last executing test programs: 3m47.140353065s ago: executing program 0 (id=214): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$tipc(0x1e, 0x5, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24024085) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3m46.857090421s ago: executing program 2 (id=216): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) preadv2(r0, &(0x7f0000000080), 0x28, 0x3000, 0x0, 0x9) 3m46.772271076s ago: executing program 0 (id=218): socket$kcm(0x29, 0x2, 0x0) ioperm(0x9, 0x9, 0x7) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 3m46.566482988s ago: executing program 2 (id=220): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003a0000/0x4000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") 3m45.050873692s ago: executing program 0 (id=222): mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000"], 0xfc}}, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080), 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x30, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) 3m42.283311896s ago: executing program 2 (id=223): socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3m42.051548849s ago: executing program 0 (id=227): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x800) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x2, 0x3, 0x401, 0x8, 0x5, 0x0, 0x3}, 0x1c) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000240)={'\x00', 0x48, 0x2, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(0x4) syz_io_uring_setup(0xf02, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) 3m40.467940616s ago: executing program 2 (id=228): mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x103) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 3m39.495551751s ago: executing program 2 (id=231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m39.405750125s ago: executing program 0 (id=232): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000002240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r8, &(0x7f0000000040)=""/138, 0x8a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040697f3b38fb773b1fb00000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}, 0x20000010) socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) 3m38.490008306s ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m35.405904678s ago: executing program 0 (id=237): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3m22.752284521s ago: executing program 32 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m20.181999823s ago: executing program 33 (id=237): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 17.916010437s ago: executing program 3 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000580)={{&(0x7f0000f1e000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x23b6, 0x10}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={r8, 0x6, 0x400, 0x5, 0x2, 0x9}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 15.766918807s ago: executing program 3 (id=511): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000408000300", @ANYRES16=r3], 0x1c}}, 0x4004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000000c0)=""/45) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001040)='\x93oubce%\x87\x97\t\x00\x00\x9e\xea\x17\xe1F\x17\"\xbf\x0e\xeez\xc2\xc3\xf5\xfa\xc8\xad\xda\xf4\']frC\xb5`\xe2\x17\x7f9\xda\vU\x18K\xb6\x9c\xca\xdf\a\b8\x03:\xf6\x99\xe2\xa7\xf8\xca=\x92\x89\x89\x1bno\x86\x85\x0e\xc6\xb28\xaa\x87\x87\x83s\x187\xeb\x89\xc2\x9b\x81\xa9\a\xa6r\x00\xa0\xba\xc4s\xf74k\xbd\xea\x0f-\xa7yb\xad+\xff\xfe\x9b\\\xdc\xd8IA\xbf\xccw\t\x19\xac\xe91M\xdd\xdf`\xf7]\xb7\x01\x15dG\xf0\x96\xf8\x90\xde\x0f \xa4%YGP', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x3f, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}]}, 0x28}}, 0x4040) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x8, 0x9, &(0x7f0000000140)=0x8}) 14.375702204s ago: executing program 6 (id=515): socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, 0x0) getrlimit(0xe, &(0x7f0000000040)) 13.17241314s ago: executing program 6 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc870}, 0x10) 13.112331314s ago: executing program 4 (id=518): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) syz_io_uring_setup(0x13c4, &(0x7f0000001fc0)={0x0, 0xcfc9, 0x1000, 0x0, 0x42}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000000)) epoll_create(0xd) socket(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 12.878116357s ago: executing program 3 (id=519): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x407) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11.812303536s ago: executing program 6 (id=521): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0xb, 0x0, 0x10000000004, 0x80000000, 0x200, 0x3}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x0, 0xc82, 0x0, 0x0, 0x2003ff, 0x2000000000000000}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 11.794531507s ago: executing program 4 (id=522): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x3f) 10.46536498s ago: executing program 6 (id=523): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r1 = syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) r2 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x0, 0xb, 0x4, 0x800000, 0x9, {0x0, 0xea60}, {0x5, 0x2, 0xff, 0x5, 0xc, 0xff, "6ac142b6"}, 0x5, 0x4, {0x0}, 0x5dae, 0x0, r2}) openat$tun(0xffffffffffffff9c, 0x0, 0x6c00, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) 9.851014835s ago: executing program 3 (id=525): r0 = socket$kcm(0x29, 0x2, 0x0) ioperm(0x9, 0x9, 0x7) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) 8.552292696s ago: executing program 3 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x404c000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8.192139057s ago: executing program 4 (id=527): socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) getrlimit(0xe, &(0x7f0000000040)) 6.994757673s ago: executing program 4 (id=528): ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, 0xfffffffffffffffc) timer_create(0x2, &(0x7f00000000c0)={0x0, 0xf, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @local, r5}, 0xc) r6 = dup(0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000180)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={r6, r6, 0x1e, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r2, 0x0, 0x40000c0) 4.68422181s ago: executing program 4 (id=531): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000003c0)='0', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, &(0x7f0000001c40)) 4.616387704s ago: executing program 6 (id=532): pipe(&(0x7f0000000600)) io_setup(0x40000100, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x8, 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbdOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91@\x00\x00\x00\x00\x00\x00\x00\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xb5{\xa0k\x95s\xa8l\xd4\b|m\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_\xfbR\xaf\xaa^\xb6\x99\x13\x0f\x87\xa8P.\x97yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3C7c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe2\xd9\xb8 xC\xf5N\x04s(\xdaR\x1f\xbe\x12Q*\xd9u\xb4\xde\xc9\xf8\xc2o|\xfd.\x83\xc4s\xa9b,\xd3\xc2\x88nP\x9f\xed\xfe\xc61\xd0\xeb\x92\xe0\xc8\xd6\xd7eb&\x84\xd2z+\xddW\xac\xba\x89\xa8\x17Ga,\xf7:l\x86\xa3\x95\xa1e\xdc\xed\xac\x06V\x01\xb7&.\xda\ni\x82\xc1\xad\x1f\x83\xe7\xec\xbe\xc4\xcd\xe6O\xb0\x12`\x03\xd5g\xb4\x9f\xeb\xddeq\x1a\x95 \xfb\x91\xc5\xb3\xc34\x86)\a\x91\xe9\t\xdf\xb7\xff\f\x96S\xf1\xb5oQ\x99\x8e\xdd\x14\x0f\x18\xe4\x03^\x12\x9c\xffA\xc0\xa8#L_\x00\xc81\xf8u\xf4\xc5\x01n\x92M^r\xa9\x01\xe5\xc6I|c8j`j`\xd9\xfd`\xcei\xa0f', 0x1, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x26aadf42, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x20) mq_unlink(&(0x7f0000000000)='eth0\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r4, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) 4.579450426s ago: executing program 1 (id=533): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x89, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 4.448184694s ago: executing program 1 (id=534): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000000)=0x1) 3.209791422s ago: executing program 1 (id=535): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x407) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.046188572s ago: executing program 1 (id=536): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000054) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af25, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) openat$sndtimer(0xffffff9c, 0x0, 0xc80) sendmsg$nl_generic(r1, 0x0, 0xc000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) 2.028026048s ago: executing program 1 (id=537): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) unshare(0x20000400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x4, @vifc_lcl_addr=@rand_addr=0x64010101, @loopback}, 0x10) r5 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_open_procfs$namespace(r5, 0x0) 1.860851296s ago: executing program 6 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000004240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xe}], 0x1, 0x2020, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000100)) madvise(&(0x7f000001b000/0x4000)=nil, 0x4000, 0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r1, &(0x7f0000000300)='2', 0x1, 0x200008d0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}, 0x40000000}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/135, 0x87}], 0x3}, 0x2}], 0x2, 0x22, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000011c0)=""/230) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip_vti0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRES16=r8, @ANYRES32=0x0, @ANYRES16], 0x38}}, 0x8010) 1.605546971s ago: executing program 4 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000011}, 0x0) 47.761597ms ago: executing program 1 (id=540): socket$kcm(0x10, 0x3, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x12b001) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x80000001}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x528, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x15, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4ec, 0x2, [@TCA_BPF_POLICE={0x450, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x7fff, 0x10, 0xd73, {0x1, 0x2, 0x0, 0xff, 0x3, 0x8}, {0x8, 0x2, 0x5, 0x8, 0x1, 0x6}, 0x5, 0x800, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x8001, 0x34b, 0x2, 0x9, 0x9, 0x0, 0x9, 0x8a7, 0x8, 0x5, 0x8, 0x7, 0x81, 0x7, 0x5, 0x101, 0x2964, 0x7f, 0x0, 0x7, 0x7, 0xd, 0x9, 0x3934, 0x0, 0x5, 0x5, 0x4, 0x3, 0xe, 0x0, 0x10, 0x3, 0x8, 0x40, 0x6, 0xb, 0xe, 0xffffffff, 0x8, 0x2, 0x9, 0x5, 0x1, 0x2b, 0x7, 0xc0, 0x4a0a, 0x8, 0xfffffffe, 0x3, 0x8, 0x2e, 0x4e5, 0xdcf1, 0xdc36, 0x7, 0xfae, 0x9, 0xf, 0x8, 0x80000001, 0x5, 0x9, 0x62bd, 0x7, 0xd, 0xf, 0xf37, 0xdac, 0x1, 0x7fff, 0x800, 0x5, 0x5, 0x1, 0x30000000, 0x80000001, 0x8, 0x0, 0x9, 0x947, 0x1, 0x8, 0x35b4, 0xa935, 0x40, 0x2, 0xff, 0x7, 0x67, 0x6, 0x5, 0x8, 0xa0f6, 0x3, 0x9, 0x7ff, 0xffffc8e9, 0x40, 0x7, 0x4, 0x2f, 0x1c4c, 0x24a6, 0x5, 0x4, 0xe0c, 0x0, 0xb, 0x10000, 0x7ff, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x8, 0x3, 0x2, 0x1, 0x1, 0x96, 0xfffffffc, 0x7, 0x0, 0xf, 0x3, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x1, 0x7fff, 0x80000000, 0xa, 0x2, 0x6, 0x1, 0xfffffffb, 0x0, 0x0, 0xfffffff7, 0xe07, 0x6, 0x8, 0x168, 0x7a0, 0x7f, 0x7, 0x9, 0xff7c, 0x9, 0x8, 0x8, 0x4, 0x3, 0x3, 0x1, 0x9, 0x4, 0x5a, 0x3, 0x200, 0xebd, 0xc8c6, 0x8, 0x407, 0x3, 0x3b98ca55, 0x40, 0x7, 0x5, 0x9, 0x97c8, 0x7, 0x9, 0x0, 0xb3, 0x84a, 0x3, 0x11a, 0x9, 0x3ff, 0xffff49f5, 0x0, 0x17a, 0xdf, 0x6, 0x4945, 0xd, 0x1, 0x6f82, 0x4, 0x5, 0x5, 0x3e82, 0x56, 0x3ff00, 0x3ff, 0x0, 0x6, 0xc045, 0x2, 0x2, 0x0, 0x0, 0x6, 0x2, 0x1, 0xc2, 0xd6f7, 0xb, 0x0, 0x101, 0x6, 0x400, 0xf, 0x7, 0xffff516d, 0x9, 0x8, 0x2, 0x8, 0x9, 0xe19, 0x5, 0xdd56, 0x7, 0xd, 0x8, 0x4, 0x3, 0x2800000, 0x7, 0x1, 0x8, 0x2, 0xb2, 0x7, 0x8, 0x5b4f, 0x80000001, 0x6, 0x1ff, 0xb2ec, 0x2, 0x100, 0x5, 0x8, 0x6, 0x8, 0xffffffff]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x3c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020040000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a9bd6cf295a9cf5aabfdda5051ad845049ebbf7b83d1f193fc67a767aee464037cc7e1dd331d5211cc954b86a3ec1458c488211d466401d394834e4855aa0c4f8e7509644b6e892312ed69a01dcb2386a6525ac1145a55233e69aa2b062012b95d623f2c6d26793b5bb12b9cb54"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) 0s ago: executing program 3 (id=541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) kernel console output (not intermixed with test programs): 34][ T4619] overlayfs: missing 'lowerdir' [ 119.312757][ T4315] usb 1-1: USB disconnect, device number 3 [ 119.330829][ T4276] XFS (loop3): Unmounting Filesystem [ 119.547670][ T4627] loop0: detected capacity change from 0 to 256 [ 119.585963][ T4627] exfat: Deprecated parameter 'namecase' [ 119.615896][ T4317] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch [ 119.656624][ T4627] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 119.770108][ T4317] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 119.812594][ T4630] loop1: detected capacity change from 0 to 2048 [ 119.853736][ T4317] usb 3-1: USB disconnect, device number 2 [ 119.947207][ T4630] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 120.028983][ T4630] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 120.093714][ T4638] loop0: detected capacity change from 0 to 1024 [ 120.100581][ T4630] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.108283][ T4630] UDF-fs: Scanning with blocksize 512 failed [ 120.129808][ T4633] udevd[4633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.156091][ T4630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.214037][ T4609] loop4: detected capacity change from 0 to 32768 [ 120.392417][ T4609] XFS (loop4): Mounting V5 Filesystem [ 120.653984][ T4609] XFS (loop4): Ending clean mount [ 122.095088][ T4269] XFS (loop4): Unmounting Filesystem [ 122.323097][ T4664] device syzkaller0 entered promiscuous mode [ 123.105780][ T4677] Cannot find del_set index 1 as target [ 123.122355][ T4677] overlayfs: missing 'lowerdir' [ 123.751534][ T4681] loop1: detected capacity change from 0 to 512 [ 124.245570][ T4681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.254830][ T4681] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.905460][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 124.918453][ T4317] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 125.394653][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.457369][ T4317] usb 4-1: not running at top speed; connect to a high speed hub [ 125.599177][ T4317] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 125.654773][ T4317] usb 4-1: language id specifier not provided by device, defaulting to English [ 125.692728][ T4317] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 125.731204][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.740611][ T4317] usb 4-1: Product: syz [ 125.745622][ T4317] usb 4-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 125.816424][ T4317] usb 4-1: SerialNumber: syz [ 127.595654][ T4721] syz.2.80 (4721) used greatest stack depth: 18096 bytes left [ 129.979981][ T4317] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 129.996739][ T4317] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 130.018527][ T4317] usb 4-1: USB disconnect, device number 2 [ 130.219413][ T4748] Zero length message leads to an empty skb [ 