1451.588668][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1451.644254][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1451.686317][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1451.731198][T16344] device veth0_vlan entered promiscuous mode [ 1451.797283][T16344] device veth1_vlan entered promiscuous mode [ 1451.802705][ T4160] usb 6-1: Using ep0 maxpacket: 8 [ 1451.897665][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1451.920779][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1451.951174][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1451.978399][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1452.011408][T16344] device veth0_macvtap entered promiscuous mode [ 1452.042945][T16344] device veth1_macvtap entered promiscuous mode [ 1452.138644][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.174167][ T4160] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1452.188385][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.224063][ T4160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.264781][ T4160] usb 6-1: Product: syz [ 1452.283790][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.298987][ T4160] usb 6-1: Manufacturer: syz [ 1452.312736][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.340892][ T4160] usb 6-1: SerialNumber: syz [ 1452.374433][ T4160] usb 6-1: config 0 descriptor?? [ 1452.414217][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.447104][ T4160] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1452.510031][ T4160] usb 6-1: setting power ON [ 1452.513211][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.566366][ T4160] dvb-usb: bulk message failed: -22 (2/0) [ 1452.606797][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.632557][ T4160] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1452.650961][T16595] dvb-usb: bulk message failed: -22 (3/0) [ 1452.719493][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.772469][ T4160] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1452.795594][ T4160] usb 6-1: media controller created [ 1452.808308][T16344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.845758][ T4160] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.873937][T13388] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1452.884622][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1452.910456][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1452.916850][ T4160] usb 6-1: selecting invalid altsetting 6 [ 1452.939794][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1452.948367][ T4160] usb 6-1: digital interface selection failed (-22) [ 1452.966007][ T4160] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1453.054646][ T4160] usb 6-1: setting power OFF [ 1453.059676][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1453.062281][ T4160] dvb-usb: bulk message failed: -22 (2/0) [ 1453.084711][ T4160] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1453.085560][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.094786][ T4160] (NULL device *): no alternate interface [ 1453.175842][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.195025][ T4160] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1453.226881][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.239253][ T4160] usb 6-1: USB disconnect, device number 3 [ 1453.251267][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.262196][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.274447][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.274680][T13388] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1453.285375][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.346541][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.358600][T13388] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1453.368686][T16344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.390132][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1453.436469][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1453.489490][T16344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.495901][T13388] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1453.531231][T16344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.546156][T13388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.564985][T16344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.624351][T16621] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1453.642894][T16344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.761334][T16639] bond0: (slave wlan1): Releasing backup interface [ 1453.805678][T16639] device wlan1 left promiscuous mode [ 1453.970671][T13388] usb 4-1: USB disconnect, device number 5 [ 1454.202688][T10161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.258982][T10161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.331065][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.341084][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1454.362090][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.404804][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.467967][T12845] udevd[12845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.432613][T16690] kvm [16688]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 1455.496541][T16690] kvm [16688]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1456.065900][T16713] netlink: 'syz.1.2939': attribute type 10 has an invalid length. [ 1456.084000][T16713] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2939'. [ 1456.093040][T16713] device bond0 entered promiscuous mode [ 1456.226316][T16713] device bond_slave_0 entered promiscuous mode [ 1456.233135][T16713] device bond_slave_1 entered promiscuous mode [ 1456.311196][T16713] bridge0: port 3(bond0) entered blocking state [ 1456.348366][T16713] bridge0: port 3(bond0) entered disabled state [ 1456.417459][T16713] bridge0: port 3(bond0) entered blocking state [ 1456.423897][T16713] bridge0: port 3(bond0) entered forwarding state [ 1457.402714][T16708] chnl_net:caif_netlink_parms(): no params data found [ 1457.584112][ T4210] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1457.798075][T16708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.806864][T16708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.816107][T16708] device bridge_slave_0 entered promiscuous mode [ 1457.829300][T16708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.848163][T16708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.858860][T16708] device bridge_slave_1 entered promiscuous mode [ 1457.873960][ T4160] Bluetooth: hci0: command 0x0409 tx timeout [ 1458.025646][T16708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.046112][ T4210] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1458.064053][ T4210] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1458.088873][T16708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.098333][ T4210] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.194196][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.294238][T16741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1458.570014][T16708] team0: Port device team_slave_0 added [ 1458.636351][T16708] team0: Port device team_slave_1 added [ 1458.654324][T16030] usb 5-1: USB disconnect, device number 6 [ 1458.690062][T16767] netlink: 'syz.3.2950': attribute type 10 has an invalid length. [ 1458.723925][T16767] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1458.897253][T16708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.924152][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1459.052457][T16708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.173371][T16708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.214814][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1459.453313][T16708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.625759][T16708] device hsr_slave_0 entered promiscuous mode [ 1459.674944][T16708] device