last executing test programs: 1m20.397292746s ago: executing program 3 (id=208): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) inotify_init() 1m19.541220348s ago: executing program 3 (id=211): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_io_uring_setup(0x4fae, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fcntl$dupfd(r5, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) clock_gettime(0x0, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) 1m17.231783672s ago: executing program 3 (id=221): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20088004) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf697, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) syz_emit_ethernet(0x5d9, &(0x7f0000000a40)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000110001000000000000000000ffffffff001e00000000000000000000000000000a0000000c"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1m14.939569015s ago: executing program 3 (id=229): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==") mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b700000000c300002f000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e"], &(0x7f0000003ff6)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3}, {0xffffffff}]}) 1m12.796093697s ago: executing program 3 (id=233): socket(0x11, 0x80000, 0x3) r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x4024044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b1a, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m11.27030701s ago: executing program 3 (id=237): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="0c077e9f618ed0e979a5f0144d0f9edb0b925bdfc0d72682b1454d1a568131ae2fda15ddd50d4e2a61680dd0cd2cba250f002f000000000000882e2b81eba787e2318a5d7f11cdb6acd824e6fca83f0f5d433f0db201d485fbd2213281ef54a5bfd8f73e01eee37445a6c11f83ba8d09", 0x70}], 0x1) 1m11.133175611s ago: executing program 32 (id=237): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="0c077e9f618ed0e979a5f0144d0f9edb0b925bdfc0d72682b1454d1a568131ae2fda15ddd50d4e2a61680dd0cd2cba250f002f000000000000882e2b81eba787e2318a5d7f11cdb6acd824e6fca83f0f5d433f0db201d485fbd2213281ef54a5bfd8f73e01eee37445a6c11f83ba8d09", 0x70}], 0x1) 14.640194808s ago: executing program 2 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r2, 0x0, 0x0, 0x2c2, 0x0, 0x0) 14.639466128s ago: executing program 5 (id=370): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xa30000, 0x6, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980929, 0x8000, '\x00', @p_u16=&(0x7f0000000180)=0x7f}}) 14.229772345s ago: executing program 2 (id=371): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x0, 0x1, 0x1, 0x2}, 0xcf) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) 13.800874121s ago: executing program 0 (id=372): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 12.282197034s ago: executing program 0 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 10.963951884s ago: executing program 5 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) mprotect(&(0x7f000032a000/0x2000)=nil, 0x2000, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.819513506s ago: executing program 0 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x7da, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4811) 10.517513341s ago: executing program 1 (id=378): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x3, @mcast2, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="44a92a813846c8a2296d7f3271b8a1ceebf3a2b7c63362dbe3863da67dca97dc73b2d1176f094ab5751155933c6b4f024f6b7e59899637ece2682dbf1f0b603847931aa5b1663a3d5bcfafd4a61ebcd25682fa3c405cf71c0aaeda1e7e47fdf6f4e3be25197b98bb31439c309deace390e1a29d23c8c0963c120c0b2b64d4823bd23f605384b0aec53d4d967debbe550844ddd6c27220830c0f0691442c9d59037c0ef266d86944836a4fa1bd243aecf181c646c45ae69a59dd977bd3071c323c0f049da7ba803727d11f4d4a81561e5b2ef7e1640eb1c0b3a", 0xd9}, {&(0x7f00000003c0)="10aeac32b2659ae6355498562384194efb2d18b4db664c30bc2a659027c82defdaede7a018f68625dbc92cfe142faaf94f8d361d800c699bd139e14f02f60388eb8bceecc508086cdc7d1acc72adf657b7939dfd0a20888517ab3a4b3ec7348e1cdc39c8a7dc84bce571f6c8f129c8eb770ad3439d83477493bdb05c9ea29081ef3585c8fb5d37575225b67a004a2e80a2abb0632760ceae53dc8d845dab29484cffcba1853c3a179ce0bb60", 0xac}, {&(0x7f00000001c0)="fd9e4d528bfa", 0x6}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="86856a81d1d16d68f54c", 0xa}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000500000000000000300000000000000029000000370000002c02000000000000071000000001020501000e000000000000000000000000005800000000000000290000003900000002080003000000002001000000000000000000000000000000000000000000000000ffff0a0101020000000000002000000000000000000120010000000000000000000000000001952b296c27b0b4062647d649e2e3bb868c0930c4320d7d0cd37352f4a40697d5162cbf0573fa3fcae8e20af0f50c575d62ae7ab3e3c4596d43487c27c798f6"], 0xa0}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0xadd, @private2, 0x4852e66e}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="343a379c4653e16d19acd811a05a935b4ae549555c80eda0d098e6ab5920d76999bd3b61326635d0", 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="0af3d4b17ef0305647a0dcf423be1f18d1b03c0af94f9a79fc127c64255663d6b99dab62d0cda6c08d087ec879c409f17ca5827347f895a73fe93791459e7e8fe9f2e9d0caca415b42ed65a9f791c07b34a59bbec792e31f5601095878e28dd7bd6922d6f12646de93dc90543924d3613781da13a1802f1c0017abb40daed0e66f6bc8b86b", 0x85}, {&(0x7f0000000900)="baa433cbc31c236ebc59abbd764d3eda6bc4be7383991e15eced2a7b8c1ffb48741a14a88019ab6fcdb768260a", 0x2d}, {&(0x7f0000000940)="a102e2c1a49b2ef13895febc0521a01d7cfd28764120900d4de76fc438fb2702569c5ea894de306d9110ea3ec13b7a7190e0b6d8a8ebad1db635", 0x3a}], 0x3}}], 0x3, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) 10.498517561s ago: executing program 2 (id=379): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x46f2, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x3, 0x7f}, &(0x7f0000000100)=0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="01072bbd7000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='omfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800000) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[]) 9.068918703s ago: executing program 0 (id=381): syz_clone3(&(0x7f0000002c00)={0x9828000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x4000}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x110) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet6(r1, &(0x7f0000000200)="d34c4b2fd7d09e145902dcf7495c823dee541dd353f2d6eab93d8a3b0f7059fcee67ca6699e3465a77b5d8696d9a5e1e7d32e6afcc8e5ffe4d6561460c4ecb134b88f1ceeaa3ade17f47a702f5ab3a5a3232f7906b4deced3e43332e7fb21e65728fd4b026dec1d0a32f507b2d8628f990c4b7bf7791dd4649db203159614af3", 0x80, 0x20000040, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)='grpquota') 9.068505763s ago: executing program 1 (id=382): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x0, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x29, 0x0, 0x4, 0x0, 0xb9, 0x40, 0x5}], "cb78b2e77777e850"}}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) syz_io_uring_setup(0x9f, &(0x7f0000000640)={0x0, 0x80000000, 0x1000, 0x2, 0x24d}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="12010000a13de30840205029"], 0x0) 8.469242332s ago: executing program 4 (id=383): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) inotify_init() 8.301518054s ago: executing program 5 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x2410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0x6a98047402e98331}, 0x14}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r7, &(0x7f0000002380), 0x0, 0x100) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) syz_open_procfs(r8, 0x0) rt_sigqueueinfo(r8, 0x32, &(0x7f0000000080)={0x3c, 0xe, 0x80}) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 7.123076512s ago: executing program 2 (id=385): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff", 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 7.082079153s ago: executing program 0 (id=386): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f65"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 7.020243354s ago: executing program 5 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) socket$nl_route(0x10, 0x3, 0x0) 7.019786054s ago: executing program 4 (id=388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 5.92903523s ago: executing program 2 (id=389): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x0, 0x1, 0x1, 0x2}, 0xcf) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) 5.91130391s ago: executing program 0 (id=390): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x1000}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_io_uring_setup(0x4fae, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) clock_gettime(0x0, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) 5.884434191s ago: executing program 4 (id=391): socket(0x11, 0x80000, 0x3) r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x4024044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b1a, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.870925151s ago: executing program 1 (id=392): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x3, @mcast2, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="44a92a813846c8a2296d7f3271b8a1ceebf3a2b7c63362dbe3863da67dca97dc73b2d1176f094ab5751155933c6b4f024f6b7e59899637ece2682dbf1f0b603847931aa5b1663a3d5bcfafd4a61ebcd25682fa3c405cf71c0aaeda1e7e47fdf6f4e3be25197b98bb31439c309deace390e1a29d23c8c0963c120c0b2b64d4823bd23f605384b0aec53d4d967debbe550844ddd6c27220830c0f0691442c9d59037c0ef266d86944836a4fa1bd243aecf181c646c45ae69a59dd977bd3071c323c0f049da7ba803727d11f4d4a81561e5b2ef7e1640eb1c0b3a", 0xd9}, {&(0x7f00000003c0)="10aeac32b2659ae6355498562384194efb2d18b4db664c30bc2a659027c82defdaede7a018f68625dbc92cfe142faaf94f8d361d800c699bd139e14f02f60388eb8bceecc508086cdc7d1acc72adf657b7939dfd0a20888517ab3a4b3ec7348e1cdc39c8a7dc84bce571f6c8f129c8eb770ad3439d83477493bdb05c9ea29081ef3585c8fb5d37575225b67a004a2e80a2abb0632760ceae53dc8d845dab29484cffcba1853c3a179ce0bb60", 0xac}, {&(0x7f00000001c0)="fd9e4d528bfa", 0x6}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="86856a81d1d16d68f54c", 0xa}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000500000000000000300000000000000029000000370000002c02000000000000071000000001020501000e000000000000000000000000005800000000000000290000003900000002080003000000002001000000000000000000000000000000000000000000000000ffff0a0101020000000000002000000000000000000120010000000000000000000000000001952b296c27b0b4062647d649e2e3bb868c0930c4320d7d0cd37352f4a40697d5162cbf0573fa3fcae8e20af0f50c575d62ae7ab3e3c4596d43487c27c798f6"], 0xa0}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0xadd, @private2, 0x4852e66e}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="343a379c4653e16d19acd811a05a935b4ae549555c80eda0d098e6ab5920d76999bd3b61326635d0", 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="0af3d4b17ef0305647a0dcf423be1f18d1b03c0af94f9a79fc127c64255663d6b99dab62d0cda6c08d087ec879c409f17ca5827347f895a73fe93791459e7e8fe9f2e9d0caca415b42ed65a9f791c07b34a59bbec792e31f5601095878e28dd7bd6922d6f12646de93dc90543924d3613781da13a1802f1c0017abb40daed0e66f6bc8b86b", 0x85}, {&(0x7f0000000900)="baa433cbc31c236ebc59abbd764d3eda6bc4be7383991e15eced2a7b8c1ffb48741a14a88019ab6fcdb768260a", 0x2d}, {&(0x7f0000000940)="a102e2c1a49b2ef13895febc0521a01d7cfd28764120900d4de76fc438fb2702569c5ea894de306d9110ea3ec13b7a7190e0b6d8a8ebad1db635", 0x3a}], 0x3}}], 0x3, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) 5.851389751s ago: executing program 5 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x7da, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4811) 2.435616233s ago: executing program 1 (id=394): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xa30000, 0x6, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980929, 0x8000, '\x00', @p_u16=&(0x7f0000000180)=0x7f}}) 2.361598754s ago: executing program 5 (id=395): socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0xa}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) pwritev2(r3, &(0x7f00000001c0), 0x2, 0x7fff, 0x3, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.173451827s ago: executing program 4 (id=396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 1.284128131s ago: executing program 4 (id=397): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x25dfdbfe, {{0x5}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x6}}}}}, 0x30}}, 0x20008140) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x20040001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x307, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x9, {{0xa, 0x0, 0x3a, @mcast2}}, 0x1}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioprio_set$pid(0x2, r2, 0x0) 1.283666211s ago: executing program 1 (id=398): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100000020001700010000002bbd70002cbd70002cbd70002dbd700000006801090000000c0015005b0735000500000008001800090000002c001300000000000000000000000000000000010a010102000000000000000000000000000000000a000000"], 0xb0}}, 0x884) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r8}, 0x18) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r11 