130.373196][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.094053][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.101095][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.895502][ T4798] sched: RT throttling activated [ 135.189548][ T4803] loop2: detected capacity change from 0 to 512 [ 135.498434][ T4324] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.549868][ T4803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.558961][ T4803] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.680679][ T4324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.729452][ T4324] usb 2-1: not running at top speed; connect to a high speed hub [ 135.887494][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 135.888749][ T4324] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 135.912699][ T4324] usb 2-1: language id specifier not provided by device, defaulting to English [ 135.923732][ T4324] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 135.932936][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.958556][ T4324] usb 2-1: Product: syz [ 135.962819][ T4324] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 136.000327][ T4324] usb 2-1: SerialNumber: syz [ 136.155827][ T4793] loop4: detected capacity change from 0 to 32768 [ 136.877483][ T4793] (syz.4.97,4793,1):ocfs2_initialize_super:2286 ERROR: status = -12 [ 137.041649][ T4793] (syz.4.97,4793,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 137.911322][ T4794] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 138.116887][ T4829] fuse: Bad value for 'fd' [ 138.200312][ T4324] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 138.365957][ T4324] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 138.455368][ T4324] usb 2-1: USB disconnect, device number 2 [ 138.925532][ T4840] loop2: detected capacity change from 0 to 512 [ 139.180714][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.573607][ T4845] device syzkaller0 entered promiscuous mode [ 139.614257][ T4840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.623870][ T4840] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.996036][ T4861] Bluetooth: MGMT ver 1.22 [ 140.154674][ T4862] loop1: detected capacity change from 0 to 2048 [ 140.169278][ T4862] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 141.111963][ T4369] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.297029][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 141.628642][ T4870] loop2: detected capacity change from 0 to 128 [ 141.728571][ T952] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.739329][ T4870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.750562][ T4870] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.938532][ T952] usb 2-1: Using ep0 maxpacket: 32 [ 141.964574][ T952] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.461472][ T952] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 142.472198][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.939471][ T952] usb 2-1: config 0 descriptor?? [ 143.025467][ T952] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 143.069865][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 143.252958][ T4890] loop3: detected capacity change from 0 to 1024 [ 143.537710][ T4890] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.116: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.554454][ T4890] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 143.562986][ T4890] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.116: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.587353][ T4890] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 143.596650][ T4890] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.116: Failed to acquire dquot type 0 [ 143.613999][ T4890] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 143.628250][ T4890] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.116: mark_inode_dirty error [ 143.644355][ T4890] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 143.655905][ T4890] EXT4-fs (loop3): 1 orphan inode deleted [ 143.661897][ T4890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.797383][ T46] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.248678][ T46] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 144.299511][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 144.319946][ T4897] fuse: Bad value for 'fd' [ 144.478620][ T4317] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 145.268287][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.334646][ T4317] usb 1-1: not running at top speed; connect to a high speed hub [ 145.358015][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 145.378839][ T4276] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.391763][ T4317] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 145.405526][ T4276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 145.429536][ T4276] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 145.441636][ T4317] usb 1-1: language id specifier not provided by device, defaulting to English [ 145.484183][ T22] usb 2-1: USB disconnect, device number 3 [ 145.488257][ T4317] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 145.818714][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.948184][ T4317] usb 1-1: Product: syz [ 145.991142][ T4317] usb 1-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 146.011459][ T4317] usb 1-1: SerialNumber: syz [ 146.274519][ T4909] loop1: detected capacity change from 0 to 32768 [ 146.379603][ T4909] XFS (loop1): Mounting V5 Filesystem [ 146.401251][ T4317] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 146.444557][ T4317] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 146.476681][ T4317] usb 1-1: USB disconnect, device number 4 [ 146.533793][ T4909] XFS (loop1): Ending clean mount [ 146.554411][ T4909] XFS (loop1): Quotacheck needed: Please wait. [ 147.645978][ T4909] XFS (loop1): Quotacheck: Done. [ 148.554648][ T26] audit: type=1804 audit(1777015691.620:11): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.121" name="/newroot/23/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 151.711424][ T4633] udevd[4633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.751423][ T4988] loop2: detected capacity change from 0 to 128 [ 152.396182][ T4988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.550847][ T4278] XFS (loop1): Unmounting Filesystem [ 152.580252][ T4988] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.071513][ T5008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.399725][ T5019] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 153.514136][ T5019] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.270853][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 158.410102][ T5079] fuse: Unknown parameter '0x0000000000000003' [ 162.519173][ T5109] fuse: Unknown parameter '0x0000000000000003' [ 164.884872][ T5133] process 'syz.3.154' launched './file0' with NULL argv: empty string added [ 165.010206][ T5134] device syzkaller0 entered promiscuous mode [ 167.942177][ T5175] loop2: detected capacity change from 0 to 16 [ 168.641098][ T5175] erofs: (device loop2): mounted with root inode @ nid 36. [ 168.659351][ T5171] syz.2.165: attempt to access beyond end of device [ 168.659351][ T5171] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 168.699318][ T5171] syz.2.165: attempt to access beyond end of device [ 168.699318][ T5171] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 168.713438][ T5171] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 168.726397][ T26] audit: type=1800 audit(1777015712.420:12): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.165" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 172.020249][ T5213] loop4: detected capacity change from 0 to 16 [ 172.043920][ T5213] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.065107][ T5213] syz.4.177: attempt to access beyond end of device [ 172.065107][ T5213] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 172.127705][ T5213] syz.4.177: attempt to access beyond end of device [ 172.127705][ T5213] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 172.143457][ T5213] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 172.163526][ T26] audit: type=1800 audit(1777015715.850:13): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.177" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 176.338513][ T127] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 177.100693][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.143401][ T127] usb 5-1: not running at top speed; connect to a high speed hub [ 177.165563][ T127] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 177.199134][ T127] usb 5-1: language id specifier not provided by device, defaulting to English [ 177.222794][ T127] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 177.238419][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.268431][ T127] usb 5-1: Product: syz [ 177.278531][ T127] usb 5-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 177.294828][ T127] usb 5-1: SerialNumber: syz [ 177.332245][ T5260] tipc: Started in network mode [ 177.337667][ T5260] tipc: Node identity 06f6f906e61, cluster identity 4711 [ 177.396482][ T5260] tipc: Enabled bearer , priority 0 [ 177.428947][ T5262] device syzkaller0 entered promiscuous mode [ 177.463867][ T5260] tipc: Resetting bearer [ 177.510177][ T5263] device syzkaller0 entered promiscuous mode [ 177.517891][ T5259] tipc: Resetting bearer [ 177.710979][ T5259] tipc: Disabling bearer [ 177.729726][ T5273] loop3: detected capacity change from 0 to 16 [ 177.789458][ T5273] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.809829][ T5273] syz.3.194: attempt to access beyond end of device [ 177.809829][ T5273] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 177.834327][ T5273] syz.3.194: attempt to access beyond end of device [ 177.834327][ T5273] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 177.850091][ T5273] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.873583][ T5273] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.886861][ T5273] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.901867][ T26] audit: type=1800 audit(1777015721.550:14): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.194" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 179.038921][ T5244] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 180.194619][ T127] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 180.531545][ T127] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 180.596764][ T127] usb 5-1: USB disconnect, device number 3 [ 180.620334][ T26] audit: type=1326 audit(1777015724.310:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 180.649045][ T26] audit: type=1326 audit(1777015724.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 180.695101][ T26] audit: type=1326 audit(1777015724.310:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 180.809108][ T26] audit: type=1326 audit(1777015724.310:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 180.833967][ T26] audit: type=1326 audit(1777015724.310:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 180.866598][ T5303] ip6t_REJECT: ECHOREPLY is not supported [ 180.876248][ T26] audit: type=1326 audit(1777015724.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 181.093885][ T26] audit: type=1326 audit(1777015724.340:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 181.281259][ T26] audit: type=1326 audit(1777015724.340:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 181.307788][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.568447][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 181.589075][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.599964][ T26] audit: type=1326 audit(1777015724.340:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 181.658571][ T27] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 181.669533][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.685922][ T27] usb 1-1: config 0 descriptor?? [ 181.696915][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 181.708862][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.982003][ T5312] random: crng reseeded on system resumption [ 183.780776][ T4324] usb 1-1: USB disconnect, device number 5 [ 185.088543][ T5322] tmpfs: Unknown parameter 'grpquota' [ 187.526263][ T5340] loop0: detected capacity change from 0 to 128 [ 187.594088][ T5340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.630532][ T5340] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.549506][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 189.128737][ T127] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 191.457429][ T127] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.482598][ T127] usb 1-1: not running at top speed; connect to a high speed hub [ 191.501067][ T127] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 191.520753][ T127] usb 1-1: language id specifier not provided by device, defaulting to English [ 191.533174][ T127] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 191.551472][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.560101][ T127] usb 1-1: Product: syz [ 191.564446][ T127] usb 1-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 191.574749][ T127] usb 1-1: SerialNumber: syz [ 192.050675][ T5377] loop2: detected capacity change from 0 to 2048 [ 192.061569][ T5377] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 193.970432][ T5349] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 194.520561][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.527091][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.653561][ T127] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 194.780770][ T127] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 194.888923][ T127] usb 1-1: USB disconnect, device number 6 [ 195.015751][ T5389] Cannot find set identified by id 0 to match [ 195.190095][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.277379][ T5397] loop0: detected capacity change from 0 to 128 [ 195.398779][ T5397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.428995][ T5397] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.477966][ T5411] loop2: detected capacity change from 0 to 512 [ 196.803897][ T5411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.813592][ T5411] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.917318][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 197.177136][ T5420] loop1: detected capacity change from 0 to 16 [ 197.187714][ T5420] erofs: (device loop1): mounted with root inode @ nid 36. [ 197.207124][ T5418] syz.1.221: attempt to access beyond end of device [ 197.207124][ T5418] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 197.228070][ T5418] syz.1.221: attempt to access beyond end of device [ 197.228070][ T5418] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 197.243927][ T5418] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 197.261185][ T5418] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 197.273934][ T5418] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 197.318813][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 197.318847][ T26] audit: type=1800 audit(1777015740.950:26): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.221" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 199.490076][ T5363] tipc: Started in network mode [ 199.495037][ T5363] tipc: Node identity ca26d814824d, cluster identity 4711 [ 199.502487][ T5363] tipc: Enabled bearer , priority 0 [ 199.509675][ T5364] device syzkaller0 entered promiscuous mode [ 199.600238][ T5363] tipc: Resetting bearer [ 199.659100][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 199.670123][ T5363] tipc: Disabling