hsr_slave_1 entered promiscuous mode [ 1459.774331][T16708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1459.792012][T16708] Cannot create hsr debugfs directory [ 1459.851955][T16791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2957'. [ 1459.894117][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2957'. [ 1459.954237][T13388] Bluetooth: hci0: command 0x041b tx timeout [ 1460.290635][T16708] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.458784][T16708] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.586524][T16708] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.643961][T13388] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1460.705420][T16708] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.894076][T13388] usb 6-1: Using ep0 maxpacket: 16 [ 1461.074390][T16708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1461.092174][ T4665] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1461.107144][T16708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1461.155359][T16708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1461.174297][T13388] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1461.194642][T13388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.202785][T13388] usb 6-1: Product: syz [ 1461.232682][T13388] usb 6-1: Manufacturer: syz [ 1461.249991][T13388] usb 6-1: SerialNumber: syz [ 1461.276303][T16708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1461.285170][T13388] usb 6-1: config 0 descriptor?? [ 1461.334087][T13388] as10x_usb: device has been detected [ 1461.358203][T13388] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1461.461289][T13388] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1461.524253][ T4665] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1461.564700][ T4665] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1461.601895][ T4665] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1461.622583][ T4665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.622808][T16708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.674556][T16825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1461.728585][T13388] as10x_usb: error during firmware upload part1 [ 1461.732260][T16708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.759565][T13388] Registered device Sky IT Digital Key (green led) [ 1461.869668][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1461.983658][ T4210] usb 4-1: USB disconnect, device number 6 [ 1462.009139][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.052141][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1462.069344][T13388] Bluetooth: hci0: command 0x040f tx timeout [ 1462.095579][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1462.126705][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.134731][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.167808][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1462.215446][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1462.239951][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.267698][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.274924][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.335192][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1462.377116][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1462.436553][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1462.462609][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1462.484658][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1462.513002][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1462.565405][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1462.592785][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1462.612323][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.654838][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1462.692120][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1462.737292][T16708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1462.974982][ T6170] usb 6-1: USB disconnect, device number 4 [ 1463.030316][ T6170] Unregistered device Sky IT Digital Key (green led) [ 1463.033095][ T6170] as10x_usb: device has been disconnected [ 1463.221753][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1463.236780][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1463.315003][T16708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.500475][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1463.516344][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1463.605273][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1463.621931][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1463.631664][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1463.652289][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1463.663012][T16708] device veth0_vlan entered promiscuous mode [ 1463.763780][T16708] device veth1_vlan entered promiscuous mode [ 1463.870656][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1463.890588][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1463.914838][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1463.924774][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1463.939400][T16708] device veth0_macvtap entered promiscuous mode [ 1463.961853][T16886] loop4: detected capacity change from 0 to 524255232 [ 1463.974293][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1464.003039][T16708] device veth1_macvtap entered promiscuous mode [ 1464.114801][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 1464.774001][T16030] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1465.204112][T16030] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1465.244310][T16030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.271351][T16030] usb 6-1: config 0 descriptor?? [ 1465.554072][ T4665] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1465.984185][ T4665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.001102][ T4665] usb 4-1: config 0 has no interfaces? [ 1466.070433][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.088285][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.119776][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.157530][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.173958][T16030] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1466.191728][T16030] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1466.197244][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.200173][ T4665] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 1466.218660][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.219922][ T4665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.230062][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.243040][T16030] [drm:udl_init] *ERROR* Selecting channel failed [ 1466.251578][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.266132][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.268742][ T4665] usb 4-1: Product: syz [ 1466.279409][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.294953][T16708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.303944][ T4665] usb 4-1: Manufacturer: syz [ 1466.306351][T16905] netlink: 'syz.4.2985': attribute type 7 has an invalid length. [ 1466.316258][ T4665] usb 4-1: SerialNumber: syz [ 1466.319397][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'. [ 1466.346301][ T4665] usb 4-1: config 0 descriptor?? [ 1466.348236][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1466.351535][T16030] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 1466.368714][T16030] [drm] Initialized udl on minor 2 [ 