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x80, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) io_uring_enter(r11, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r9, r10, 0x0) 1.213913642s ago: executing program 2 (id=399): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000100), 0x3, 0x45e, &(0x7f0000000440)="$eJzs281vVFUbAPDn3mkLvMDbivjBh1pEY+NHS0GRRBdoNHGBiYkudNm0hSCFGloTIUTBBa6MMXFvXPovuNKNMa5M3OrekBDDBtDNNbdzbzsznRnaYcoA8/sltz1nzrlzzjP3nplz75kJoG+N5n+SiG0R8UdEDFez9RVGq/9uXLswffPahekksuzdv5OletevXZguq5b7bS0yY2lEmiSxp0m7C+fOn5qam5s9W+QnFk9/NLFw7vwLJ09PnZg9MXvm4JEjLx6afPnwwZe6Emfep+u7P53fu+utD75++9iXdfE3xNElo+0Kn86yLjfXW9tr0snAquLNd7QzrFklIvLDNbg0/oejEisHbzje/LynnQM2VJZl2dbWxRcz4D6WRH3ekId+UX7Q59e/5dY4CTi6cdOPnrv6WvUCKI/7RrFVSwYiLeoMNlzfdtNoRLx/8Z9v8y025j4EAECdH/P5z/PN5n9pPFxT7//F2tBIRDwQETsi4sGI2BkRD0Us1X0kIh5dZ/uNiySr5z/plY4CW6N8/vdqsbZVP/8rZ38xUily25fiH0yOn5ybPVC8JmMxuCnPT7Zp46c3fv+qVVnt/C/f8vbLuWDRjysDm+r3mZlanLqdmGtd/TfLsoFm8SfLKwFJROyKiN0dtnHy2e/3tiq7dfxtrF5nWrfsu4hnqsf/YjTEX0rar09ObI652QMT5Vmx2q+/XX6nVfu3FX8XXL0U8b+m5/9y/CNJ7XrtwvrbuPznFy2vaTo9/4eS95bSQ8Vjn0wtLp6djBhKjlU7Xfv4wZV9y3xZP49/bH/z8b8jVl6JPRGRn8SPRcTjEfFE0fd9EfFkROxvE/8vrz/1Yefxb6w8/pl1Hf+VxFA0PtI8UTn18w91jY6siv9mq/hfqdltrPi/lve/tfSrs7MZAAAA7j1pRGyLJB1fTqfp+Hj1+/I7I9K5+YXF547Pf3xmpvobgZEYTMs7XcM190Mni8v6av5SRFS/WlCWHyruG39T2bKUH5+en5vpdfDQ57a2GP+5vyq97h2w4bqwjgbco4x/6F/GP/Qv4x/6V5Pxv6UX/QDuvGaf/5/1oB/Andcw/i37QR9x/Q/9y/iH/mX8Q19a2BK3/pF820T5TB3uft8mYrDrz7zvaOVwz+NaPu7pXdGN209klYi7oBt3W6K370sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8l8AAAD//yZb4PM=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 91.014119ms ago: executing program 4 (id=400): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 0s ago: executing program 1 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x8, 0x200, 0x0, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 50.861790][ T4159] cgroup: Unknown subsys name 'net' [ 50.963967][ T4159] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.115209][ T4159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.449494][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 53.479038][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 53.529388][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 53.549470][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 53.639550][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.646688][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.655139][ T4170] device bridge_slave_0 entered promiscuous mode [ 53.674114][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 53.688661][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.695798][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.703970][ T4170] device bridge_slave_1 entered promiscuous mode [ 53.719672][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.726760][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.734916][ T4177] device bridge_slave_0 entered promiscuous mode [ 53.772671][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.779859][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.787815][ T4177] device bridge_slave_1 entered promiscuous mode [ 53.803306][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.810458][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.818316][ T4173] device bridge_slave_0 entered promiscuous mode [ 53.858597][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.867927][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.874992][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.883178][ T4173] device bridge_slave_1 entered promiscuous mode [ 53.896281][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.905751][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.913335][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.921037][ T4174] device bridge_slave_0 entered promiscuous mode [ 53.930313][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.961079][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.978327][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.985392][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.993971][ T4174] device bridge_slave_1 entered promiscuous mode [ 54.024088][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.031258][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.039023][ T4169] device bridge_slave_0 entered promiscuous mode [ 54.061162][ T4170] team0: Port device team_slave_0 added [ 54.076652][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.087958][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.097110][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.104480][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.112184][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.121086][ T4177] team0: Port device team_slave_0 added [ 54.136980][ T4170] team0: Port device team_slave_1 added [ 54.143874][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.154627][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.170466][ T4177] team0: Port device team_slave_1 added [ 54.178782][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.220662][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.240178][ T4173] team0: Port device team_slave_0 added [ 54.247414][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.254977][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.280887][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.315087][ T4173] team0: Port device team_slave_1 added [ 54.321371][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.328746][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.354678][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.373845][ T4174] team0: Port device team_slave_0 added [ 54.379972][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.386920][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.412966][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.443262][ T4174] team0: Port device team_slave_1 added [ 54.450089][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.457044][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.483040][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.495999][ T4169] team0: Port device team_slave_0 added [ 54.504200][ T4169] team0: Port device team_slave_1 added [ 54.539867][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.546826][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.573107][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.593465][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.601452][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.627847][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.650546][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.657696][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.683668][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.698816][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.705768][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.732301][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.743761][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.751003][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.777016][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.791875][ T4170] device hsr_slave_0 entered promiscuous mode [ 54.798578][ T4170] device hsr_slave_1 entered promiscuous mode [ 54.818163][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.825124][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.851474][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.900137][ T4177] device hsr_slave_0 entered promiscuous mode [ 54.906855][ T4177] device hsr_slave_1 entered promiscuous mode [ 54.913487][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.921675][ T4177] Cannot create hsr debugfs directory [ 54.936313][ T4173] device hsr_slave_0 entered promiscuous mode [ 54.943111][ T4173] device hsr_slave_1 entered promiscuous mode [ 54.949544][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.957128][ T4173] Cannot create hsr debugfs directory [ 54.987697][ T4174] device hsr_slave_0 entered promiscuous mode [ 54.994536][ T4174] device hsr_slave_1 entered promiscuous mode [ 55.002303][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.009936][ T4174] Cannot create hsr debugfs directory [ 55.028277][ T4169] device hsr_slave_0 entered promiscuous mode [ 55.034725][ T4169] device hsr_slave_1 entered promiscuous mode [ 55.041296][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.049116][ T4169] Cannot create hsr debugfs directory [ 55.168614][ T4180] Bluetooth: hci2: command 0x0409 tx timeout [ 55.175392][ T4180] Bluetooth: hci3: command 0x0409 tx timeout [ 55.182000][ T4180] Bluetooth: hci1: command 0x0409 tx timeout [ 55.188630][ T4180] Bluetooth: hci4: command 0x0409 tx timeout [ 55.194734][ T4180] Bluetooth: hci0: command 0x0409 tx timeout [ 55.352339][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.364150][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.373246][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.383075][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.440926][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.455600][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.477340][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.486659][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.515698][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.525144][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.567199][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.575641][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.622695][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.632082][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.660553][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.672763][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.705377][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.714262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.723979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.735098][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.755658][ T4173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.764534][ T4173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.773988][ T4173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.784782][ T4173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.814288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.824259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.833384][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.840583][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.850072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.875867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.885339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.894984][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.902093][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.918787][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.947290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.959132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.969588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.979384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.990177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.998662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.006995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.025641][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.058337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.066220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.075095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.084017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.093668][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.100744][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.114385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.128624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.137202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.146010][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.153111][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.173369][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.185044][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.209654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.219067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.228182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.236527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.244755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.253916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.263228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.275168][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.290085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.300716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.321796][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.337771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.346255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.357028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.366080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.374881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.388958][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.403805][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.415010][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.432969][