bearer [ 200.998398][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.438502][ T4270] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 201.598425][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 201.606442][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.652084][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.659274][ T4270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.663395][ T4321] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 201.681350][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.708213][ T4321] usb 5-1: config 0 descriptor?? [ 201.718249][ T5446] binder: BINDER_SET_CONTEXT_MGR already set [ 201.761164][ T5446] binder: 5443:5446 ioctl 4018620d 200000004a80 returned -16 [ 201.761176][ T4270] usb 2-1: not running at top speed; connect to a high speed hub [ 201.764353][ T4270] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 202.109528][ T4270] usb 2-1: language id specifier not provided by device, defaulting to English [ 202.184090][ T4321] usbhid 5-1:0.0: can't add hid device: -71 [ 202.202574][ T4321] usbhid: probe of 5-1:0.0 failed with error -71 [ 202.226914][ T4321] usb 5-1: USB disconnect, device number 4 [ 202.406181][ T4270] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 202.435725][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.453392][ T4270] usb 2-1: Product: syz [ 202.458904][ T4270] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 202.494041][ T4270] usb 2-1: SerialNumber: syz [ 203.268565][ T4270] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 203.462817][ T4270] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 205.624433][ T5473] loop1: detected capacity change from 0 to 16 [ 205.633860][ T5473] erofs: (device loop1): mounted with root inode @ nid 36. [ 205.643306][ T5473] syz.1.235: attempt to access beyond end of device [ 205.643306][ T5473] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 205.720396][ T5473] syz.1.235: attempt to access beyond end of device [ 205.720396][ T5473] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 205.734708][ T5473] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 205.747914][ T26] audit: type=1800 audit(1777015749.430:27): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 206.999348][ T4270] usb 2-1: USB disconnect, device number 4 [ 208.473017][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 208.479246][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 208.480438][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 208.485503][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 208.493406][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 208.536450][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.872826][ T5485] tipc: Enabled bearer , priority 0 [ 210.034783][ T5505] binder: BINDER_SET_CONTEXT_MGR already set [ 210.069016][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 210.128733][ T5505] binder: 5503:5505 ioctl 4018620d 200000004a80 returned -16 [ 210.763357][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 211.208551][ T4319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 211.388803][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 211.410323][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.410411][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.410573][ T4319] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 211.410651][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.501155][ T4319] usb 4-1: config 0 descriptor?? [ 211.924292][ T4319] usbhid 4-1:0.0: can't add hid device: -71 [ 211.936541][ T4319] usbhid: probe of 4-1:0.0 failed with error -71 [ 211.964856][ T4319] usb 4-1: USB disconnect, device number 3 [ 212.943273][ T5527] loop4: detected capacity change from 0 to 16 [ 213.096486][ T5527] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.606323][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.624472][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.637068][ T5608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.647161][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.678923][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.698773][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.707370][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.008580][ T4315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 221.228575][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 221.236192][ T4315] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 221.252191][ T4315] usb 2-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 221.268842][ T4315] usb 2-1: config 0 has no interface number 0 [ 221.275039][ T4315] usb 2-1: too many endpoints for config 0 interface 137 altsetting 217: 233, using maximum allowed: 30 [ 221.294868][ T4315] usb 2-1: config 0 interface 137 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 221.308677][ T4315] usb 2-1: config 0 interface 137 has no altsetting 0 [ 221.322843][ T4315] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 221.332958][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.341500][ T4315] usb 2-1: Product: syz [ 221.345727][ T4315] usb 2-1: Manufacturer: syz [ 221.350731][ T4315] usb 2-1: SerialNumber: syz [ 221.360145][ T4315] usb 2-1: config 0 descriptor?? [ 221.583392][ T5485] tipc: Disabling bearer [ 221.592490][ T952] tipc: Node number set to 3773233414 [ 222.102933][ T4416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.228383][ T4339] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.362327][ T4416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.428419][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 222.448106][ T4339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.531274][ T4339] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 222.586535][ T4339] usb 5-1: can't read configurations, error -71 [ 222.759304][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 223.026059][ T4416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.303528][ T4416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.839808][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 226.408479][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.419783][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.429235][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.448788][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.457166][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 226.488546][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.543518][ T5608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.615558][ T4315] usb 2-1: USB disconnect, device number 5 [ 226.731223][ T5606] chnl_net:caif_netlink_parms(): no params data found [ 226.926781][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 226.973415][ T4416] tipc: Left network mode [ 228.194857][ T5718] loop4: detected capacity change from 0 to 16 [ 228.606025][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 228.786180][ T5718] erofs: (device loop4): mounted with root inode @ nid 36. [ 228.998742][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 229.090144][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.097320][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.133001][ T5606] device bridge_slave_0 entered promiscuous mode [ 229.195103][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.212174][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.316044][ T5606] device bridge_slave_1 entered promiscuous mode [ 230.176534][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.231878][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.565561][ T5606] team0: Port device team_slave_0 added [ 230.678646][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 230.746451][ T5606] team0: Port device team_slave_1 added [ 230.786435][ T5627] chnl_net:caif_netlink_parms(): no params data found [ 231.515046][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.523701][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.584845][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.630776][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.638137][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.670423][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.744320][ T5750] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 232.021603][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.222453][ T5778] loop4: detected capacity change from 0 to 16 [ 232.236840][ T5778] erofs: (device loop4): mounted with root inode @ nid 36. [ 232.255724][ T5778] syz.4.275: attempt to access beyond end of device [ 232.255724][ T5778] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 232.275150][ T5778] syz.4.275: attempt to access beyond end of device [ 232.275150][ T5778] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 232.290089][ T5778] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 232.388553][ T26] audit: type=1800 audit(1777015775.990:28): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 232.461682][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.623019][ T5627] device bridge_slave_0 entered promiscuous mode [ 232.761004][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 233.092288][ T5606] device hsr_slave_0 entered promiscuous mode [ 233.102179][ T5606] device hsr_slave_1 entered promiscuous mode [ 233.114192][ T5606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.179006][ T5606] Cannot create hsr debugfs directory [ 233.241728][ T5781] debugfs: File 'ram201' in directory 'ramdisk_pages' already present! [ 233.329478][ T5781] block device autoloading is deprecated and will be removed. [ 234.841685][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 234.935089][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.942664][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.951201][ T5627] device bridge_slave_1 entered promiscuous mode [ 234.977472][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.991228][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.129798][ T5790] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 235.249947][ T5790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.337555][ T5627] team0: Port device team_slave_0 added [ 235.380844][ T5627] team0: Port device team_slave_1 added [ 235.415351][ T5794] bond1: (slave geneve2): making interface the new active one [ 235.459519][ T5794] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 235.497687][ T4416] device hsr_slave_0 left promiscuous mode [ 235.516186][ T4416] device hsr_slave_1 left promiscuous mode [ 235.547207][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.568574][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.599165][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.606748][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.700605][ T4416] device bridge_slave_1 left promiscuous mode [ 235.710476][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.776708][ T4416] device bridge_slave_0 left promiscuous mode [ 235.789073][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.896380][ T4416] device veth1_macvtap left promiscuous mode [ 235.929053][ T4416] device veth0_macvtap left promiscuous mode [ 235.935328][ T4416] device veth1_vlan left promiscuous mode [ 235.958830][ T4416] device veth0_vlan left promiscuous mode [ 236.038410][ T4270] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.348444][ T4270] usb 5-1: Using ep0 maxpacket: 32 [ 236.356549][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.788718][ T5810] tmpfs: Unknown parameter 'grpquota' [ 238.036140][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.066765][ T4270] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 238.096105][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.034762][ T5820] loop3: detected capacity change from 0 to 512 [ 239.506945][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.516287][ T5820] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.555926][ T4270] usb 5-1: config 0 descriptor?? [ 240.182433][ T4270] usb 5-1: can't set config #0, error -71 [ 240.224688][ T4270] usb 5-1: USB disconnect, device number 7 [ 241.142201][ T5839] loop1: detected capacity change from 0 to 16 [ 241.163972][ T5839] erofs: (device loop1): mounted with root inode @ nid 36. [ 241.252169][ T5837] syz.1.285: attempt to access beyond end of device [ 241.252169][ T5837] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 241.560592][ T5837] syz.1.285: attempt to access beyond end of device [ 241.560592][ T5837] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 241.575466][ T5837] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 241.593322][ T26] audit: type=1800 audit(1777015785.270:29): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.285" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 243.954168][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 244.006558][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 244.053633][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.097658][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.412059][ T4416] bond0 (unregistering): Released all slaves [ 244.525824][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 244.624362][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.631529][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.660326][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.684918][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.697458][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.727145][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.848190][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 246.432317][ T5866] loop3: detected capacity change from 0 to 2048 [ 246.441206][ T5866] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 247.285235][ T5868] device syzkaller0 entered promiscuous mode [ 247.352653][ T5627] device hsr_slave_0 entered promiscuous mode [ 247.416303][ T5627] device hsr_slave_1 entered promiscuous mode [ 247.424633][ T5627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.566542][ T5627] Cannot create hsr debugfs directory [ 248.681065][ T5606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.730833][ T5885] loop3: detected capacity change from 0 to 128 [ 248.773890][ T5606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.797426][ T5606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.988391][ T5606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.218994][ T5885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.248544][ T5885] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.292369][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 251.547754][ T4416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.724937][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.190023][ T5923] loop3: detected capacity change from 0 to 16 [ 253.201771][ T5923] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.214979][ T5921] syz.3.298: attempt to access beyond end of device [ 253.214979][ T5921] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 253.249596][ T5921] syz.3.298: attempt to access beyond end of device [ 253.249596][ T5921] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 253.263571][ T5921] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 253.274970][ T26] audit: type=1800 audit(1777015796.960:30): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.298" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 253.331451][ T4416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.359266][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.369890][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.384191][ T5627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.431658][ T5627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.570429][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.685757][ T4416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.767462][ T5627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.229715][ T5941] loop3: detected capacity change from 0 to 2048 [ 254.239130][ T5941] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 255.446885][ T4416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.592971][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.691367][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.731020][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.739433][ T4980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.779539][ T5627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.845932][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.875091][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.908171][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.952028][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.959567][ T4980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.971337][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.977786][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.022644][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.248749][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.416343][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.617562][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.785738][ T5950] device syzkaller0 entered promiscuous mode [ 257.128766][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.137114][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.206801][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.245102][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.266601][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.309625][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.332562][ T5982] loop1: detected capacity change from 0 to 128 [ 257.372378][ T5982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 257.382453][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.415994][ T5982] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.647713][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.408464][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 258.612285][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.643742][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.652151][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.235098][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.496467][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.666363][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.894423][ T6025] loop1: detected capacity change from 0 to 2048 [ 260.904463][ T6025] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 261.217531][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.224898][ T4986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.507600][ T5611] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.787229][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.809487][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.877866][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.273331][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.280639][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.289204][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.309209][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.469727][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.545657][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.617576][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.643610][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.659452][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.703451][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.729764][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.925701][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.963313][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.984474][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.073412][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.443577][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.494733][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.505012][ T26] audit: type=1326 audit(1777015809.190:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 265.682564][ T26] audit: type=1326 audit(1777015809.190:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 265.705667][ T26] audit: type=1326 audit(1777015809.190:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 265.843296][ T6062] ip6t_REJECT: ECHOREPLY is not supported [ 265.947303][ T26] audit: type=1326 audit(1777015809.190:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 266.124522][ T26] audit: type=1326 audit(1777015809.190:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 266.149002][ T26] audit: type=1326 audit(1777015809.190:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 266.462312][ T26] audit: type=1326 audit(1777015809.190:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 266.551274][ T6068] Cannot find del_set index 1 as target [ 266.564062][ T6068] overlayfs: missing 'lowerdir' [ 268.169995][ T26] audit: type=1326 audit(1777015809.190:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 268.338452][ T26] audit: type=1326 audit(1777015809.190:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f71d1d9cdd9 code=0x7ffc0000 [ 268.755522][ T6078] loop4: detected capacity change from 0 to 512 [ 269.291211][ T6078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.300526][ T6078] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.757587][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 269.771113][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.792533][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.858512][ T4339] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 269.885637][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.345668][ T4339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.698402][ T4339] usb 2-1: not running at top speed; connect to a high speed hub [ 270.772440][ T4416] device hsr_slave_0 left promiscuous mode [ 270.782454][ T4339] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 270.825500][ T4339] usb 2-1: language id specifier not provided by device, defaulting to English [ 270.868457][ T4416] device hsr_slave_1 left promiscuous mode [ 270.874598][ T4339] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 270.925334][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.936094][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.954612][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.967843][ T4339] usb 2-1: Product: syz [ 270.986168][ T4339] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 270.997802][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.027947][ T4339] usb 2-1: SerialNumber: syz [ 271.037189][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.084735][ T4416] device bridge_slave_1 left promiscuous mode [ 271.108930][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.152254][ T4416] device bridge_slave_0 left promiscuous mode [ 271.166459][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.336665][ T4416] device veth1_macvtap left promiscuous mode [ 271.356628][ T4416] device veth0_macvtap left promiscuous mode [ 271.397011][ T4416] device veth1_vlan left promiscuous mode [ 271.441279][ T4416] device veth0_vlan left promiscuous mode [ 272.717286][ T4339] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 272.816972][ T4339] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 272.902214][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.918556][ T4339] usb 2-1: USB disconnect, device number 6 [ 274.114680][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 274.165422][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 274.225007][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.298371][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.845501][ T4416] bond0 (unregistering): Released all slaves [ 275.125115][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.145549][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.375879][ T5606] device veth0_vlan entered promiscuous mode [ 275.418854][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.580225][ T6164] loop4: detected capacity change from 0 to 2048 [ 275.590502][ T6164] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 275.744896][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.905978][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.069294][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.401066][ T6170] Cannot find del_set index 1 as target [ 276.417449][ T6170] overlayfs: missing 'lowerdir' [ 276.467690][ T5606] device veth1_vlan entered promiscuous mode [ 277.246825][ T6176] loop3: detected capacity change from 0 to 16 [ 278.021982][ T6176] erofs: (device loop3): mounted with root inode @ nid 36. [ 278.035838][ T6174] syz.3.330: attempt to access beyond end of device [ 278.035838][ T6174] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 278.184257][ T6174] syz.3.330: attempt to access beyond end of device [ 278.184257][ T6174] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 278.187535][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.198576][ T6174] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 278.216951][ T26] audit: type=1800 audit(1777015821.910:40): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.330" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 279.399315][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.445569][ T5606] device veth0_macvtap entered promiscuous mode [ 279.834128][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.920363][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.590373][ T6198] loop1: detected capacity change from 0 to 512 [ 280.916760][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.013917][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.052252][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.060456][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.074096][ T5627] device veth0_vlan entered promiscuous mode [ 281.078946][ T4321] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 281.119358][ T6198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.128509][ T6198] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.183746][ T5627] device veth1_vlan entered promiscuous mode [ 281.280762][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.299128][ T4321] usb 4-1: not running at top speed; connect to a high speed hub [ 281.332043][ T4321] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 281.370442][ T4321] usb 4-1: language id specifier not provided by device, defaulting to English [ 281.415586][ T4321] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 281.459557][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.549555][ T4321] usb 4-1: Product: syz [ 281.571199][ T4321] usb 4-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 281.622401][ T4321] usb 4-1: SerialNumber: syz [ 281.649678][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 281.666460][ T5627] device veth0_macvtap entered promiscuous mode [ 281.747336][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.766586][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.289947][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.300591][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.310243][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.320784][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.331512][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.349005][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.384677][ T4321] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 283.524195][ T4321] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 283.643861][ T4321] usb 4-1: USB disconnect, device number 4 [ 283.773294][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.805880][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.440199][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 286.466345][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.482086][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.371419][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 287.384273][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.395511][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.404873][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.412330][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.507828][ T6268] Cannot find del_set index 1 as target [ 287.521882][ T6268] overlayfs: missing 'lowerdir' [ 289.146738][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 289.398398][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 289.488482][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 289.598401][ T22] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 290.355997][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 290.981528][ T22] usb 5-1: not running at top speed; connect to a high speed hub [ 291.488514][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 291.558683][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 291.935070][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 292.043611][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 292.101991][ T22] usb 5-1: language id specifier not provided by device, defaulting to English [ 292.593161][ T22] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 292.635073][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.667347][ T22] usb 5-1: Product: syz [ 292.675045][ T22] usb 5-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 292.721803][ T22] usb 5-1: can't set config #1, error -71 [ 292.730412][ T22] usb 5-1: USB disconnect, device number 8 [ 292.918532][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.933603][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.954760][ T6221] device bridge_slave_0 entered promiscuous mode [ 292.992753][ T6298] device syzkaller0 entered promiscuous mode [ 293.257553][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.266872][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.276083][ T6221] device bridge_slave_1 entered promiscuous mode [ 293.648796][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 293.870319][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.763637][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.243284][ T6338] loop4: detected capacity change from 0 to 512 [ 295.442800][ T6338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.452539][ T6338] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.571205][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.617184][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.650086][ T6259] device bridge_slave_0 entered promiscuous mode [ 295.680438][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.705245][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.725257][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 295.734094][ T6259] device bridge_slave_1 entered promiscuous mode [ 295.823748][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.925378][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.959609][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 296.065698][ T6221] team0: Port device team_slave_0 added [ 296.087861][ T6259] team0: Port device team_slave_0 added [ 296.220890][ T6221] team0: Port device team_slave_1 added [ 297.067512][ T6259] team0: Port device team_slave_1 added [ 