1466.389680][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1466.409346][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.409897][T16030] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1466.429960][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.440698][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.452143][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.462696][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.490400][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.510173][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.540100][T16030] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1466.550041][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.581988][T16708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.596301][T16708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.628664][T16030] usb 6-1: USB disconnect, device number 5 [ 1466.645809][T16708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.687771][T16708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.732755][T16708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.859178][T16708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.904012][T16708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.922247][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1466.958163][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1467.315699][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.440224][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.494091][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.686904][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.697857][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.719702][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.912718][ T4160] usb 4-1: USB disconnect, device number 7 [ 1468.333948][T16030] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1468.784287][T16030] usb 2-1: config 0 has no interfaces? [ 1468.854134][ T4363] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1468.915131][T10161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.928526][T10161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.975791][T16030] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1468.993263][T16030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.017395][T16030] usb 2-1: Product: syz [ 1469.021855][T16030] usb 2-1: Manufacturer: syz [ 1469.026777][T16030] usb 2-1: SerialNumber: syz [ 1469.037972][T16030] usb 2-1: config 0 descriptor?? [ 1469.059387][T10161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.107449][T10161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.211625][T10161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.236347][T10161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.263221][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1469.285915][ T4363] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1469.309449][ T4363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.353115][ T4363] usb 4-1: config 0 descriptor?? [ 1469.398411][T10161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.433956][T10161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.469727][T16950] chnl_net:caif_netlink_parms(): no params data found [ 1469.693921][ T4160] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1469.713251][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.763030][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.825203][T16950] device bridge_slave_0 entered promiscuous mode [ 1469.868414][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.917928][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.945169][T16950] device bridge_slave_1 entered promiscuous mode [ 1469.965101][ T4160] usb 3-1: Using ep0 maxpacket: 32 [ 1470.085270][ T4160] usb 3-1: config 0 has no interfaces? [ 1470.110824][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.152651][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.274452][ T4160] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1470.301924][ T4160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.323365][ T4160] usb 3-1: Product: syz [ 1470.333731][T16950] team0: Port device team_slave_0 added [ 1470.338005][ T4160] usb 3-1: Manufacturer: syz [ 1470.370040][ T4160] usb 3-1: SerialNumber: syz [ 1470.397266][ T4160] usb 3-1: config 0 descriptor?? [ 1470.405813][T16950] team0: Port device team_slave_1 added [ 1470.557193][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.585557][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.662491][ T4160] usb 2-1: USB disconnect, device number 5 [ 1470.674491][ T4363] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1470.699370][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.752344][ T4363] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1470.794589][ T4363] [drm:udl_init] *ERROR* Selecting channel failed [ 1470.816306][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.823434][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.828430][ T4363] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1470.879320][T16030] usb 3-1: USB disconnect, device number 4 [ 1470.891634][ T4363] [drm] Initialized udl on minor 2 [ 1470.899668][ T4665] Bluetooth: hci1: command 0x0409 tx timeout [ 1470.914293][ T4363] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1470.933334][ T4363] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1470.953063][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.014370][ T4363] usb 4-1: USB disconnect, device number 8 [ 1471.172300][T16950] device hsr_slave_0 entered promiscuous mode [ 1471.202156][T16950] device hsr_slave_1 entered promiscuous mode [ 1471.219011][T16950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.230518][T16950] Cannot create hsr debugfs directory [ 1471.498190][T10161] bond0: (slave wlan1): Releasing backup interface [ 1471.534881][T10161] device wlan1 left promiscuous mode [ 1471.596597][T17023] mmap: syz.2.3010 (17023) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1471.698783][T17012] kvm [17011]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe00004456, nop [ 1472.109562][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.144561][T10161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.175270][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.183004][T10161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.277655][T10161] bridge0: port 3(bond0) entered disabled state [ 1472.294258][T10161] device bridge_slave_1 left promiscuous mode [ 1472.317013][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.328710][T10161] device bridge_slave_0 left promiscuous mode [ 1472.345162][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.963716][ T4160] Bluetooth: hci1: command 0x041b tx timeout [ 1473.139716][T10161] device veth1_macvtap left promiscuous mode [ 1473.165688][T10161] device veth0_macvtap left promiscuous mode [ 1473.190009][T10161] device veth1_vlan left promiscuous mode [ 1473.210611][T10161] device veth0_vlan left promiscuous mode [ 1474.004081][ T6170] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1474.157504][T10161] team0 (unregistering): Port device team_slave_1 removed [ 1474.190298][T10161] team0 (unregistering): Port device team_slave_0 removed [ 1474.216391][T10161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1474.241976][T10161] device bond_slave_1 left promiscuous mode [ 1474.282504][T10161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.302699][T10161] device bond_slave_0 left promiscuous mode [ 1474.394429][ T6170] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1474.416655][ T6170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.537259][T10161] bond0 (unregistering): Released all slaves [ 1474.544794][ T6170] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1474.561767][ T6170] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1474.585068][ T6170] usb 4-1: Manufacturer: syz [ 1474.596443][ T6170] usb 4-1: config 0 descriptor?? [ 1474.785306][ T6170] rc_core: IR keymap rc-hauppauge not found [ 1474.791278][ T6170] Registered IR keymap rc-empty [ 1474.828875][ T6170] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1474.855518][ T6170] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 