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.441974][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.451783][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.460659][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.475127][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.484600][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.492616][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.504025][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.522607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.540832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.554903][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.562054][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.577684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.585444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.600218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.618954][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.635598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.646839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.655779][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.662917][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.671828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.688218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.696763][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.704001][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.715319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.723768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.732306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.740542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.748721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.757114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.786153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.795550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.803696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.812927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.821579][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.828682][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.836303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.845673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.854134][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.861201][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.870139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.878668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.886996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.895567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.904194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.912754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.923010][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.930132][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.940386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.949377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.966963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.975398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.983590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.993774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.003013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.012653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.023785][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.043358][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.052485][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.061226][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.071524][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.083029][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.092320][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.099789][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.108201][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.130776][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.148300][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.179940][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.190938][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.201458][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.216547][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.228639][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.240114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.256655][ T4170] device veth0_vlan entered promiscuous mode [ 57.263859][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 57.268403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.277553][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 57.277673][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 57.299192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.307760][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 57.313854][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 57.350356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.369426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.383296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.392552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.402285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.412148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.421474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.430595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.439390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.449587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.459127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.474341][ T4170] device veth1_vlan entered promiscuous mode [ 57.496697][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.507060][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.523140][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.545258][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.559105][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.567303][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.575589][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.583562][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.591920][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.601073][ T4174] device veth0_vlan entered promiscuous mode [ 57.613654][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.643407][ T4174] device veth1_vlan entered promiscuous mode [ 57.658470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.674524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.684712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.709102][ T4170] device veth0_macvtap entered promiscuous mode [ 57.744393][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.756389][ T4170] device veth1_macvtap entered promiscuous mode [ 57.769309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.784420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.794481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.803492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.811198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.827159][ T4174] device veth0_macvtap entered promiscuous mode [ 57.855866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.864770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.875578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.885546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.898528][ T4174] device veth1_macvtap entered promiscuous mode [ 57.909132][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.927895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.935910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.945128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.955657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.964713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.973279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.981800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.990005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.997414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.005354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.016034][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.026607][ T4177] device veth0_vlan entered promiscuous mode [ 58.039383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.049618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.061479][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.071091][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.079838][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.088674][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.113737][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.124626][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.136469][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.150761][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.183330][ T4177] device veth1_vlan entered promiscuous mode [ 58.194534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.204335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.215166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.227384][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.239402][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.250997][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.302575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.313877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.322808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.332153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.340843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.356672][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.366654][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.376547][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.385463][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406398][ T4173] device veth0_vlan entered promiscuous mode [ 58.433317][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.455588][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.486143][ T4177] device veth0_macvtap entered promiscuous mode [ 58.517020][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.527338][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.535283][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.544070][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.552904][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.563630][ T4177] device veth1_macvtap entered promiscuous mode [ 58.582029][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.599952][ T4173] device veth1_vlan entered promiscuous mode [ 58.610085][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.628999][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.675436][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.684039][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.689153][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.702510][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.713668][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.724286][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.735828][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.744274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.753788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.763617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.771604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.780236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.822566][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.835153][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.845291][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.856006][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.869585][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.877733][ T4173] device veth0_macvtap entered promiscuous mode [ 58.885482][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.895342][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.905512][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.915168][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.924756][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.934175][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.957282][ T4169] device veth0_vlan entered promiscuous mode [ 58.975759][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.984755][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.993771][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.003279][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.015667][ T4173] device veth1_macvtap entered promiscuous mode [ 59.026702][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.053774][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.092820][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.106341][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.116805][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.129215][ T4169] device veth1_vlan entered promiscuous mode [ 59.130866][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.157132][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.193805][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.265413][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.294498][ T4253] xt_l2tp: invalid flags combination: 8 [ 59.320696][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 