297.603100][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.635689][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.689070][ T6361] Cannot find del_set index 1 as target [ 297.703650][ T6361] overlayfs: missing 'lowerdir' [ 298.135531][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.551010][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.588916][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.700306][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.884144][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.029983][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.478354][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.495187][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.530027][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.623843][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.667171][ T6221] device hsr_slave_0 entered promiscuous mode [ 301.675019][ T6221] device hsr_slave_1 entered promiscuous mode [ 302.317922][ T6385] loop4: detected capacity change from 0 to 512 [ 302.502670][ T6385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 302.512273][ T6385] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.688367][ T4320] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 302.882882][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 302.898113][ T6259] device hsr_slave_0 entered promiscuous mode [ 302.920993][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.944587][ T4320] usb 2-1: not running at top speed; connect to a high speed hub [ 302.963461][ T6259] device hsr_slave_1 entered promiscuous mode [ 302.965102][ T4320] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 302.990053][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.005038][ T6259] Cannot create hsr debugfs directory [ 303.019291][ T4320] usb 2-1: language id specifier not provided by device, defaulting to English [ 303.081652][ T4320] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 303.099061][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.107410][ T4320] usb 2-1: Product: syz [ 303.112894][ T4320] usb 2-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 303.122837][ T4320] usb 2-1: SerialNumber: syz [ 303.502593][ T6406] loop4: detected capacity change from 0 to 512 [ 304.022521][ T6406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.032169][ T6406] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.579586][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 305.004099][ T4320] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 307.336468][ T6429] loop4: detected capacity change from 0 to 2048 [ 307.344434][ T6429] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 307.418900][ T4320] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 307.434602][ T4320] usb 2-1: USB disconnect, device number 7 [ 307.639257][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.882094][ T6467] loop3: detected capacity change from 0 to 512 [ 312.299890][ T6481] loop1: detected capacity change from 0 to 512 [ 312.701516][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 312.750085][ T6467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.759555][ T6467] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.779769][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.790829][ T6481] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.898406][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 312.905785][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.979339][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.015780][ T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 313.026674][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.048097][ T7] usb 5-1: config 0 descriptor?? [ 313.064735][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 313.218485][ T6221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.289656][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 313.359956][ T6221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.391661][ T4416] device hsr_slave_0 left promiscuous mode [ 313.408686][ T4416] device hsr_slave_1 left promiscuous mode [ 313.424273][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.447934][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.466567][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 313.476218][ T4416] device bridge_slave_1 left promiscuous mode [ 313.481212][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 313.488089][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.503583][ T4416] device bridge_slave_0 left promiscuous mode [ 313.524611][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.553918][ T6498] Cannot find del_set index 1 as target [ 313.578574][ T6498] overlayfs: missing 'lowerdir' [ 313.588454][ T5132] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 313.734013][ T4416] device hsr_slave_0 left promiscuous mode [ 313.785684][ T4416] device hsr_slave_1 left promiscuous mode [ 313.801252][ T5132] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.826763][ T5132] usb 4-1: not running at top speed; connect to a high speed hub [ 313.887014][ T5132] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 313.967711][ T5132] usb 4-1: language id specifier not provided by device, defaulting to English [ 314.031918][ T5132] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 314.091000][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.186424][ T5132] usb 4-1: Product: syz [ 314.224412][ T5132] usb 4-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 314.316769][ T5132] usb 4-1: SerialNumber: syz [ 314.446212][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.465078][ T7] usb 5-1: USB disconnect, device number 9 [ 314.477856][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.505093][ T4416] device bridge_slave_1 left promiscuous mode [ 314.511489][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.545665][ T4416] device bridge_slave_0 left promiscuous mode [ 314.555056][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.627419][ T4416] device veth0_macvtap left promiscuous mode [ 314.643924][ T4416] device veth1_vlan left promiscuous mode [ 314.649894][ T4416] device veth0_vlan left promiscuous mode [ 314.676249][ T4416] device veth0_macvtap left promiscuous mode [ 314.715577][ T4416] device veth1_vlan left promiscuous mode [ 314.728560][ T4416] device veth0_vlan left promiscuous mode [ 317.329136][ T5132] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 317.400991][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407421][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.426117][ T5132] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 317.457170][ T5132] usb 4-1: USB disconnect, device number 5 [ 319.440314][ T6552] loop3: detected capacity change from 0 to 512 [ 319.593486][ T6552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.603470][ T6552] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.039789][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 320.117634][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 320.187039][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.315281][ T4324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 320.645743][ T6565] loop4: detected capacity change from 0 to 512 [ 320.708553][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 320.723506][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.797419][ T6565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 320.807146][ T6565] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.871589][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.930627][ T4324] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 321.026208][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.039140][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.049230][ T4324] usb 2-1: config 0 descriptor?? [ 321.407544][ T4416] bond0 (unregistering): Released all slaves [ 321.464381][ T4324] usbhid 2-1:0.0: can't add hid device: -71 [ 321.476001][ T4324] usbhid: probe of 2-1:0.0 failed with error -71 [ 321.485110][ T4324] usb 2-1: USB disconnect, device number 8 [ 321.904956][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 321.953448][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 322.013997][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.082162][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.376500][ T6573] Cannot find del_set index 1 as target [ 322.390634][ T6573] overlayfs: missing 'lowerdir' [ 323.040961][ T4416] bond0 (unregistering): Released all slaves [ 323.246416][ T6221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.581289][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 323.744115][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 324.030838][ T6221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.272304][ T6259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.394831][ T6259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.459223][ T6259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.549833][ T6259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.633382][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.698421][ T6067] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 324.784117][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.965835][ T6067] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.986923][ T6601] loop1: detected capacity change from 0 to 16 [ 324.997487][ T6601] erofs: (device loop1): mounted with root inode @ nid 36. [ 325.036775][ T6067] usb 5-1: not running at top speed; connect to a high speed hub [ 325.202766][ T6067] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 325.446211][ T6067] usb 5-1: language id specifier not provided by device, defaulting to English [ 325.539828][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.656333][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.675513][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.707522][ T6067] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 325.735361][ T6067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.744013][ T6067] usb 5-1: Product: syz [ 325.751177][ T6067] usb 5-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 325.841434][ T6067] usb 5-1: SerialNumber: syz [ 325.893797][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.919268][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.929010][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.936702][ T4977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.971931][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.985131][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.071372][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.088079][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.095384][ T4977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.145490][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.189675][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.556752][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.587213][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.642390][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.703284][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.871097][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.988465][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.009449][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.045384][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.080300][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.101212][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.149607][ T6221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.202889][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.248662][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.256719][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.303510][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.370532][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.444357][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.451740][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.497152][ T6067] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 327.547696][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.574514][ T6067] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 327.611415][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.651849][ T6067] usb 5-1: USB disconnect, device number 10 [ 327.681111][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.719967][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.727306][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.799662][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.890092][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.929089][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.973210][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.997297][ T6602] udevd[6602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.018344][ T4339] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 328.048417][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.092093][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.134627][ T6641] Cannot find del_set index 1 as target [ 328.156541][ T6641] overlayfs: missing 'lowerdir' [ 328.238366][ T4339] usb 4-1: Using ep0 maxpacket: 32 [ 328.291160][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.532327][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.643215][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.793490][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.880284][ T4339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.892577][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.900056][ T4339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.915672][ T4339] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 328.926808][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.938414][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.949565][ T4339] usb 4-1: config 0 descriptor?? [ 328.961760][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.367144][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.392722][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.417473][ T4339] usbhid 4-1:0.0: can't add hid device: -71 [ 329.423659][ T4339] usbhid: probe of 4-1:0.0 failed with error -71 [ 329.433531][ T4339] usb 4-1: USB disconnect, device number 6 [ 329.465115][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.896927][ T6658] loop4: detected capacity change from 0 to 512 [ 330.246140][ T6658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 330.255585][ T6658] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.658211][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 332.016977][ T6676] Cannot find del_set index 1 as target [ 332.199747][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.241263][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.414472][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.968349][ T7] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 333.160903][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.169972][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 333.179885][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 333.220206][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.228824][ T7] usb 5-1: language id specifier not provided by device, defaulting to English [ 333.240492][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.280900][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 333.305301][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.318788][ T7] usb 5-1: Product: syz [ 333.323038][ T7] usb 5-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 