1474.907954][T17039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1474.908477][T17075] udc-core: couldn't find an available UDC or it's busy [ 1474.923871][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1474.939567][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.956267][T17075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1475.012737][ T4160] Bluetooth: hci1: command 0x040f tx timeout [ 1475.029065][ T6170] usb 4-1: USB disconnect, device number 9 [ 1475.048794][T17054] device bond0 entered promiscuous mode [ 1475.057398][T17054] device bond_slave_0 entered promiscuous mode [ 1475.079569][T17039] syz.1.3014 (17039) used greatest stack depth: 19392 bytes left [ 1475.091735][T17054] device bond_slave_1 entered promiscuous mode [ 1475.243208][T17082] netlink: 'syz.1.3026': attribute type 10 has an invalid length. [ 1475.281869][T17082] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1475.421852][ T8889] cgroup: fork rejected by pids controller in /syz5 [ 1475.871100][T16950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1475.924855][T16950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1475.949956][T16950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1475.963215][T16950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1476.285646][T16950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.356079][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1476.374874][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1476.394295][T16950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.436029][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1476.445515][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1476.498845][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.506002][T10194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.586027][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1476.621944][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1476.653286][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1476.683928][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.691393][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.785839][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1476.834720][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1476.912070][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1477.002857][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1477.034709][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1477.046347][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1477.056482][T17133] netlink: 'syz.2.3038': attribute type 10 has an invalid length. [ 1477.074065][T17133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3038'. [ 1477.084241][ T4160] Bluetooth: hci1: command 0x0419 tx timeout [ 1477.107309][T17133] device bond0 entered promiscuous mode [ 1477.128862][T17133] device bond_slave_0 entered promiscuous mode [ 1477.143666][T17133] device bond_slave_1 entered promiscuous mode [ 1477.158264][T17133] bridge0: port 3(bond0) entered blocking state [ 1477.173251][T17133] bridge0: port 3(bond0) entered disabled state [ 1477.195277][T17133] bridge0: port 3(bond0) entered blocking state [ 1477.201671][T17133] bridge0: port 3(bond0) entered forwarding state [ 1477.231937][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1477.260563][T17124] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1477.286349][T17124] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1477.297450][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1477.336803][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1477.351392][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1477.375041][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1477.394387][T16950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1478.030463][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.058643][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1478.091142][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.150967][T17129] chnl_net:caif_netlink_parms(): no params data found [ 1478.372331][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.390303][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.414038][T17129] device bridge_slave_0 entered promiscuous mode [ 1478.487659][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.535720][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.613294][T17129] device bridge_slave_1 entered promiscuous mode [ 1478.770724][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.784089][ T4363] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1478.809483][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.992705][T17186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1479.019841][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.047469][ T4160] Bluetooth: hci3: command 0x0409 tx timeout [ 1479.071670][T17129] team0: Port device team_slave_0 added [ 1479.111967][T17129] team0: Port device team_slave_1 added [ 1479.194175][ T4363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.216559][ T4363] usb 2-1: config 0 has no interfaces? [ 1479.239401][T17194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1479.247307][T17194] IPv6: NLM_F_CREATE should be set when creating new route [ 1479.303109][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1479.311813][T17197] netlink: set zone limit has 8 unknown bytes [ 1479.342986][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1479.364016][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.371396][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.454447][ T4363] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 1479.475428][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.499609][ T4363] usb 2-1: Product: syz [ 1479.507689][ T4363] usb 2-1: Manufacturer: syz [ 1479.529246][ T4363] usb 2-1: SerialNumber: syz [ 1479.556906][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.564829][ T4363] usb 2-1: config 0 descriptor?? [ 1479.589569][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1479.630524][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1479.694569][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1479.704770][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1479.724229][ T4160] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1479.747331][T16950] device veth0_vlan entered promiscuous mode [ 1479.775644][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.782886][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.864879][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.952241][T16950] device veth1_vlan entered promiscuous mode [ 1479.993929][ T4160] usb 4-1: Using ep0 maxpacket: 16 [ 1479.998053][T17129] device hsr_slave_0 entered promiscuous mode [ 1480.073778][T17129] device hsr_slave_1 entered promiscuous mode [ 1480.123974][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.135013][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.135095][T17129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1480.144871][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 1.00 [ 1480.144898][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.147784][ T4160] usb 4-1: config 0 descriptor?? [ 1480.194266][T17129] Cannot create hsr debugfs directory [ 1480.303105][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1480.386241][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1480.465533][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1480.586851][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1480.619717][T16030] usb 2-1: USB disconnect, device number 6 [ 1480.639231][T16950] device veth0_macvtap entered promiscuous mode [ 1480.656220][ T4160] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 1480.663337][ T4160] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 1480.674284][ T4160] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 