59.349547][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 59.396236][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.446103][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 59.463955][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.488640][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 59.547299][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 59.921704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.016279][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.045350][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.066976][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.091379][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.124820][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.136364][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.160957][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.203240][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.216927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.230762][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.235804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.561668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.636091][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.709210][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.809932][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.947185][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.024165][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.036006][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.050744][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.079106][ T4169] device veth0_macvtap entered promiscuous mode [ 61.087143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.100795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.110119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.121343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.135412][ T4173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.145647][ T4173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.154596][ T4173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.165525][ T4173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.174429][ T4217] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 61.194416][ T4169] device veth1_macvtap entered promiscuous mode [ 61.206111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.301974][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.311177][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.313449][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.331130][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.341308][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.352922][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.363785][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.374485][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.384382][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.395057][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.405422][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 61.413500][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.443220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.456077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.469869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.478454][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 61.496785][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.509383][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.519715][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.530592][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.540512][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.551435][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.562420][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 61.567198][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.569583][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 61.579567][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.590566][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 61.596881][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.607636][ T4217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.625691][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.632242][ T4217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 61.656732][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.658532][ T4217] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 61.673820][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.682480][ T4217] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 61.687864][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.721156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.730806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.751133][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.797943][ T4217] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.807036][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.807140][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.837415][ T4217] usb 2-1: SerialNumber: syz [ 61.896818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.908449][ T4265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.915734][ T4265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.917135][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.939664][ T4217] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 61.996291][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.004755][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.026904][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.060631][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.072317][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.109868][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.138291][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.147135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.300644][ T4277] device pim6reg1 entered promiscuous mode [ 62.451230][ T4281] input: syz0 as /devices/virtual/input/input5 [ 62.589789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.605396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.614371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.704609][ T150] block nbd4: Attempted send on invalid socket [ 62.711893][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.725943][ T150] block nbd4: Attempted send on invalid socket [ 62.732357][ T150] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.744368][ T4287] Mount JFS Failure: -5 [ 62.748941][ T4287] jfs_mount failed w/return code = -5 [ 62.837890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.896548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.918064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.217491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.369185][ T4217] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 63.433875][ T4217] usb 2-1: USB disconnect, device number 2 [ 63.859389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.897464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.913159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.517748][ T4217] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.030289][ T4303] trusted_key: encrypted_key: key user:syz not found [ 65.557482][ T4217] usb 2-1: device descriptor read/64, error -71 [ 65.957734][ T4217] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 66.447896][ T4217] usb 2-1: device descriptor read/64, error -71 [ 66.580487][ T4217] usb usb2-port1: attempt power cycle [ 67.776091][ T150] block nbd1: Attempted send on invalid socket [ 67.782415][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.794878][ T150] block nbd1: Attempted send on invalid socket [ 67.801114][ T150] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.812425][ T4341] Mount JFS Failure: -5 [ 67.816675][ T4341] jfs_mount failed w/return code = -5 [ 67.992293][ T4337] input: syz0 as /devices/virtual/input/input7 [ 68.354470][ T4180] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 69.877908][ T4180] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 70.037629][ T4180] usb 1-1: can't read configurations, error -71 [ 71.006425][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.013219][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.313887][ T4367] IPVS: length: 4096 != 17667290688 [ 71.352829][ T4380] input: syz0 as /devices/virtual/input/input9 [ 71.608125][ T4246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.783153][ T1454] block nbd2: Attempted send on invalid socket [ 71.844784][ T1454] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.864821][ T1454] block nbd2: Attempted send on invalid socket [ 71.871266][ T1454] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.882664][ T4390] Mount JFS Failure: -5 [ 71.887044][ T4390] jfs_mount failed w/return code = -5 [ 72.805745][ T4246] usb 4-1: device descriptor read/64, error -71 [ 73.660943][ T4396] ODEBUG: Out of memory. ODEBUG disabled [ 73.834295][ T4396] syz.4.40 (4396): drop_caches: 1 [ 74.099555][ T4398] sched: RT throttling activated [ 74.147695][ T4246] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.368571][ T4217] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.932793][ T4217] usb 3-1: device not accepting address 2, error -71 [ 76.267809][ T1325] cfg80211: failed to load regulatory.db [ 77.471814][ T4437] syz.1.52 (4437): drop_caches: 1 [ 77.517341][ T4437] syz.1.52 (4437): drop_caches: 1 [ 77.522566][ T1325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.768307][ T1325] usb 1-1: Using ep0 maxpacket: 8 [ 77.909118][ T4439] IPVS: length: 4096 != 17667290688 [ 78.646242][ T1325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.707532][ T1325] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 79.019055][ T1325] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 80.191077][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.200706][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.346180][ T1325] usb 1-1: Product: syz [ 80.363184][ T1325] usb 1-1: Manufacturer: syz [ 80.447598][ T23] usb 4-1: device descriptor read/64, error -71 [ 80.717627][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.851711][ T1325] usb 1-1: SerialNumber: syz [ 80.877767][ T1325] usb 1-1: config 0 descriptor?? [ 80.899345][ T4473] overlayfs: failed to get inode (-116) [ 80.906236][ T4473] overlayfs: failed to get inode (-116) [ 80.912201][ T1325] usb 1-1: can't set config #0, error -71 [ 80.928608][ T1325] usb 1-1: USB disconnect, device number 4 [ 80.935636][ T4473] overlayfs: failed to get inode (-116) [ 80.955614][ T4473] overlayfs: failed to get inode (-116) [ 81.593841][ T4496] loop2: detected capacity change from 0 to 512 [ 81.954396][ T4493] syz.3.68 (4493): drop_caches: 1 [ 82.075294][ T4493] syz.3.68 (4493): drop_caches: 1 [ 82.299781][ T4496] ======================================================= [ 82.299781][ T4496] WARNING: The mand mount option has been deprecated and [ 82.299781][ T4496] and is ignored by this kernel. Remove the mand [ 82.299781][ T4496] option from the mount to silence this warning. [ 82.299781][ T4496] ======================================================= [ 82.570411][ T4496] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.600422][ T4496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.67: bg 0: block 248: padding at end of block bitmap is not set [ 82.623292][ T4496] Quota error (device loop2): write_blk: dquota write failed [ 82.631260][ T4496] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.641366][ T4496] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.67: Failed to acquire dquot type 1 [ 82.676731][ T4496] EXT4-fs (loop2): 1 truncate cleaned up [ 82.692869][ T4496] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 84.447666][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.697733][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 84.947577][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.967545][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 85.271836][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 85.356353][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.507869][ T21] usb 4-1: Product: syz [ 85.694424][ T21] usb 4-1: Manufacturer: syz [ 85.773792][ T21] usb 4-1: SerialNumber: syz [ 85.888144][ T21] usb 4-1: config 0 descriptor?? [ 87.446431][ T4519] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.171245][ T4521] loop1: detected capacity change from 0 to 2048 [ 88.239466][ T4246] usb 4-1: USB disconnect, device number 6 [ 88.473142][ T4521] loop1: p1 < > p3 [ 88.565165][ T4521] loop1: p3 size 134217728 extends beyond EOD, truncated [ 88.702300][ T4535] syz.3.79 (4535): drop_caches: 1 [ 88.746296][ T4535] syz.3.79 (4535): drop_caches: 1 [ 88.865059][ T3548] loop1: p1 < > p3 [ 88.928700][ T3548] loop1: p3 size 134217728 extends beyond EOD, truncated [ 89.061279][ T4546] loop3: detected capacity change from 0 to 512 [ 89.188664][ T4546] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.188900][ T3548] loop1: p1 < > p3 [ 89.222998][ T3548] loop1: p3 size 134217728 extends beyond EOD, truncated [ 89.241388][ T4546] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 89.263381][ T4546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 89.293515][ T4546] System zones: 0-2, 18-18, 34-34 [ 89.306860][ T4546] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.328784][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 89.349627][ T4546] EXT4-fs (loop3): 1 truncate cleaned up [ 89.355320][ T4546] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.433388][ T4546] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.3.82: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 89.469602][ T4551] device veth3 entered promiscuous mode [ 89.487597][ T21] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.503191][ T4546] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 89.562335][ T4546] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.82: Deleting old file: nlink 4, error=-117 [ 89.639206][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.649458][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 89.785687][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.802812][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 89.867677][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.899957][ T4553] udevd[4553]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.901724][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 89.921519][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 89.979113][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 90.063268][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 90.347712][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.368316][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.577563][ T21] usb 3-1: SerialNumber: syz [ 90.608201][ T4545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.615431][ T4545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.628620][ T21] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 90.904987][ T4568] syz.1.87 (4568) used greatest stack depth: 16768 bytes left [ 91.246634][ T1235] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.287327][ T1235] Bluetooth: hci5: Frame reassembly failed (-84) [ 92.766070][ T4581] syz.4.92 (4581): drop_caches: 1 [ 92.874373][ T4581] syz.4.92 (4581): drop_caches: 1 [ 93.327657][ T4246] Bluetooth: hci5: command 0x1003 tx timeout [ 93.334923][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 93.400967][ T21] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 93.416025][ T21] usb 3-1: USB disconnect, device number 4 [ 96.037713][ T1110] Bluetooth: hci5: command 0x1001 tx timeout [ 96.043849][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 96.231653][ T4623] syz.3.105 (4623): drop_caches: 1 [ 96.274555][ T4623] syz.3.105 (4623): drop_caches: 1 [ 96.306506][ T4625] loop0: detected capacity change from 0 to 256 [ 96.420973][ T4625] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 96.743272][ T26] audit: type=1326 audit(1747256389.985:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 96.829237][ T26] audit: type=1326 audit(1747256390.005:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.735626][ T26] audit: type=1326 audit(1747256390.005:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.809347][ T26] audit: type=1326 audit(1747256390.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.833082][ T26] audit: type=1326 audit(1747256390.015:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.856040][ T26] audit: type=1326 audit(1747256390.015:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.878882][ T26] audit: type=1326 audit(1747256390.015:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.901438][ T26] audit: type=1326 audit(1747256390.015:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.926230][ T26] audit: type=1326 audit(1747256390.015:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 97.948690][ T26] audit: type=1326 audit(1747256390.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff38f0ac969 code=0x7ffc0000 [ 98.077559][ T4254] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 98.117590][ T4215] Bluetooth: hci5: command 0x1009 tx timeout [ 98.569256][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.646019][ T1454] block nbd4: Attempted send on invalid socket [ 98.652648][ T1454] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.713733][ T1454] block nbd4: Attempted send on invalid socket [ 98.720685][ T1454] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.732158][ T4652] Mount JFS Failure: -5 [ 98.736693][ T4652] jfs_mount failed w/return code = -5 [ 99.281709][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.293300][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 99.297691][ T4654] loop3: detected capacity change from 0 to 256 [ 99.304352][ T4254] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 99.420227][ T4254] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.631635][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.895452][ T4254] usb 3-1: SerialNumber: syz [ 100.401358][ T4654] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 100.438209][ T4254] usb 3-1: can't set config #1, error -71 [ 100.464791][ T4254] usb 3-1: USB disconnect, device number 5 [ 102.508325][ T4695] capability: warning: `syz.4.128' uses deprecated v2 capabilities in a way that may be insecure [ 105.927578][ T1454] block nbd1: Attempted send on invalid socket [ 105.934139][ T1454] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.946652][ T1454] block nbd1: Attempted send on invalid socket [ 105.953060][ T1454] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.965087][ T4732] Mount JFS Failure: -5 [ 105.969411][ T4732] jfs_mount failed w/return code = -5 [ 106.052775][ T4735] syz.3.143[4735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.056398][ T4735] syz.3.143[4735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.342804][ T4737] loop4: detected capacity change from 0 to 1024 [ 106.447374][ T4737] EXT4-fs (loop4): Ignoring removed orlov option [ 107.278940][ T4737] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 107.389447][ T4750] loop0: detected capacity change from 0 to 1024 [ 107.435520][ T4737] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.529304][ T4750] EXT4-fs (loop0): Ignoring removed orlov option [ 107.615877][ T4750] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 107.920317][ T4750] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 109.325199][ T4775] loop3: detected capacity change from 0 to 512 [ 110.313057][ T4785] syz.1.156 (4785): drop_caches: 1 [ 110.428007][ T4785] syz.1.156 (4785): drop_caches: 1 [ 112.029871][ T4795] loop1: detected capacity change from 0 to 1024 [ 112.223499][ T4774] loop2: detected capacity change from 0 to 40427 [ 112.273332][ T4774] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 112.282811][ T4774] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.341826][ T4774] F2FS-fs (loop2): invalid crc value [ 112.354995][ T4774] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 112.460928][ T4795] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.477774][ T4795] EXT4-fs (loop1): Ignoring removed orlov option [ 112.509675][ T4795] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000008,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.846208][ T4811] IPVS: length: 4096 != 17667290688 [ 113.195622][ T4402] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.892615][ T4402] usb 3-1: device descriptor read/64, error -71 [ 114.177534][ T4402] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.377532][ T4402] usb 3-1: device descriptor read/64, error -71 [ 114.497680][ T4402] usb usb3-port1: attempt power cycle [ 114.907601][ T4402] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.144841][ T1454] block nbd4: Attempted send on invalid socket [ 115.151437][ T1454] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.164179][ T1454] block nbd4: Attempted send on invalid socket [ 115.170579][ T1454] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.182101][ T4838] Mount JFS Failure: -5 [ 115.186352][ T4838] jfs_mount failed w/return code = -5 [ 115.819259][ T4402] usb 3-1: device descriptor read/8, error -71 [ 116.521060][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.538470][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.546795][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.529094][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 117.529109][ T26] audit: type=1326 audit(1747256410.775:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 117.593920][ T4866] loop2: detected capacity change from 0 to 512 [ 118.097498][ T26] audit: type=1326 audit(1747256410.805:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.176640][ T26] audit: type=1326 audit(1747256410.805:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.299183][ T26] audit: type=1326 audit(1747256410.805:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.414725][ T26] audit: type=1326 audit(1747256410.805:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.421034][ T4872] IPVS: length: 4096 != 17667290688 [ 118.483673][ T26] audit: type=1326 audit(1747256410.805:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.546674][ T26] audit: type=1326 audit(1747256410.805:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.605217][ T26] audit: type=1326 audit(1747256410.805:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.687878][ T26] audit: type=1326 audit(1747256410.805:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.753757][ T26] audit: type=1326 audit(1747256410.805:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 118.937644][ T4215] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.697534][ T4215] usb 5-1: device descriptor read/64, error -71 [ 119.967824][ T4215] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.058421][ T1454] block nbd2: Attempted send on invalid socket [ 120.064814][ T1454] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.077349][ T1454] block nbd2: Attempted send on invalid socket [ 120.083647][ T1454] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.095276][ T4881] Mount JFS Failure: -5 [ 120.099585][ T4881] jfs_mount failed w/return code = -5 [ 120.177721][ T4215] usb 5-1: device descriptor read/64, error -71 [ 120.298054][ T4215] usb usb5-port1: attempt power cycle [ 120.707588][ T4215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.807895][ T4215] usb 5-1: device descriptor read/8, error -71 [ 121.077559][ T4215] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.177812][ T4215] usb 5-1: device descriptor read/8, error -71 [ 121.318136][ T4215] usb usb5-port1: unable to enumerate USB device [ 122.321045][ T4899] syz.4.189 (4899): drop_caches: 1 [ 122.427437][ T4899] syz.4.189 (4899): drop_caches: 1 [ 123.104061][ T4910] process 'syz.4.193' launched './file0' with NULL argv: empty string added [ 123.885575][ T4922] loop1: detected capacity change from 0 to 256 [ 123.958645][ T4922] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 124.730951][ T1454] block nbd4: Attempted send on invalid socket [ 124.737170][ T1454] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.768799][ T1454] block nbd4: Attempted send on invalid socket [ 124.774980][ T1454] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.814054][ T4928] Mount JFS Failure: -5 [ 124.830460][ T4928] jfs_mount failed w/return code = -5 [ 124.890139][ T4930] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.122580][ T4935] loop4: detected capacity change from 0 to 512 [ 125.219245][ T4935] EXT4-fs (loop4): Ignoring removed bh option [ 125.266209][ T4935] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.317548][ T4935] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.384623][ T4935] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.409535][ T4935] EXT4-fs (loop4): 1 truncate cleaned up [ 125.415255][ T4935] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bh,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,auto_da_alloc,quota,. Quota mode: writeback. [ 125.798687][ T4246] Bluetooth: hci2: command 0x0405 tx timeout [ 126.967675][ T4278] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.028506][ T4951] syz.3.204 (4951): drop_caches: 1 [ 127.138872][ T4951] syz.3.204 (4951): drop_caches: 1 [ 127.257619][ T4278] usb 1-1: Using ep0 maxpacket: 8 [ 127.377790][ T4278] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 127.386914][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.436881][ T4278] usb 1-1: config 0 descriptor?? [ 127.488877][ T4278] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 127.707734][ T4278] usb 1-1: Detected FT232BM [ 127.928078][ T4278] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 127.958639][ T4278] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 128.010918][ T4278] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.103731][ T4278] usb 1-1: USB disconnect, device number 5 [ 128.313426][ T4278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.363199][ T4278] ftdi_sio 1-1:0.0: device disconnected [ 128.796511][ T150] block nbd1: Attempted send on invalid socket [ 128.802873][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.816308][ T150] block nbd1: Attempted send on invalid socket [ 128.822949][ T150] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.834859][ T4971] Mount JFS Failure: -5 [ 128.839280][ T4971] jfs_mount failed w/return code = -5 [ 130.496345][ T4992] binder: 4991:4992 unknown command 1074553619 [ 130.517045][ T4992] binder: 4991:4992 ioctl c0306201 2000000003c0 returned -22 [ 131.688093][ T4246] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 132.087836][ T4246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.124864][ T4246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 132.156669][ T4246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 132.184846][ T4246] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 132.307639][ T4246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.405323][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.434649][ T4246] usb 5-1: SerialNumber: syz [ 132.443756][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.450631][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.487829][ T5009] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.495000][ T5009] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.508518][ T4246] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 133.452243][ T5025] loop3: detected capacity change from 0 to 2048 [ 133.593787][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.645454][ T5025] syz.3.229 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.785608][ T5030] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 5001287 [ 134.247697][ T4246] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 134.401802][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.430084][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.439199][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.465287][ T5036] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.027860][ T4246] usb 5-1: USB disconnect, device number 6 [ 135.056617][ T5021] loop0: detected capacity change from 0 to 40427 [ 135.255833][ T5021] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 135.265818][ T4177] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 135.304738][ T5021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 135.337044][ T4662] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.429488][ T4662] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.453431][ T5021] F2FS-fs (loop0): invalid crc value [ 136.314922][ T5021] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 137.345846][ T5053] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 137.407620][ T4254] Bluetooth: hci5: command 0x1003 tx timeout [ 137.420098][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 137.430433][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.637029][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.745575][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.857547][ T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 137.890159][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 137.890187][ T26] audit: type=1326 audit(1747256431.135:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6b77d969 code=0x7ffc0000 [ 139.070529][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.063402][ T4246] Bluetooth: hci5: command 0x1001 tx timeout [ 140.071893][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 140.073972][ T4214] Bluetooth: hci4: command 0x0409 tx timeout [ 140.090504][ T26] audit: type=1326 audit(1747256431.165:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f4a6b77d969 code=0x7ffc0000 [ 140.152435][ T5055] chnl_net:caif_netlink_parms(): no params data found [ 140.237809][ T26] audit: type=1326 audit(1747256431.165:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6b77d969 code=0x7ffc0000 [ 140.441109][ T26] audit: type=1326 audit(1747256431.165:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6b77d969 code=0x7ffc0000 [ 140.633116][ T21] usb 1-1: device not accepting address 6, error -71 [ 140.767816][ T5091] loop1: detected capacity change from 0 to 256 [ 140.805485][ T5091] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 140.894902][ T5091] attempt to access beyond end of device [ 140.894902][ T5091] loop1: rw=524288, want=408, limit=256 [ 140.928572][ T5091] attempt to access beyond end of device [ 140.928572][ T5091] loop1: rw=524288, want=664, limit=256 [ 140.948335][ T5091] attempt to access beyond end of device [ 140.948335][ T5091] loop1: rw=0, want=288, limit=256 [ 140.969060][ T26] audit: type=1800 audit(1747256434.215:53): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.249" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 141.138429][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.169062][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.180031][ T5055] device bridge_slave_0 entered promiscuous mode [ 141.242847][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.429588][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.586782][ T5055] device bridge_slave_1 entered promiscuous mode [ 142.118692][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 142.124802][ T4246] Bluetooth: hci5: command 0x1009 tx timeout [ 142.198534][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.286717][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.413589][ T5055] team0: Port device team_slave_0 added [ 142.479388][ T5055] team0: Port device team_slave_1 added [ 142.550602][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.572649][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.657606][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.710163][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.717445][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.772048][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.859101][ T5115] netlink: 96 bytes leftover after parsing attributes in process `syz.4.252'. [ 142.921237][ T5055] device hsr_slave_0 entered promiscuous mode [ 142.935518][ T5055] device hsr_slave_1 entered promiscuous mode [ 142.949291][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.969293][ T5055] Cannot create hsr debugfs directory [ 143.040237][ T5123] loop0: detected capacity change from 0 to 256 [ 143.126643][ T5123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 143.219056][ T5123] exFAT-fs (loop0): error, invalid size(size(1) > aligned(9223372036854777344) [ 143.219056][ T5123] [ 143.253594][ T5123] exFAT-fs (loop0): Filesystem has been set read-only [ 144.264997][ T5055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.295735][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 144.320404][ T5055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.329757][ T5055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.350053][ T5055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.387965][ T5135] loop1: detected capacity change from 0 to 128 [ 145.013638][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.022110][ T21] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 145.133706][ T5055] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.178224][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.196220][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.427092][ T5055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.438335][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.485737][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 145.517630][ T5055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.547503][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 145.595059][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 145.739252][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.786867][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.805379][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.821318][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.837746][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.844859][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.855547][ T21] usb 1-1: SerialNumber: syz [ 145.868137][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.878089][ T5144] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.885178][ T5144] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.899573][ T21] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 145.918430][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.927036][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.934215][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.011466][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.020836][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.030735][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.040029][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.049819][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.060800][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.069885][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.081965][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.091558][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.100995][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.426212][ T9] device hsr_slave_0 left promiscuous mode [ 146.567959][ T9] device hsr_slave_1 left promiscuous mode [ 146.734272][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.899356][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.907284][ T4246] Bluetooth: hci4: command 0x0419 tx timeout [ 146.926875][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.945450][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.968885][ T9] device bridge_slave_1 left promiscuous mode [ 146.979073][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.013596][ T9] device bridge_slave_0 left promiscuous mode [ 147.027311][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.102391][ T9] device veth1_macvtap left promiscuous mode [ 147.119992][ T9] device veth0_macvtap left promiscuous mode [ 147.148415][ T9] device veth1_vlan left promiscuous mode [ 147.163534][ T9] device veth0_vlan left promiscuous mode [ 147.615995][ T21] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 147.674689][ T21] usb 1-1: USB disconnect, device number 8 [ 147.757549][ T5185] fuse: Bad value for 'fd' [ 148.003754][ T5196] netlink: 88 bytes leftover after parsing attributes in process `syz.1.267'. [ 148.024719][ T5196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.267'. [ 148.623918][ T150] block nbd4: Attempted send on invalid socket [ 148.630382][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.643010][ T150] block nbd4: Attempted send on invalid socket [ 148.649323][ T150] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.660569][ T5203] Mount JFS Failure: -5 [ 148.664792][ T5203] jfs_mount failed w/return code = -5 [ 149.095801][ T5214] loop4: detected capacity change from 0 to 512 [ 149.142692][ T5214] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.174658][ T9] team0 (unregistering): Port device team_slave_1 removed [ 149.193056][ T5214] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 149.202919][ T5214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 149.211315][ T5214] System zones: 0-2, 18-18, 34-34 [ 149.225857][ T9] team0 (unregistering): Port device team_slave_0 removed [ 149.261014][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.293534][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.317923][ T5214] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.417212][ T5214] EXT4-fs (loop4): 1 truncate cleaned up [ 149.457163][ T5214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.897618][ T1110] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 150.116909][ T9] bond0 (unregistering): Released all slaves [ 150.169461][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.179433][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.188103][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.510904][ T5227] syz.0.276 (5227): drop_caches: 1 [ 150.521008][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.532880][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.543260][ T1110] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 150.544895][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.569817][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.590087][ T1110] usb 5-1: config 0 descriptor?? [ 150.598617][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.688959][ T5227] syz.0.276 (5227): drop_caches: 1 [ 150.741370][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.047628][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.092399][ T1110] steelseries_srws1 0003:1038:1410.0001: unbalanced delimiter at end of report description [ 151.220329][ T1110] steelseries_srws1 0003:1038:1410.0001: parse failed [ 151.227198][ T1110] steelseries_srws1: probe of 0003:1038:1410.0001 failed with error -22 [ 151.340238][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.352580][ T4254] usb 5-1: USB disconnect, device number 7 [ 151.381676][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.441045][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 151.482748][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.508943][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.558983][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.570689][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.581704][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.597728][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.620798][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.630426][ T5055] device veth0_vlan entered promiscuous mode [ 151.662659][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.670063][ T5055] device veth1_vlan entered promiscuous mode [ 151.707501][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.748985][ T23] usb 1-1: config 0 descriptor?? [ 151.766814][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.801654][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.822199][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.855867][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.895737][ T5055] device veth0_macvtap entered promiscuous mode [ 151.925322][ T5055] device veth1_macvtap entered promiscuous mode [ 151.975697][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.007100][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.047496][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.095130][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.115431][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.146690][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.163180][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.174480][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.193559][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.241213][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.253980][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6 [ 152.256742][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.267544][ T23] microsoft 0003:045E:07DA.0002: unexpected long global item [ 152.317834][ T23] microsoft 0003:045E:07DA.0002: parse failed [ 152.323972][ T23] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 152.355089][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.372282][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.384042][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.421683][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.459256][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.467768][ T23] usb 1-1: USB disconnect, device number 9 [ 152.520789][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.552806][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.566878][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.578525][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.601954][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.615302][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.687591][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.708564][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.726500][ T5055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.744785][ T5055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.755178][ T5055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.769853][ T5055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.877510][ T4218] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.968261][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.030911][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.077634][ T4218] usb 2-1: device descriptor read/64, error -71 [ 153.933576][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.957815][ T4218] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.990069][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.179826][ T1454] block nbd0: Attempted send on invalid socket [ 154.186136][ T1454] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.200190][ T1454] block nbd0: Attempted send on invalid socket [ 154.206462][ T1454] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.218265][ T5270] Mount JFS Failure: -5 [ 154.222922][ T4218] usb 2-1: device descriptor read/64, error -71 [ 154.229428][ T5270] jfs_mount failed w/return code = -5 [ 154.941020][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.959798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.967310][ T4218] usb usb2-port1: attempt power cycle [ 155.437529][ T4218] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.157555][ T4218] usb 2-1: device not accepting address 8, error -71 [ 157.517500][ T4218] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 157.748842][ T4218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.779944][ T4218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 157.824890][ T4218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 157.882718][ T4218] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 158.334808][ T5325] syz.0.290 (5325): drop_caches: 1 [ 158.454955][ T5325] syz.0.290 (5325): drop_caches: 1 [ 158.460425][ T4218] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.469594][ T4218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.477722][ T4218] usb 2-1: SerialNumber: syz [ 158.518020][ T5297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.525154][ T5297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.551150][ T4218] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 159.844280][ T4218] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 159.907598][ T4218] usb 2-1: USB disconnect, device number 9 [ 162.037614][ T4180] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.127480][ T4180] usb 2-1: device descriptor read/64, error -71 [ 163.577571][ T4180] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.777925][ T4180] usb 2-1: device descriptor read/64, error -71 [ 163.913927][ T4180] usb usb2-port1: attempt power cycle [ 165.422584][ T4215] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 165.592728][ T5410] syz.0.305 (5410): drop_caches: 1 [ 165.640324][ T5410] syz.0.305 (5410): drop_caches: 1 [ 165.907970][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.969582][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 166.007895][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 166.066210][ T4215] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 166.957601][ T4215] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.974157][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.990925][ T4215] usb 3-1: SerialNumber: syz [ 167.887600][ T4215] usb 3-1: can't set config #1, error -71 [ 167.894547][ T4215] usb 3-1: USB disconnect, device number 10 [ 173.927493][ T4218] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 175.027631][ T5495] syz.4.323 (5495): drop_caches: 1 [ 175.155567][ T5495] syz.4.323 (5495): drop_caches: 1 [ 175.257568][ T4218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.487714][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 175.502138][ T4254] Bluetooth: hci3: command 0x0406 tx timeout [ 175.813097][ T4218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 175.837549][ T4218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 175.855817][ T4218] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 175.876651][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 175.883816][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 175.907621][ T4218] usb 6-1: string descriptor 0 read error: -71 [ 175.917507][ T4218] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.926653][ T4218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.967570][ T4218] usb 6-1: can't set config #1, error -71 [ 175.981244][ T4218] usb 6-1: USB disconnect, device number 2 [ 176.227586][ T4278] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.417562][ T4278] usb 2-1: device descriptor read/64, error -71 [ 176.717516][ T4278] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 176.927581][ T4278] usb 2-1: device descriptor read/64, error -71 [ 177.092941][ T4278] usb usb2-port1: attempt power cycle [ 178.277529][ T4278] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.367814][ T4278] usb 2-1: device descriptor read/8, error -71 [ 182.067608][ T4402] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 182.537726][ T4402] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.578617][ T4402] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 183.571018][ T4402] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 183.582447][ T4402] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 183.657513][ T4278] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.677696][ T4402] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.917774][ T4278] usb 6-1: device descriptor read/64, error -71 [ 184.227736][ T4278] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.467559][ T4278] usb 6-1: device descriptor read/64, error -71 [ 184.556824][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.565432][ T4402] usb 5-1: SerialNumber: syz [ 184.587903][ T5567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.594982][ T5567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.597624][ T4278] usb usb6-port1: attempt power cycle [ 184.613816][ T4402] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 184.690217][ T4402] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 185.087776][ T4278] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.198326][ T4278] usb 6-1: device descriptor read/8, error -71 [ 185.487737][ T4278] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 185.607568][ T4278] usb 6-1: device descriptor read/8, error -71 [ 185.737806][ T4278] usb usb6-port1: unable to enumerate USB device [ 185.770962][ T4402] usb 5-1: USB disconnect, device number 8 [ 185.791041][ T4163] udevd[4163]: setting mode of /dev/bus/usb/005/008 to 020664 failed: No such file or directory [ 185.791159][ T4163] udevd[4163]: setting owner of /dev/bus/usb/005/008 to uid=0, gid=0 failed: No such file or directory [ 186.185673][ T5613] loop4: detected capacity change from 0 to 128 [ 186.753550][ T5613] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 186.961837][ T5613] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.397937][ T5650] loop4: detected capacity change from 0 to 512 [ 189.988108][ T5650] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.007495][ T4254] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 190.035796][ T5650] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.279269][ T26] audit: type=1800 audit(1747256483.525:54): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.355" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 190.418211][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.490085][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 190.592764][ T4254] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 190.675622][ T4254] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 190.854671][ T5663] Zero length message leads to an empty skb [ 190.907762][ T4254] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.923562][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.991845][ T4254] usb 3-1: SerialNumber: syz [ 191.047704][ T5651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.054726][ T5651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.067958][ T4254] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 191.289004][ T4254] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 191.322151][ T4254] usb 3-1: USB disconnect, device number 11 [ 191.891511][ T5676] loop5: detected capacity change from 0 to 40427 [ 192.047590][ T5676] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 192.055371][ T5676] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 192.261891][ T5676] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.219125][ T5676] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 193.263007][ T5676] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 193.583416][ T26] audit: type=1326 audit(1747256486.825:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.2.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 193.755337][ T26] audit: type=1326 audit(1747256486.995:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.2.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2973fbd2d0 code=0x7ffc0000 [ 193.842496][ T26] audit: type=1326 audit(1747256487.025:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.2.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 193.876141][ T26] audit: type=1326 audit(1747256487.025:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.2.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x7ffc0000 [ 193.915065][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.927112][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.938522][ T5745] xt_l2tp: invalid flags combination: 8 [ 197.657622][ T26] audit: type=1326 audit(2000000000.010:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.2.