333.339190][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.357728][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.371307][ T7] usb 5-1: SerialNumber: syz [ 333.388795][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.417340][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.454303][ T6221] device veth0_vlan entered promiscuous mode [ 333.494296][ T6221] device veth1_vlan entered promiscuous mode [ 333.577254][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.621621][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.630576][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.640333][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.652140][ T6221] device veth0_macvtap entered promiscuous mode [ 333.664458][ T6221] device veth1_macvtap entered promiscuous mode [ 333.734286][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.786521][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.819343][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.865780][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.910870][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.957826][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.995026][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.024739][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.039970][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.074015][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.095565][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.130470][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.168677][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.202220][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.237581][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.261088][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.288312][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.330774][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.349728][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.400260][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.452095][ T6221] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.481014][ T6221] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.514625][ T6221] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.533744][ T6221] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.558525][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.713882][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.631270][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.679442][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.712076][ T6259] device veth0_vlan entered promiscuous mode [ 335.722556][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.733463][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.764487][ T6259] device veth1_vlan entered promiscuous mode [ 336.004476][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.030447][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.040695][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.068972][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.108199][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.127815][ T6259] device veth0_macvtap entered promiscuous mode [ 336.159768][ T7] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 336.176337][ T4982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.185084][ T6259] device veth1_macvtap entered promiscuous mode [ 336.194826][ T4982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.226692][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.234438][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 336.280164][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.293429][ T7] usb 5-1: USB disconnect, device number 11 [ 336.310570][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.348717][ T4315] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 336.371643][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.411553][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.439043][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.468316][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.500576][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.513051][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.526105][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.539733][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.676726][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.687573][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.698312][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.709959][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 336.721538][ T6602] udevd[6602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.737869][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.748737][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.796308][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.477374][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.540149][ T6760] Cannot find del_set index 1 as target [ 337.565820][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.665419][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.768328][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.864130][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.913203][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.952521][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.017374][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.091915][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.196148][ T6259] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.254151][ T6259] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.335156][ T6259] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.402336][ T6259] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.483183][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.493362][ T4315] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 339.502737][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.520424][ T4315] usb 2-1: config 0 descriptor?? [ 339.527529][ T4315] usb 2-1: can't set config #0, error -71 [ 339.535155][ T4315] usb 2-1: USB disconnect, device number 9 [ 340.398151][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.446140][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.546402][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.629003][ T5013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.751457][ T6780] loop3: detected capacity change from 0 to 16 [ 341.547890][ T5013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.579552][ T6780] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.588000][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.600430][ T6779] syz.3.413: attempt to access beyond end of device [ 341.600430][ T6779] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 341.617905][ T6779] syz.3.413: attempt to access beyond end of device [ 341.617905][ T6779] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 341.632107][ T6779] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 341.643439][ T26] audit: type=1800 audit(1777015885.330:41): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.413" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 342.947815][ T4752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.100391][ T4752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.234165][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.249794][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.259381][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.267545][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.276561][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.284261][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.284502][ T4752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.743323][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 343.891138][ T4752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.941107][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.965179][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 344.050092][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 344.128944][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 344.196930][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 344.255407][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.315914][ T7] usb 4-1: Product: syz [ 344.338484][ T7] usb 4-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十剋筐伴쿴 [ 344.368678][ T7] usb 4-1: SerialNumber: syz [ 345.350070][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 346.414209][ T6846] loop4: detected capacity change from 0 to 2048 [ 346.425062][ T6846] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 348.392896][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 348.456532][ T5610] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.516945][ T7] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 348.530058][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 348.682180][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 348.778590][ T7] usb 4-1: USB disconnect, device number 7 [ 349.049054][ T6602] udevd[6602]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.523531][ T6868] loop3: detected capacity change from 0 to 16 [ 350.339071][ T6868] erofs: (device loop3): mounted with root inode @ nid 36. [ 350.352058][ T6863] syz.3.426: attempt to access beyond end of device [ 350.352058][ T6863] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 350.368106][ T6863] syz.3.426: attempt to access beyond end of device [ 350.368106][ T6863] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 350.381987][ T6863] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 350.394536][ T26] audit: type=1800 audit(1777015894.080:42): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.426" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 350.434752][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.442232][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 350.471557][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.535430][ T6817] device bridge_slave_0 entered promiscuous mode [ 350.663415][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.671671][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.690722][ T6817] device bridge_slave_1 entered promiscuous mode [ 351.538494][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.704162][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.980788][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 353.135334][ T6817] team0: Port device team_slave_0 added [ 353.156646][ T6817] team0: Port device team_slave_1 added [ 353.202162][ T6905] loop6: detected capacity change from 0 to 128 [ 353.446226][ T6905] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 353.673745][ T6915] loop3: detected capacity change from 0 to 2048 [ 353.682991][ T6915] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 355.772347][ T6905] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.836225][ T6602] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.158463][ T4339] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 356.623259][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.645702][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.677558][ T6259] EXT4-fs (loop6): unmounting filesystem. [ 357.198565][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.739197][ T4339] usb 5-1: device descriptor read/all, error -71 [ 358.527112][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.574997][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.621899][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.730176][ T4752] device hsr_slave_0 left promiscuous mode [ 358.762435][ T4752] device hsr_slave_1 left promiscuous mode [ 358.778294][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.786382][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.838559][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.838739][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.017496][ T4752] device bridge_slave_1 left promiscuous mode [ 359.047212][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.138575][ T4752] device bridge_slave_0 left promiscuous mode [ 359.176872][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.329714][ T4752] device veth1_macvtap left promiscuous mode [ 359.358379][ T4752] device veth0_macvtap left promiscuous mode [ 359.364589][ T4752] device veth1_vlan left promiscuous mode [ 359.405148][ T4752] device veth0_vlan left promiscuous mode [ 361.392644][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 361.446024][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 361.490631][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.552674][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.707369][ T4752] bond0 (unregistering): Released all slaves [ 362.866919][ T6817] device hsr_slave_0 entered promiscuous mode [ 362.920472][ T6817] device hsr_slave_1 entered promiscuous mode [ 362.978448][ T22] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 364.088417][ T6993] loop3: detected capacity change from 0 to 512 [ 366.252784][ T6993] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 366.678202][ T22] usb 5-1: device not accepting address 14, error -71 [ 366.963356][ T7011] loop4: detected capacity change from 0 to 2048 [ 366.974329][ T7011] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 368.831096][ T7013] Cannot find del_set index 1 as target [ 368.843786][ T7013] overlayfs: missing 'lowerdir' [ 371.816441][ T6817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.867418][ T6817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.014733][ T6817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.095303][ T6817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.390233][ T7075] loop4: detected capacity change from 0 to 512 [ 375.020596][ T7075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.029752][ T7075] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.163187][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.329727][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.356316][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.599155][ T7089] loop1: detected capacity change from 0 to 2048 [ 375.607856][ T7089] UDF-fs: bad mount option "noadinicb@&"w8x7" or missing value [ 376.176535][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.262413][ T7090] Cannot find del_set index 1 as target [ 376.274585][ T7090] overlayfs: missing 'lowerdir' [ 376.443632][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 376.452695][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.463144][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.472675][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.479908][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.498390][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.507228][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.517076][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.526663][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.533829][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.543310][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.553037][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.576956][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.634870][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.709276][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.754184][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.806267][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.919630][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.301366][ T7102] loop4: detected capacity change from 