1480.684537][ T4160] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 1480.691634][ T4160] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 1480.693622][T16950] device veth1_macvtap entered promiscuous mode [ 1480.699816][ T4160] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 1480.750467][ T4160] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1480.845860][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.857297][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.867963][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.879205][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.912022][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.930848][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.941053][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.954083][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.964553][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.976079][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.988144][T16950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.002808][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 1481.019387][ T7402] usb 4-1: USB disconnect, device number 10 [ 1481.060580][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1481.075143][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 1481.081983][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1481.101377][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1481.146058][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.172010][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.199424][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.222715][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.270258][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.294977][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.305856][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.342376][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.358904][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.371129][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.382870][T16950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.405136][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1481.418216][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1481.435590][T16950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.448992][T16950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.480227][T16950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.489076][T16950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.587758][T17129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.690497][T17227] device bridge1 entered promiscuous mode [ 1481.857759][T17129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.988059][T10293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.005957][T10293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.007688][T17129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.068862][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.071903][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1482.087316][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.113930][ T6170] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1482.127861][T17129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.181890][T17234] netlink: set zone limit has 8 unknown bytes [ 1482.190450][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1482.363899][ T6170] usb 4-1: Using ep0 maxpacket: 16 [ 1482.484102][ T6170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.506252][T17129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1482.518230][ T6170] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1482.534610][ T6170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.552663][T17129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1482.561766][ T6170] usb 4-1: config 0 descriptor?? [ 1482.590390][T17129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1482.607331][T17129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1482.824197][ T4323] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1482.913762][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.027211][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1483.042069][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1483.048542][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.056246][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.063937][ T4323] usb 3-1: Using ep0 maxpacket: 16 [ 1483.117489][T10161] device hsr_slave_0 left promiscuous mode [ 1483.125918][T10161] device hsr_slave_1 left promiscuous mode [ 1483.133119][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.147852][T10161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.155374][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.166393][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.179454][T10161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.184181][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.197958][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.205579][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.215935][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.216100][T10161] device bridge_slave_1 left promiscuous mode [ 1483.223356][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.223382][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.223405][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.223430][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.239268][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.252592][ T4323] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 1.00 [ 1483.276766][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.285266][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.293354][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.302266][ T4323] usb 3-1: config 0 descriptor?? [ 1483.317948][T10161] device bridge_slave_0 left promiscuous mode [ 1483.327771][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.348725][T10161] device veth1_macvtap left promiscuous mode [ 1483.355332][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.362777][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.371649][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.371980][T10161] device veth0_macvtap left promiscuous mode [ 1483.385344][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.392934][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.403396][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.411278][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.419198][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.427265][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.435146][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.442879][T10161] device veth1_vlan left promiscuous mode [ 1483.449181][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.457199][T10161] device veth0_vlan left promiscuous mode [ 1483.463493][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.472286][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.480595][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.489125][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.505517][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.513256][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.525589][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.538318][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.548651][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.564264][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.571854][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.586074][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.593778][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.611194][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.629686][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.649494][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.662890][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.671023][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.685501][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.693147][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.704947][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.728722][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.746817][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.803211][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.832413][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.855840][ T4323] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1483.863047][ T4323] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1483.888456][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.904737][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.912203][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.928159][ T4323] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1483.939314][ T4323] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1483.951693][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.963201][ T4323] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1483.975421][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1483.991887][ T4323] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 1484.013664][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.041702][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.056550][ T4323] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1484.069192][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.081971][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.090748][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.103913][ T4666] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1484.106317][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.136195][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.163446][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.233653][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.245650][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.253241][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.261195][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.268977][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.280825][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.280875][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.300080][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.307922][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.320371][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.328237][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.336034][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.344163][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.351682][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.354117][ T4666] usb 5-1: Using ep0 maxpacket: 32 [ 1484.359775][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.371828][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.379523][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.387125][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.395546][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.404039][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.411639][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.419176][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.426882][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.434384][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.441802][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.451847][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.459406][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.467064][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.474590][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.483716][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.494051][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.494454][ T4666] usb 5-1: config 0 has no interfaces? [ 1484.502508][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.524015][ T4666] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1484.543430][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.551129][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.559393][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.579830][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.582443][ T4666] usb 5-1: config 0 descriptor?? [ 1484.613434][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.623669][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.631231][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.644069][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.651523][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.659253][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.666730][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.674749][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.684161][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.694159][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.704146][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.713997][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.721432][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.737154][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.744912][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.754187][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.771139][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.780567][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.790760][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.819878][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.828008][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.840021][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.848126][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.854083][ T6315] usb 5-1: USB disconnect, device number 7 [ 1484.856018][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.871640][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.879715][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.892061][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.912481][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.929977][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.954316][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.968084][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.976629][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1484.987451][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.010427][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.042510][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.051094][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.067771][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.094953][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.104156][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.116461][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.127049][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.139394][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.164528][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.194623][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.203733][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.214161][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.223007][T17290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1485.249756][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.257823][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.266186][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.274928][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.283346][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.299928][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.326608][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.334389][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.344417][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.351864][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.360121][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.367860][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.375542][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.384129][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.391555][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.403098][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.454005][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.472818][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.484308][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.492667][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.500896][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.509157][ T6170] hid-generic 0003:0458:5012.0003: unknown main item tag 0x0 [ 1485.528383][ T4210] Bluetooth: hci3: command 0x040f tx timeout [ 1485.548464][ T6170] hid-generic 0003:0458:5012.0003: hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 1485.567428][ T6170] usb 4-1: USB disconnect, device number 11 [ 1485.582190][T13388] usb 3-1: USB disconnect, device number 5 [ 1486.032640][T10161] bond1 (unregistering): Released all slaves [ 1486.096717][T13388] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1486.110026][T17301] fido_id[17301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1486.468216][T13388] usb 3-1: config 0 has no interfaces? [ 1486.491907][T10161] team0 (unregistering): Port device team_slave_1 removed [ 1486.520659][T10161] team0 (unregistering): Port device team_slave_0 removed [ 1486.559536][T10161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.573291][T10161] device bond_slave_1 left promiscuous mode [ 1486.625714][T10161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.635187][T13388] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1486.659863][T13388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.678717][T13388] usb 3-1: Product: syz [ 1486.682938][T13388] usb 3-1: Manufacturer: syz [ 1486.695555][T13388] usb 3-1: SerialNumber: syz [ 1486.704759][T10161] device bond_slave_0 left promiscuous mode [ 1486.718420][T13388] usb 3-1: config 0 descriptor?? [ 1487.037627][T10161] bond0 (unregistering): Released all slaves [ 1487.114968][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1487.158459][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1487.187186][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 1487.214207][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.221383][T10293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.254429][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 1487.406741][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1487.450724][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1487.493448][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1487.543395][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.550612][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.603451][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1487.634658][ T4210] Bluetooth: hci3: command 0x0419 tx timeout [ 1487.752862][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1487.781866][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1487.844197][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1487.934244][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1488.002917][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1488.023441][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1488.075732][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1488.164776][T17129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1488.248023][T17129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1488.323092][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1488.333767][T16030] usb 3-1: USB disconnect, device number 6 [ 1488.342097][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1488.403300][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1488.542542][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 1488.732788][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1489.142819][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1489.189231][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1489.263944][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.146169][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1490.172876][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1490.292499][T17381] ------------[ cut here ]------------ [ 1490.308496][T17381] WARNING: CPU: 1 PID: 17381 at arch/x86/kvm/vmx/vmx.c:1711 vmx_queue_exception+0x2b9/0x470 [ 1490.329195][T17129] device veth0_vlan entered promiscuous mode [ 1490.345118][T17381] Modules linked in: [ 1490.364188][T17381] CPU: 1 PID: 17381 Comm: syz.1.3109 Not tainted 5.15.184-syzkaller #0 [ 1490.378412][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1490.396001][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1490.421993][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1490.469201][T17381] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 1490.473392][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1490.483765][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1490.495615][T17129] device veth1_vlan entered promiscuous mode [ 1490.508494][T17381] Code: 01 00 00 e8 09 91 57 00 eb 0c e8 02 91 57 00 eb 05 e8 fb 90 57 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 90 57 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 6e [ 1490.602352][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1490.606991][T17381] RSP: 0018:ffffc90002eef590 EFLAGS: 00010287 [ 1490.628791][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1490.632429][T17381] RAX: ffffffff81203059 RBX: ffff88806434c000 RCX: 0000000000080000 [ 1490.678631][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1490.690252][T17381] RDX: ffffc90015d21000 RSI: 0000000000000464 RDI: 0000000000000465 [ 1490.710011][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1490.720537][T17381] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad1556 [ 1490.749498][T17129] device veth0_macvtap entered promiscuous mode [ 1490.763195][T17381] R10: fffffbfff1ad1556 R11: 1ffffffff1ad1555 R12: ffff88806434e6fc [ 1490.792462][T17129] device veth1_macvtap entered promiscuous mode [ 1490.804983][T17381] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000080000800 [ 1490.831584][T17381] FS: 00007f48a08806c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1490.875013][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.889163][T17381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1490.907444][T17381] CR2: 000020000000f000 CR3: 000000007956f000 CR4: 00000000003526e0 [ 1490.920284][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.940442][T17381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1490.957102][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.980979][T17381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1490.998150][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.010439][T17381] Call Trace: [ 1491.018419][T17381] [ 1491.027146][T17381] ? kvm_inject_exception+0x15f/0x320 [ 1491.036170][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.056253][T17381] vcpu_enter_guest+0x844/0x70e0 [ 1491.069271][T17381] ? __lock_acquire+0x7c60/0x7c60 [ 1491.080338][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.096786][T17381] ? local_bh_enable+0x20/0x20 [ 1491.110771][T17381] ? is_bpf_text_address+0x254/0x270 [ 1491.118603][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.136047][T17381] ? __kernel_text_address+0x9a/0x100 [ 1491.149565][T17381] ? mark_lock+0x94/0x320 [ 1491.158241][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.176222][T17381] ? __lock_acquire+0x13ad/0x7c60 [ 1491.189336][T17381] ? kfree+0xef/0x2a0 [ 1491.196894][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.214755][T17381] ? mark_lock+0x94/0x320 [ 1491.227417][T17381] ? __lock_acquire+0x12d9/0x7c60 [ 1491.237411][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.255381][T17381] ? kasan_set_track+0x62/0x70 [ 1491.268250][T17381] ? kasan_set_track+0x4b/0x70 [ 1491.280440][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.289423][T17381] ? security_file_ioctl+0x6c/0xa0 [ 1491.307164][T17381] ? verify_lock_unused+0x140/0x140 [ 1491.323445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1491.326876][T17381] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 1491.345880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1491.351091][T17381] ? mark_lock+0x94/0x320 [ 1491.371217][T17381] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1491.390046][T17381] ? __vmx_interrupt_blocked+0x192/0x1e0 [ 1491.403202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1491.419375][T17381] ? vmx_check_nested_events+0xd29/0x2370 [ 1491.434964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1491.445503][T17381] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1491.456591][T17381] ? read_lock_is_recursive+0x10/0x10 [ 1491.474874][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.488911][T17381] ? handle_vmfunc+0xfb0/0xfb0 [ 1491.499605][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.517642][T17381] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 1491.539299][T17381] kvm_vcpu_ioctl+0x887/0xb80 [ 1491.547609][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.563962][T17381] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 1491.581128][T17381] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1491.588648][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.606256][T17381] ? security_file_ioctl+0x7c/0xa0 [ 1491.620684][T17381] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 1491.629077][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.646632][T17381] __se_sys_ioctl+0xfa/0x170 [ 1491.660442][T17381] do_syscall_64+0x4c/0xa0 [ 1491.666736][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.681333][T17381] ? clear_bhb_loop+0x30/0x80 [ 1491.696526][T17381] ? clear_bhb_loop+0x30/0x80 [ 1491.702637][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.723451][T17381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1491.748810][T17381] RIP: 0033:0x7f48a2a18969 [ 1491.753923][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.778122][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.833994][T17129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.879898][T17129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.892479][T17381] RSP: 002b:00007f48a0880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.913363][T17381] RAX: ffffffffffffffda RBX: 00007f48a2c3ffa0 RCX: 00007f48a2a18969 [ 1491.932960][T17381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1491.943516][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.953246][T17381] RBP: 00007f48a2a9aab1 R08: 0000000000000000 R09: 0000000000000000 [ 1491.974792][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.982956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1492.007504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1492.021001][T17381] R13: 0000000000000000 R14: 00007f48a2c3ffa0 R15: 00007fff680535e8 [ 1492.046084][T17381] [ 1492.048420][T17129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.049377][T17381] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1492.065288][T17381] CPU: 1 PID: 17381 Comm: syz.1.3109 Not tainted 5.15.184-syzkaller #0 [ 1492.067536][T17129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.073550][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1492.073567][T17381] Call Trace: [ 1492.073577][T17381] [ 1492.073587][T17381] dump_stack_lvl+0x168/0x230 [ 1492.073617][T17381] ? show_regs_print_info+0x20/0x20 [ 1492.073637][T17381] ? load_image+0x3b0/0x3b0 [ 1492.073668][T17381] panic+0x2c9/0x7f0 [ 1492.073698][T17381] ? bpf_jit_dump+0xd0/0xd0 [ 1492.073731][T17381] ? vmx_queue_exception+0x2b9/0x470 [ 1492.073755][T17381] __warn+0x248/0x2b0 [ 1492.073778][T17381] ? vmx_queue_exception+0x2b9/0x470 [ 1492.073801][T17381] report_bug+0x1b7/0x2e0 [ 1492.073828][T17381] handle_bug+0x3a/0x70 [ 1492.073864][T17381] exc_invalid_op+0x16/0x40 [ 1492.073886][T17381] asm_exc_invalid_op+0x16/0x20 [ 1492.073906][T17381] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 1492.073930][T17381] Code: 01 00 00 e8 09 91 57 00 eb 0c e8 02 91 57 00 eb 05 e8 fb 90 57 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 90 57 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 6e [ 1492.073950][T17381] RSP: 0018:ffffc90002eef590 EFLAGS: 00010287 [ 1492.073972][T17381] RAX: ffffffff81203059 RBX: ffff88806434c000 RCX: 0000000000080000 [ 1492.073988][T17381] RDX: ffffc90015d21000 RSI: 0000000000000464 RDI: 0000000000000465 [ 1492.074004][T17381] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad1556 [ 1492.074020][T17381] R10: fffffbfff1ad1556 R11: 1ffffffff1ad1555 R12: ffff88806434e6fc [ 1492.074037][T17381] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000080000800 [ 1492.074061][T17381] ? vmx_queue_exception+0x2b9/0x470 [ 1492.074089][T17381] ? kvm_inject_exception+0x15f/0x320 [ 1492.074118][T17381] vcpu_enter_guest+0x844/0x70e0 [ 1492.074151][T17381] ? __lock_acquire+0x7c60/0x7c60 [ 1492.074181][T17381] ? local_bh_enable+0x20/0x20 [ 1492.074219][T17381] ? is_bpf_text_address+0x254/0x270 [ 1492.074250][T17381] ? __kernel_text_address+0x9a/0x100 [ 1492.074279][T17381] ? mark_lock+0x94/0x320 [ 1492.074306][T17381] ? __lock_acquire+0x13ad/0x7c60 [ 1492.272335][T17381] ? kfree+0xef/0x2a0 [ 1492.276322][T17381] ? mark_lock+0x94/0x320 [ 1492.280656][T17381] ? __lock_acquire+0x12d9/0x7c60 [ 1492.285689][T17381] ? kasan_set_track+0x62/0x70 [ 1492.290452][T17381] ? kasan_set_track+0x4b/0x70 [ 1492.295227][T17381] ? security_file_ioctl+0x6c/0xa0 [ 1492.300347][T17381] ? verify_lock_unused+0x140/0x140 [ 1492.305565][T17381] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 1492.310795][T17381] ? mark_lock+0x94/0x320 [ 1492.315343][T17381] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1492.321350][T17381] ? __vmx_interrupt_blocked+0x192/0x1e0 [ 1492.327000][T17381] ? vmx_check_nested_events+0xd29/0x2370 [ 1492.332725][T17381] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1492.338098][T17381] ? read_lock_is_recursive+0x10/0x10 [ 1492.343472][T17381] ? handle_vmfunc+0xfb0/0xfb0 [ 1492.348241][T17381] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 1492.353821][T17381] kvm_vcpu_ioctl+0x887/0xb80 [ 1492.358520][T17381] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 1492.364172][T17381] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1492.369105][T17381] ? security_file_ioctl+0x7c/0xa0 [ 1492.374216][T17381] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 1492.379866][T17381] __se_sys_ioctl+0xfa/0x170 [ 1492.384486][T17381] do_syscall_64+0x4c/0xa0 [ 1492.388904][T17381] ? clear_bhb_loop+0x30/0x80 [ 1492.393582][T17381] ? clear_bhb_loop+0x30/0x80 [ 1492.398254][T17381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.404147][T17381] RIP: 0033:0x7f48a2a18969 [ 1492.408560][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.428179][T17381] RSP: 002b:00007f48a0880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.436592][T17381] RAX: ffffffffffffffda RBX: 00007f48a2c3ffa0 RCX: 00007f48a2a18969 [ 1492.444559][T17381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1492.452524][T17381] RBP: 00007f48a2a9aab1 R08: 0000000000000000 R09: 0000000000000000 [ 1492.460492][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.468462][T17381] R13: 0000000000000000 R14: 00007f48a2c3ffa0 R15: 00007fff680535e8 [ 1492.476443][T17381] [ 1492.479714][T17381] Kernel Offset: disabled [ 1492.488212][T17381] Rebooting in 86400 seconds..