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2973fbe969 code=0x0 [ 197.744900][ T5773] overlayfs: failed to resolve './file0': -2 [ 199.937668][ T4402] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.235846][ T4402] usb 2-1: Using ep0 maxpacket: 8 [ 200.404825][ T4402] usb 2-1: no configurations [ 200.675786][ T4402] usb 2-1: can't read configurations, error -22 [ 201.052180][ T4402] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 201.207984][ T5814] xt_l2tp: invalid flags combination: 8 [ 201.367641][ T4402] usb 2-1: Using ep0 maxpacket: 8 [ 202.247551][ T4402] usb 2-1: device descriptor read/all, error -71 [ 203.832782][ T4402] usb usb2-port1: attempt power cycle [ 208.178730][ T5861] loop2: detected capacity change from 0 to 512 [ 208.207229][ T5862] ------------[ cut here ]------------ [ 208.243950][ T5861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.247402][ T5862] trace type BPF program uses run-time allocation [ 208.262863][ T5861] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 208.327745][ T5862] WARNING: CPU: 1 PID: 5862 at kernel/bpf/verifier.c:11729 check_map_prog_compatibility+0x6cf/0x870 [ 208.347677][ T5862] Modules linked in: [ 208.357531][ C1] ------------[ cut here ]------------ [ 208.363648][ C1] WARNING: CPU: 1 PID: 5838 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 208.373042][ C1] Modules linked in: [ 208.376964][ C1] CPU: 1 PID: 5838 Comm: syz.5.395 Not tainted 5.15.182-syzkaller #0 [ 208.385133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 208.394431][ T5862] CPU: 0 PID: 5862 Comm: syz.4.400 Not tainted 5.15.182-syzkaller #0 [ 208.395239][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 208.409743][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d e6 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 e3 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 208.417776][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 208.429438][ C1] RSP: 0018:ffffc90000dd06e8 EFLAGS: 00010246 [ 208.429473][ C1] RAX: ffffffff819fdb10 RBX: 0000000000000000 RCX: ffff888023d7bb80 [ 208.429488][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.429500][ C1] RBP: 0000000000000000 R08: ffffffff8eeaf048 R09: ffffffff8eeaf058 [ 208.429514][ C1] R10: ffffffff8eeaf050 R11: ffffffff8eeaf043 R12: ffff888023d7d308 [ 208.429528][ C1] R13: dffffc0000000000 R14: ffffc90000dd0748 R15: 0000000000000000 [ 208.429541][ C1] FS: 00007f12fffbe6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 208.429559][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.429574][ C1] CR2: 0000200000027000 CR3: 000000006a4c5000 CR4: 00000000003506e0 [ 208.429594][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.429606][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.429619][ C1] Call Trace: [ 208.429628][ C1] [ 208.429651][ C1] bpf_probe_read_user+0x26/0x70 [ 208.450203][ T5862] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 208.453975][ C1] bpf_prog_690f12e098ef46de+0x32/0xd0 [ 208.454006][ C1] bpf_trace_run2+0x242/0x2d0 [ 208.468083][ T5862] Code: ff e8 e5 e1 ef ff 48 c7 c6 80 21 11 8a e9 0d fd ff ff e8 d4 e1 ef ff c6 05 8b 32 cd 0b 01 48 c7 c7 e0 1d 11 8a e8 a1 8b 0e 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 208.470021][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 208.484048][ T5862] RSP: 0018:ffffc9000326f450 EFLAGS: 00010246 [ 208.485990][ C1] ? do_syscall_64+0x4c/0xa0 [ 208.486018][ C1] ? skb_release_data+0x6fe/0x850 [ 208.495562][ T5862] [ 208.501609][ C1] ? skb_release_data+0x6fe/0x850 [ 208.501633][ C1] __bpf_trace_kfree+0x6e/0x90 [ 208.501654][ C1] ? skb_release_data+0x6fe/0x850 [ 208.501675][ C1] kfree+0x25f/0x2a0 [ 208.501711][ C1] skb_release_data+0x6fe/0x850 [ 208.501744][ C1] kfree_skb_reason+0xaf/0x110 [ 208.554158][ T5862] RAX: ff02cf3282170b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 208.573408][ C1] hsr_forward_skb+0x666/0x16e0 [ 208.573451][ C1] ? prp_fill_frame_info+0x660/0x660 [ 208.573472][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 208.573496][ C1] ? memset+0x1e/0x40 [ 208.573517][ C1] ? __skb_pad+0x407/0x620 [ 208.573548][ C1] send_hsr_supervision_frame+0x4de/0xa60 [ 208.573579][ C1] hsr_announce+0x162/0x300 [ 208.642742][ T5862] RDX: ffffc900049d6000 RSI: 000000000002b9ea RDI: 000000000002b9eb [ 208.643139][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 208.680025][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 208.685081][ C1] call_timer_fn+0x16c/0x530 [ 208.689761][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 208.694809][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 208.700860][ C1] ? __run_timers+0x7c0/0x7c0 [ 208.705595][ C1] ? rcu_is_watching+0x11/0xa0 [ 208.710406][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 208.715631][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 208.720890][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 208.725939][ C1] __run_timers+0x525/0x7c0 [ 208.730515][ C1] ? detach_timer+0x2b0/0x2b0 [ 208.735251][ C1] run_timer_softirq+0x63/0xf0 [ 208.740065][ C1] handle_softirqs+0x328/0x820 [ 208.744853][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 208.749762][ C1] ? do_softirq+0x200/0x200 [ 208.754288][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 208.759543][ C1] __irq_exit_rcu+0x12f/0x220 [ 208.764239][ C1] ? irq_exit_rcu+0x20/0x20 [ 208.768805][ C1] irq_exit_rcu+0x5/0x20 [ 208.773065][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 208.778747][ C1] [ 208.781696][ C1] [ 208.784636][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 208.790747][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 208.796576][ C1] Code: be ff ff ff ff e8 7c d2 4d 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 66 2e 57 08 e8 11 7f 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 99 10 fe ff 43 80 3c [ 208.808595][ T5862] RBP: ffff88801a3f0000 R08: dffffc0000000000 R09: ffffed10172267a8 [ 208.816322][ C1] RSP: 0018:ffffc900013df6e8 EFLAGS: 00000286 [ 208.816347][ C1] RAX: b496391eb760d000 RBX: ffff8880b913a300 RCX: b496391eb760d000 [ 208.816361][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0 [ 208.816374][ C1] RBP: 1ffff1101722760b R08: dffffc0000000000 R09: ffffed1017227461 [ 208.816388][ C1] R10: ffffed1017227461 R11: 1ffff11017227460 R12: 1ffff110172275b9 [ 208.816402][ C1] R13: dffffc0000000000 R14: ffff8880b913adc8 R15: 0000000000000000 [ 208.816440][ C1] finish_task_switch+0x12f/0x640 [ 208.816468][ C1] ? __switch_to_asm+0x34/0x60 [ 208.816493][ C1] __schedule+0x11c0/0x43b0 [ 208.816542][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 208.816567][ C1] ? release_firmware_map_entry+0x190/0x190 [ 208.816603][ C1] preempt_schedule_notrace+0xca/0x110 [ 208.816624][ C1] ? preempt_schedule_common+0xd0/0xd0 [ 208.816646][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 208.816672][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 208.843340][ T5862] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffffc900011cc038 [ 208.846780][ C1] preempt_schedule_notrace_thunk+0x16/0x18 [ 208.846818][ C1] kfree+0x271/0x2a0 [ 208.860808][ T5862] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000239807 [ 208.862815][ C1] ? import_iovec+0x6f/0xa0 [ 208.876485][ T5862] FS: 00007f03163116c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 208.880612][ C1] ___sys_recvmsg+0x1be/0x4f0 [ 208.885519][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.890157][ C1] ? __sys_recvmsg+0x250/0x250 [ 208.890206][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 208.890238][ C1] ? __might_fault+0xb3/0x110 [ 208.890263][ C1] do_recvmmsg+0x344/0x7a0 [ 208.890296][ C1] ? __sys_recvmmsg+0x280/0x280 [ 208.902603][ T5862] CR2: 000000110c34e36b CR3: 000000005f917000 CR4: 00000000003506f0 [ 208.907149][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 209.004416][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 209.009533][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 209.013988][ T5871] syz.1.402 (5871): drop_caches: 1 [ 209.014162][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 209.024502][ C1] do_syscall_64+0x4c/0xa0 [ 209.028969][ C1] ? clear_bhb_loop+0x15/0x70 [ 209.033663][ C1] ? clear_bhb_loop+0x15/0x70 [ 209.038387][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.044301][ C1] RIP: 0033:0x7f1302156969 [ 209.048862][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.068537][ C1] RSP: 002b:00007f12fffbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 209.076981][ C1] RAX: ffffffffffffffda RBX: 00007f130237dfa0 RCX: 00007f1302156969 [ 209.085016][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 209.093044][ C1] RBP: 00007f13021d8ab1 R08: 0000000000000000 R09: 0000000000000000 [ 209.101067][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 209.109083][ C1] R13: 0000000000000000 R14: 00007f130237dfa0 R15: 00007fffba723f58 [ 209.109558][ T5871] syz.1.402 (5871): drop_caches: 1 [ 209.117085][ C1] [ 209.125231][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.132608][ C1] CPU: 1 PID: 5838 Comm: syz.5.395 Not tainted 5.15.182-syzkaller #0 [ 209.140693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.150945][ C1] Call Trace: [ 209.154241][ C1] [ 209.157084][ C1] dump_stack_lvl+0x168/0x230 [ 209.161769][ C1] ? show_regs_print_info+0x20/0x20 [ 209.166965][ C1] ? load_image+0x3b0/0x3b0 [ 209.171487][ C1] panic+0x2c9/0x7f0 [ 209.175404][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 209.179957][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 209.185599][ C1] __warn+0x248/0x2b0 [ 209.189586][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 209.195134][ C1] report_bug+0x1b7/0x2e0 [ 209.199469][ C1] handle_bug+0x3a/0x70 [ 209.203733][ C1] exc_invalid_op+0x16/0x40 [ 209.208234][ C1] asm_exc_invalid_op+0x16/0x20 [ 209.213080][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 209.219231][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d e6 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 e3 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 209.238928][ C1] RSP: 0018:ffffc90000dd06e8 EFLAGS: 00010246 [ 209.245084][ C1] RAX: ffffffff819fdb10 RBX: 0000000000000000 RCX: ffff888023d7bb80 [ 209.253051][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.261013][ C1] RBP: 0000000000000000 R08: ffffffff8eeaf048 R09: ffffffff8eeaf058 [ 209.268983][ C1] R10: ffffffff8eeaf050 R11: ffffffff8eeaf043 R12: ffff888023d7d308 [ 209.277032][ C1] R13: dffffc0000000000 R14: ffffc90000dd0748 R15: 0000000000000000 [ 209.285004][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 209.290733][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 209.296281][ C1] bpf_probe_read_user+0x26/0x70 [ 209.301215][ C1] ? bpf_trace_run2+0x242/0x2d0 [ 209.306064][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 209.310909][ C1] ? do_syscall_64+0x4c/0xa0 [ 209.315504][ C1] ? skb_release_data+0x6fe/0x850 [ 209.320526][ C1] ? skb_release_data+0x6fe/0x850 [ 209.325542][ C1] ? __bpf_trace_kfree+0x6e/0x90 [ 209.330562][ C1] ? skb_release_data+0x6fe/0x850 [ 209.335584][ C1] ? kfree+0x25f/0x2a0 [ 209.339652][ C1] ? skb_release_data+0x6fe/0x850 [ 209.344678][ C1] ? kfree_skb_reason+0xaf/0x110 [ 209.349609][ C1] ? hsr_forward_skb+0x666/0x16e0 [ 209.354633][ C1] ? prp_fill_frame_info+0x660/0x660 [ 209.359912][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 209.365059][ C1] ? memset+0x1e/0x40 [ 209.369056][ C1] ? __skb_pad+0x407/0x620 [ 209.373477][ C1] ? send_hsr_supervision_frame+0x4de/0xa60 [ 209.379375][ C1] ? hsr_announce+0x162/0x300 [ 209.384047][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 209.389085][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 209.394124][ C1] ? call_timer_fn+0x16c/0x530 [ 209.398892][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 209.403932][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 209.409913][ C1] ? __run_timers+0x7c0/0x7c0 [ 209.414601][ C1] ? rcu_is_watching+0x11/0xa0 [ 209.419366][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.424570][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 209.429768][ C1] ? hsr_dev_finalize+0x6e0/0x6e0 [ 209.434796][ C1] ? __run_timers+0x525/0x7c0 [ 209.439639][ C1] ? detach_timer+0x2b0/0x2b0 [ 209.444347][ C1] ? run_timer_softirq+0x63/0xf0 [ 209.449303][ C1] ? handle_softirqs+0x328/0x820 [ 209.454242][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 209.459097][ C1] ? do_softirq+0x200/0x200 [ 209.463612][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 209.468806][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 209.473650][ C1] ? irq_exit_rcu+0x20/0x20 [ 209.478160][ C1] ? irq_exit_rcu+0x5/0x20 [ 209.482567][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.488372][ C1] [ 209.491296][ C1] [ 209.494224][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.500379][ C1] ? finish_lock_switch+0x134/0x280 [ 209.505574][ C1] ? finish_task_switch+0x12f/0x640 [ 209.510768][ C1] ? __switch_to_asm+0x34/0x60 [ 209.515528][ C1] ? __schedule+0x11c0/0x43b0 [ 209.520218][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 209.525241][ C1] ? release_firmware_map_entry+0x190/0x190 [ 209.531138][ C1] ? preempt_schedule_notrace+0xca/0x110 [ 209.536763][ C1] ? preempt_schedule_common+0xd0/0xd0 [ 209.542213][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 209.547239][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 209.552082][ C1] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 209.558150][ C1] ? kfree+0x271/0x2a0 [ 209.562212][ C1] ? import_iovec+0x6f/0xa0 [ 209.566718][ C1] ? ___sys_recvmsg+0x1be/0x4f0 [ 209.571570][ C1] ? __sys_recvmsg+0x250/0x250 [ 209.576343][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 209.581369][ C1] ? __might_fault+0xb3/0x110 [ 209.586046][ C1] ? do_recvmmsg+0x344/0x7a0 [ 209.590636][ C1] ? __sys_recvmmsg+0x280/0x280 [ 209.595493][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 209.600520][ C1] ? __x64_sys_recvmmsg+0x18d/0x240 [ 209.605807][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 209.610401][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 209.615595][ C1] ? do_syscall_64+0x4c/0xa0 [ 209.620180][ C1] ? clear_bhb_loop+0x15/0x70 [ 209.624847][ C1] ? clear_bhb_loop+0x15/0x70 [ 209.629515][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.635594][ C1] [ 209.638816][ C1] Kernel Offset: disabled [ 209.643327][ C1] Rebooting in 86400 seconds..