0 to 512 [ 377.877858][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.887269][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.374889][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.389189][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.507833][ T7102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 378.516956][ T7102] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.840852][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847230][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.858118][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 381.891119][ T7158] loop1: detected capacity change from 0 to 512 [ 382.682057][ T7158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 382.691515][ T7158] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.914233][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.013590][ T7154] Cannot find del_set index 1 as target [ 383.032368][ T7154] overlayfs: missing 'lowerdir' [ 383.175649][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.347941][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.533229][ T7173] loop3: detected capacity change from 0 to 128 [ 383.544231][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 383.629306][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.669818][ T7173] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.717179][ T7178] Cannot find del_set index 1 as target [ 383.733196][ T7178] overlayfs: missing 'lowerdir' [ 387.470897][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 389.449417][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.476678][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.569486][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.599584][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.635609][ T6817] device veth0_vlan entered promiscuous mode [ 390.148487][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.199901][ T7199] netlink: 'syz.3.480': attribute type 238 has an invalid length. [ 390.207725][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.235080][ T6817] device veth1_vlan entered promiscuous mode [ 390.477867][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.486694][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.539186][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.580631][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.692817][ T7250] Cannot find del_set index 1 as target [ 390.837952][ T7254] overlayfs: missing 'lowerdir' [ 391.595724][ T6817] device veth0_macvtap entered promiscuous mode [ 391.836598][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 391.953854][ T6817] device veth1_macvtap entered promiscuous mode [ 392.166931][ T7259] loop4: detected capacity change from 0 to 128 [ 392.214793][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.262524][ T7259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 392.284749][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.304500][ T7259] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.305432][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.347211][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.362090][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.374279][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.151507][ T7268] Cannot find del_set index 1 as target [ 393.165418][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.179305][ T7268] overlayfs: missing 'lowerdir' [ 393.301759][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.458761][ T7275] sctp: failed to load transform for md5: -2 [ 395.684013][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.262220][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 396.285930][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.773687][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.985306][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.002096][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.024933][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.036476][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.096247][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.099463][ T7293] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 397.118404][ T7293] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 397.138331][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.159558][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.188303][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.217843][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.354391][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.371962][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.419364][ T6817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.458433][ T6817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.515090][ T6817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.546768][ T6817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.893308][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 397.959087][ T7305] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 398.008068][ T7305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.498'. [ 398.033046][ T7305] device bond0 entered promiscuous mode [ 398.052523][ T7305] device bond_slave_0 entered promiscuous mode [ 398.066600][ T7305] device bond_slave_1 entered promiscuous mode [ 398.285379][ T7307] tls_set_device_offload_rx: netdev not found [ 398.961843][ T5007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.020439][ T5007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.265733][ T7304] device bond0 left promiscuous mode [ 399.297813][ T7304] device bond_slave_0 left promiscuous mode [ 399.335297][ T7304] device bond_slave_1 left promiscuous mode [ 399.367096][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.568742][ T4990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.619216][ T4990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.753933][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.860541][ T7328] loop6: detected capacity change from 0 to 128 [ 400.011129][ T7328] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 400.037446][ T7328] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 401.238714][ T7337] Cannot find del_set index 1 as target [ 401.410236][ T7333] overlayfs: missing 'lowerdir' [ 401.967829][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.984993][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.993545][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.490535][ T6259] EXT4-fs (loop6): unmounting filesystem. [ 403.963518][ T7364] netlink: 'syz.1.508': attribute type 39 has an invalid length. [ 404.119075][ T7369] loop5: detected capacity change from 0 to 7 [ 404.144806][ T7369] Dev loop5: unable to read RDB block 7 [ 404.151060][ T7369] loop5: unable to read partition table [ 404.157619][ T7369] loop5: partition table beyond EOD, truncated [ 404.195256][ T7370] binder: 7362:7370 ioctl c0285840 200000000000 returned -22 [ 404.212842][ T7369] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 405.046670][ T26] audit: type=1326 audit(1777015948.730:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 405.166224][ T26] audit: type=1326 audit(1777015948.730:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.104233][ T26] audit: type=1326 audit(1777015948.730:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.274332][ T26] audit: type=1326 audit(1777015948.730:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.351821][ T26] audit: type=1326 audit(1777015948.730:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.415281][ T26] audit: type=1326 audit(1777015948.760:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.459608][ T26] audit: type=1326 audit(1777015948.760:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.483812][ T26] audit: type=1326 audit(1777015948.760:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.511745][ T26] audit: type=1326 audit(1777015948.760:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1d39d9cdd9 code=0x7ffc0000 [ 406.546412][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.556312][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.565795][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.573796][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.586285][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.606125][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.613590][ T4270] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 407.488388][ T4270] usb 5-1: Using ep0 maxpacket: 32 [ 407.514694][ T4270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.535849][ T5007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.541297][ T4270] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 407.608782][ T4270] usb 5-1: can't read configurations, error -71 [ 407.835134][ T5007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.590561][ T5007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.698355][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 408.858752][ T5007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.898842][ T7380] Process accounting resumed [ 410.186815][ T7429] vivid-003: disconnect [ 410.220599][ T26] audit: type=1326 audit(1777015953.900:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 410.299975][ T7424] vivid-003: reconnect [ 410.408421][ T26] audit: type=1326 audit(1777015953.900:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.353347][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 411.469286][ T26] audit: type=1326 audit(1777015953.900:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.494887][ T26] audit: type=1326 audit(1777015953.900:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.517800][ T26] audit: type=1326 audit(1777015953.910:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.541000][ T26] audit: type=1326 audit(1777015953.910:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.618845][ T26] audit: type=1326 audit(1777015953.910:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 411.658483][ T4324] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 411.888582][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 411.895541][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 411.911132][ T4324] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 411.919813][ T4324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.929771][ T4324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.939721][ T4324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.975168][ T4324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.101031][ T4324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 412.110508][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.126129][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 412.126215][ T26] audit: type=1326 audit(1777015953.910:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 412.186410][ T26] audit: type=1326 audit(1777015953.910:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 412.223736][ T26] audit: type=1326 audit(1777015955.030:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e19cdd9 code=0x7ffc0000 [ 412.339404][ T7448] loop3: detected capacity change from 0 to 128 [ 412.352125][ T4324] usb 5-1: usb_control_msg returned -32 [ 412.357783][ T4324] usbtmc 5-1:16.0: can't read capabilities [ 412.480960][ T7448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 412.523159][ T7448] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.600876][ T27] usb 5-1: USB disconnect, device number 18 [ 413.380042][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 413.398878][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 413.930029][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.937310][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.946291][ T7386] device bridge_slave_0 entered promiscuous mode [ 413.957559][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.965243][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.974162][ T7386] device bridge_slave_1 entered promiscuous mode [ 414.002302][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.015969][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.049193][ T7386] team0: Port device team_slave_0 added [ 414.057874][ T7386] team0: Port device team_slave_1 added [ 415.479412][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 415.663724][ T7462] device syzkaller0 entered promiscuous mode [ 415.729487][ T7467] tipc: Enabled bearer , priority 0 [ 415.737478][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.753141][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.048530][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.073728][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.069135][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.167806][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.215238][ T7460] tipc: Resetting bearer [ 417.539226][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 417.729383][ T7498] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.776935][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 417.790029][ T7] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 417.835951][ T7] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 417.875719][ T7] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 417.951955][ T7] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 417.972712][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.988355][ T7] usb 5-1: Product: syz [ 417.992699][ T7] usb 5-1: Manufacturer: syz [ 417.997437][ T7] usb 5-1: SerialNumber: syz [ 418.024185][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 418.045006][ T7] imon 5-1:155.0: unable to initialize intf0, err -19 [ 418.084924][ T7] imon:imon_probe: failed to initialize context! [ 418.111891][ T7] imon 5-1:155.0: unable to register, err -19 [ 420.252410][ T4315] usb 5-1: USB disconnect, device number 19 [ 420.549358][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 420.759233][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 420.769229][ T22] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 420.787438][ T22] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 420.806309][ T22] usb 7-1: Product: syz [ 420.812598][ T22] usb 7-1: Manufacturer: syz [ 420.818589][ T22] usb 7-1: SerialNumber: syz [ 420.843455][ T22] usb 7-1: config 0 descriptor?? [ 421.771074][ T7460] tipc: Disabling bearer [ 421.846768][ T4321] tipc: Node number set to 1215027220 [ 421.896081][ T4321] usb 7-1: USB disconnect, device number 2 [ 423.838434][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 424.028375][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 424.038887][ T7540] [ 424.041270][ T7540] ====================================================== [ 424.048303][ T7540] WARNING: possible circular locking dependency detected [ 424.055342][ T7540] syzkaller #0 Not tainted [ 424.059775][ T7540] ------------------------------------------------------ [ 424.066876][ T7540] syz.1.540/7540 is trying to acquire lock: [ 424.072797][ T7540] ffff888140faccb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x6e/0x90 [ 424.083204][ T7540] [ 424.083204][ T7540] but task is already holding lock: [ 424.090579][ T7540] ffff88801d2e3698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 424.100897][ T7540] [ 424.100897][ T7540] which lock already depends on the new lock. [ 424.100897][ T7540] [ 424.111383][ T7540] [ 424.111383][ T7540] the existing dependency chain (in reverse order) is: [ 424.120440][ T7540] [ 424.120440][ T7540] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 424.128718][ T7540] __mutex_lock+0x12d/0xaf0 [ 424.133785][ T7540] __netlink_dump_start+0x11f/0x6f0 [ 424.139534][ T7540] ip_set_dump+0x152/0x1e0 [ 424.144492][ T7540] nfnetlink_rcv_msg+0xbec/0x12b0 [ 424.150071][ T7540] netlink_rcv_skb+0x1fb/0x450 [ 424.155408][ T7540] nfnetlink_rcv+0x2b0/0x2480 [ 424.160654][ T7540] netlink_unicast+0x74d/0x8d0 [ 424.166004][ T7540] netlink_sendmsg+0x8ad/0xbd0 [ 424.171339][ T7540] ____sys_sendmsg+0x5be/0x970 [ 424.176673][ T7540] ___sys_sendmsg+0x2a2/0x360 [ 424.181912][ T7540] __se_sys_sendmsg+0x1bb/0x2a0 [ 424.187330][ T7540] do_syscall_64+0x4c/0xa0 [ 424.192319][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.198770][ T7540] [ 424.198770][ T7540] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 424.206640][ T7540] __mutex_lock+0x12d/0xaf0 [ 424.211753][ T7540] ip_set_nfnl_get_byindex+0x63/0x230 [ 424.217694][ T7540] set_match_v1_checkentry+0x6d/0x220 [ 424.223634][ T7540] xt_check_match+0x4e6/0xc50 [ 424.228873][ T7540] __nft_match_init+0x663/0x890 [ 424.234301][ T7540] nf_tables_newrule+0x1731/0x2810 [ 424.239985][ T7540] nfnetlink_rcv+0x1124/0x2480 [ 424.245310][ T7540] netlink_unicast+0x74d/0x8d0 [ 424.250637][ T7540] netlink_sendmsg+0x8ad/0xbd0 [ 424.255967][ T7540] ____sys_sendmsg+0x5be/0x970 [ 424.261319][ T7540] ___sys_sendmsg+0x2a2/0x360 [ 424.266585][ T7540] __se_sys_sendmsg+0x1bb/0x2a0 [ 424.272002][ T7540] do_syscall_64+0x4c/0xa0 [ 424.276983][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.283462][ T7540] [ 424.283462][ T7540] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 424.291766][ T7540] __lock_acquire+0x2d07/0x7d10 [ 424.297195][ T7540] lock_acquire+0x1bb/0x4a0 [ 424.302262][ T7540] __mutex_lock+0x12d/0xaf0 [ 424.307329][ T7540] nf_tables_dumpreset_obj+0x6e/0x90 [ 424.313175][ T7540] netlink_dump+0x6a3/0xd00 [ 424.318253][ T7540] __netlink_dump_start+0x537/0x6f0 [ 424.324058][ T7540] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 424.330297][ T7540] nf_tables_getobj_reset+0x1cb/0x610 [ 424.336261][ T7540] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 424.341876][ T7540] netlink_rcv_skb+0x1fb/0x450 [ 424.347339][ T7540] nfnetlink_rcv+0x2b0/0x2480 [ 424.352595][ T7540] netlink_unicast+0x74d/0x8d0 [ 424.357941][ T7540] netlink_sendmsg+0x8ad/0xbd0 [ 424.363281][ T7540] ____sys_sendmsg+0x5be/0x970 [ 424.368615][ T7540] ___sys_sendmsg+0x2a2/0x360 [ 424.373861][ T7540] __se_sys_sendmsg+0x1bb/0x2a0 [ 424.379283][ T7540] do_syscall_64+0x4c/0xa0 [ 424.384270][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.390811][ T7540] [ 424.390811][ T7540] other info that might help us debug this: [ 424.390811][ T7540] [ 424.401152][ T7540] Chain exists of: [ 424.401152][ T7540] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 424.401152][ T7540] [ 424.415638][ T7540] Possible unsafe locking scenario: [ 424.415638][ T7540] [ 424.423249][ T7540] CPU0 CPU1 [ 424.428641][ T7540] ---- ---- [ 424.434056][ T7540] lock(nlk_cb_mutex-NETFILTER); [ 424.439121][ T7540] lock(nfnl_subsys_ipset); [ 424.446294][ T7540] lock(nlk_cb_mutex-NETFILTER); [ 424.453904][ T7540] lock(&nft_net->commit_mutex); [ 424.459156][ T7540] [ 424.459156][ T7540] *** DEADLOCK *** [ 424.459156][ T7540] [ 424.467324][ T7540] 1 lock held by syz.1.540/7540: [ 424.472294][ T7540] #0: ffff88801d2e3698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 424.483278][ T7540] [ 424.483278][ T7540] stack backtrace: [ 424.489202][ T7540] CPU: 1 PID: 7540 Comm: syz.1.540 Not tainted syzkaller #0 [ 424.496526][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.506631][ T7540] Call Trace: [ 424.509943][ T7540] [ 424.512910][ T7540] dump_stack_lvl+0x188/0x24e [ 424.517637][ T7540] ? load_image+0x400/0x400 [ 424.522277][ T7540] ? show_regs_print_info+0x12/0x12 [ 424.527538][ T7540] ? print_circular_bug+0x12b/0x1a0 [ 424.532797][ T7540] check_noncircular+0x296/0x330 [ 424.537830][ T7540] ? add_chain_block+0x940/0x940 [ 424.542815][ T7540] ? lockdep_lock+0xf1/0x1f0 [ 424.547461][ T7540] ? _find_first_zero_bit+0xcf/0x100 [ 424.552785][ T7540] __lock_acquire+0x2d07/0x7d10 [ 424.557695][ T7540] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 424.563736][ T7540] ? __lock_acquire+0x12f4/0x7d10 [ 424.568901][ T7540] ? verify_lock_unused+0x140/0x140 [ 424.574151][ T7540] ? stack_trace_save+0xa6/0xf0 [ 424.579064][ T7540] lock_acquire+0x1bb/0x4a0 [ 424.583614][ T7540] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 424.589121][ T7540] ? netlink_sendmsg+0x8ad/0xbd0 [ 424.594111][ T7540] ? ____sys_sendmsg+0x5be/0x970 [ 424.599095][ T7540] ? __might_sleep+0xd0/0xd0 [ 424.603758][ T7540] ? read_lock_is_recursive+0x10/0x10 [ 424.609179][ T7540] __mutex_lock+0x12d/0xaf0 [ 424.613743][ T7540] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 424.619245][ T7540] ? nft_pernet+0x23/0x230 [ 424.623698][ T7540] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 424.629170][ T7540] ? __lock_acquire+0x7d10/0x7d10 [ 424.634249][ T7540] ? mutex_lock_nested+0x10/0x10 [ 424.639201][ T7540] ? nft_pernet+0x23/0x230 [ 424.643624][ T7540] ? nft_pernet+0x23/0x230 [ 424.648044][ T7540] nf_tables_dumpreset_obj+0x6e/0x90 [ 424.653345][ T7540] netlink_dump+0x6a3/0xd00 [ 424.657954][ T7540] ? netlink_lookup+0x200/0x200 [ 424.662823][ T7540] ? netlink_lookup+0x30/0x200 [ 424.667599][ T7540] ? nf_tables_dumpreset_obj_start+0x110/0x170 [ 424.673771][ T7540] __netlink_dump_start+0x537/0x6f0 [ 424.678988][ T7540] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 424.684852][ T7540] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 424.690497][ T7540] nf_tables_getobj_reset+0x1cb/0x610 [ 424.695879][ T7540] ? nf_tables_delobj+0x1020/0x1020 [ 424.701089][ T7540] ? nf_tables_getobj_single+0x610/0x610 [ 424.706733][ T7540] ? nf_tables_dumpreset_obj_start+0x170/0x170 [ 424.712910][ T7540] ? nf_tables_dump_obj+0xdf0/0xdf0 [ 424.718138][ T7540] ? __nla_parse+0x3c/0x50 [ 424.722596][ T7540] ? nf_tables_delobj+0x1020/0x1020 [ 424.727826][ T7540] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 424.732867][ T7540] ? nfnetlink_rcv_msg+0x226/0x12b0 [ 424.738086][ T7540] ? nfnetlink_unbind+0x160/0x160 [ 424.743129][ T7540] ? slab_free_freelist_hook+0x131/0x1a0 [ 424.748788][ T7540] netlink_rcv_skb+0x1fb/0x450 [ 424.753570][ T7540] ? nfnetlink_unbind+0x160/0x160 [ 424.758606][ T7540] ? netlink_ack+0x1170/0x1170 [ 424.763429][ T7540] ? bpf_lsm_capable+0x5/0x10 [ 424.768113][ T7540] ? security_capable+0x85/0xb0 [ 424.772975][ T7540] nfnetlink_rcv+0x2b0/0x2480 [ 424.777665][ T7540] ? __local_bh_enable_ip+0x136/0x1c0 [ 424.783044][ T7540] ? _local_bh_enable+0xa0/0xa0 [ 424.787904][ T7540] ? __dev_queue_xmit+0x26b/0x37c0 [ 424.793028][ T7540] ? __dev_queue_xmit+0x26b/0x37c0 [ 424.798157][ T7540] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 424.803756][ T7540] ? ref_tracker_free+0x68c/0x840 [ 424.808794][ T7540] ? __copy_skb_header+0x3ba/0x4f0 [ 424.813919][ T7540] ? refcount_inc+0x70/0x70 [ 424.818435][ T7540] ? memcpy+0x3c/0x60 [ 424.822431][ T7540] ? __copy_skb_header+0x3ba/0x4f0 [ 424.827565][ T7540] ? __skb_clone+0x480/0x790 [ 424.832175][ T7540] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.837392][ T7540] ? __lock_acquire+0x7d10/0x7d10 [ 424.842438][ T7540] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.847666][ T7540] netlink_unicast+0x74d/0x8d0 [ 424.852455][ T7540] netlink_sendmsg+0x8ad/0xbd0 [ 424.857243][ T7540] ? netlink_getsockopt+0x550/0x550 [ 424.862569][ T7540] ? aa_sock_msg_perm+0x94/0x150 [ 424.867516][ T7540] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 424.872810][ T7540] ? security_socket_sendmsg+0x7c/0xa0 [ 424.878321][ T7540] ? netlink_getsockopt+0x550/0x550 [ 424.883558][ T7540] ____sys_sendmsg+0x5be/0x970 [ 424.888347][ T7540] ? __sys_sendmsg_sock+0x30/0x30 [ 424.893512][ T7540] ? __import_iovec+0x315/0x500 [ 424.898403][ T7540] ? import_iovec+0x6f/0xa0 [ 424.902935][ T7540] ___sys_sendmsg+0x2a2/0x360 [ 424.907628][ T7540] ? try_to_wake_up+0x67c/0x1080 [ 424.912578][ T7540] ? __sys_sendmsg+0x290/0x290 [ 424.917372][ T7540] __se_sys_sendmsg+0x1bb/0x2a0 [ 424.922406][ T7540] ? __x64_sys_sendmsg+0x80/0x80 [ 424.927391][ T7540] ? lockdep_hardirqs_on+0x94/0x140 [ 424.932663][ T7540] do_syscall_64+0x4c/0xa0 [ 424.937119][ T7540] ? clear_bhb_loop+0x60/0xb0 [ 424.941824][ T7540] ? clear_bhb_loop+0x60/0xb0 [ 424.946556][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.952482][ T7540] RIP: 0033:0x7f173e19cdd9 [ 424.956916][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.976545][ T7540] RSP: 002b:00007f173f016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.985061][ T7540] RAX: ffffffffffffffda RBX: 00007f173e416180 RCX: 00007f173e19cdd9 [ 424.993046][ T7540] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 000000000000000b [ 425.001041][ T7540] RBP: 00007f173e232d69 R08: 0000000000000000 R09: 0000000000000000 [ 425.009055][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.017041][ T7540] R13: 00007f173e416218 R14: 00007f173e416180 R15: 00007ffd07de2a68 [ 425.025052][ T7540] [ 426.383244][ T7386] device hsr_slave_0 entered promiscuous mode [ 426.396762][ T7386] device hsr_slave_1 entered promiscuous mode [ 426.416973][ T7386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.425322][ T7386] Cannot create hsr debugfs directory [ 426.834276][ T5007] device hsr_slave_0 left promiscuous mode [ 426.844477][ T5007] device hsr_slave_1 left promiscuous mode [ 426.851083][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.859129][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.867364][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.875293][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.885199][ T5007] device bridge_slave_1 left promiscuous mode [ 426.892019][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.902302][ T5007] device bridge_slave_0 left promiscuous mode [ 426.910492][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.924677][ T5007] device veth1_macvtap left promiscuous mode [ 426.930907][ T5007] device veth0_macvtap left promiscuous mode [ 426.937197][ T5007] device veth1_vlan left promiscuous mode [ 426.945904][ T5007] device veth0_vlan left promiscuous mode [ 427.098525][ T5007] team0 (unregistering): Port device team_slave_1 removed [ 427.124630][ T5007] team0 (unregistering): Port device team_slave_0 removed [ 427.156204][ T5007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.184194][ T5007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.284301][ T5007] bond0 (unregistering): Released all slaves [ 427.401838][ T7386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.432215][ T7386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.441896][ T7386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.452439][ T7386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.543096][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.556450][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.564608][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.577408][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.611166][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.637744][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.647062][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.654336][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.673955][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.685363][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.694369][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.709809][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.716998][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.727880][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.737215][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.776675][ T7386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.801630][ T7386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.819306][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.829893][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.839155][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.847884][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.857069][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.865634][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.874705][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.883257][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.908363][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.929189][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.117836][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.125932][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.142609][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.444360][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.455975][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.492682][ T7386] device veth0_vlan entered promiscuous mode [ 428.502786][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.512215][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.523057][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.531757][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.546049][ T7386] device veth1_vlan entered promiscuous mode [ 428.571163][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.583343][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.597530][ T7386] device veth0_macvtap entered promiscuous mode [ 428.610249][ T7386] device veth1_macvtap entered promiscuous mode [ 428.626482][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.638050][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.648340][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.661486][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.671508][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.682748][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.692961][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.703593][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.714870][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.722961][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.732339][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.741054][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.751498][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.765555][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.778641][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.790591][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.802067][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.814222][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.825911][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.837515][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.850428][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.862065][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.872958][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.882760][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.895734][ T7386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.905550][ T7386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.916773][ T7386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.926945][ T7386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.973489][ T7386] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 429.002162][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.015582][ T7386] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 429.023734][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.035798][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.057537][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.067143][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.076116][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready