last executing test programs: 2m49.109609183s ago: executing program 2 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m48.039844139s ago: executing program 2 (id=116): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 2m45.891157132s ago: executing program 2 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m44.54715606s ago: executing program 2 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x4) 2m43.152063902s ago: executing program 2 (id=131): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) 2m43.027219342s ago: executing program 3 (id=133): ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000200)={"7866e557d459ed7769ab8d380285c64c248fb03ff3738d5f4dbcd5b200", 0x1, 0x20000000, 0x80000001, [0x0, 0x34030f8e, 0xffffffc0, 0x0, 0x0, 0x1, 0x82, 0x2f60, 0x1, 0x8, 0x48, 0x1, 0x1, 0xc346, 0x0, 0x0, 0x4a9, 0x3]}) 2m42.731951885s ago: executing program 3 (id=135): setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 2m41.215941388s ago: executing program 2 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) unshare(0x20000400) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000005c0), 0x400000000000291, 0x8100) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r8, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) 2m39.502305345s ago: executing program 3 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6", 0x544}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m39.214213868s ago: executing program 3 (id=144): socket$igmp(0x2, 0x3, 0x2) bind$netrom(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f00000002c0)=0x20000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="0d000000010001", 0x7) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2m38.953711849s ago: executing program 3 (id=146): pipe2$watch_queue(0x0, 0x80) 2m38.255039345s ago: executing program 3 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) read$midi(r4, &(0x7f0000000380)=""/250, 0xfa) userfaultfd(0x80801) 2m23.593217233s ago: executing program 32 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) unshare(0x20000400) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000005c0), 0x400000000000291, 0x8100) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r8, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) 2m21.779965279s ago: executing program 33 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) read$midi(r4, &(0x7f0000000380)=""/250, 0xfa) userfaultfd(0x80801) 12.570099s ago: executing program 0 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.57714339s ago: executing program 6 (id=473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f00000004c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001a00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x50, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xffffffff, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.697179951s ago: executing program 1 (id=476): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x800, 0x0, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 10.506853636s ago: executing program 6 (id=477): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 9.378272447s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) uname(&(0x7f0000000280)=""/33) 9.313306272s ago: executing program 0 (id=481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740), 0x0, 0x8010, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010241004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 7.211166161s ago: executing program 4 (id=483): setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0}) 7.165307734s ago: executing program 0 (id=484): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000070c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2c}}], 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x2) landlock_restrict_self(r1, 0x5) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0200030059cc60844dd4b502"], 0xb) bind$unix(r3, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) close(0x3) r7 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x559}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000300)="68b709ca6cfbe3b7ac8487d9aab38b9d194ea41fca57b35bbde5d901b02947737b6210d49a41ceeb1bfea659c175f7c6f3f4c846ae47b30949f61c35650bc428cca244edb0fe09ba", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000280)="f6b5193c92620af9b3fa1faccb57e074e14ce635198e3153ea38f30d3158296db167d2748fc6236ea19b7a3527962b4f075eeb493b85a78d0206b27a153ce2a1788c167469adcc05", 0x0, 0x48) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) 6.96585748s ago: executing program 1 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f00000004c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001a00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x50, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xffffffff, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 6.163373205s ago: executing program 5 (id=486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x100) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001aa40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x1) 6.089908811s ago: executing program 1 (id=487): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x4, 0xa, 0x400, 0x1, 0x7, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x5, 0x2, 0x5, 0x1, 0x5, 0x7}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x14, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "d7adfa4e"}, @main=@item_4={0x3, 0x0, 0x9, "08df0e48"}]}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) listen(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x861168966fa2e5c1, 0xc, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4c71, 0x5, 0x7, 0x6b8, 0x7, 0x10, 0xb357]}}]}]}]}, 0x40}}, 0x0) 5.909625275s ago: executing program 0 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@data_err_abort}, {@dax_inode}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}], [{@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001600)={{}, "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"}) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfd, 0x142, &(0x7f00000002c0)="$eJzskE9LMlEUh595/fe+b4oGBhYUQYvEMMcR22skCdlA4KZVoBMFmqIQLq11iz7ALIqglfgZylaWQtjncBe0LK53LII27e+zufc85/CDc7b+ASFwIdmsVesNq9m0yst7ZiGnoUnvA/5OftV6QwyXpb/LwJF43TA+k/oh8AeoWOulWkXU4wxEgewMHB570JGz/4ULC1exko6LrkBvTjrjB5dy3IIbskHpRN77NayKvNmvvFegZXuczeKx20VXhrZT2mvdzuPuoJ+Px5asCyM3f+OPuChaXhA7t+yXRD/+nOh2RsNBYccsmMOUYWyk9KSup0fm0yCfbl/i3vafwr7mHAmZ5xUZRTjXwNagM8kb32sBoHf1ZlaDvrC4+0kItO+daZLslA4inqnh86NQKBQKhUKhUCgUCsVv+QgAAP//tQVW5w==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0xd4, 0x30, 0x107, 0x70bd2a, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xbd, 0x136, 0x0, 0x1, [@generic="f3a830d6f6018390d28caad5a500fa272eccfdbc07fda8af7bd71e3980223dcadceacc2e52a844eb1b016ae40b90581b9ac8464bd6fda6a8efdfc2a84afc89f2d341c421570a4be93a6ff598910b0fd30685db50aa62722032a0f9b5ad3f2d179d185db74c751256852903a9f5bd3bd9f702950830d363686525ae305850de3cf5709f65ea5a7397b8393455ccf08f8ebfff70ffe6ebce43c134bd768b255f635a55368922e9ce943288a2cbdd6e72344c0dc79b10d0bc1f1b"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) 5.821334622s ago: executing program 4 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x9000) fallocate(r1, 0x1, 0x13, 0xfffe) 5.685128993s ago: executing program 5 (id=490): ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, &(0x7f0000000100)={[0xffff]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 5.301077984s ago: executing program 4 (id=491): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 4.861659769s ago: executing program 5 (id=492): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000040) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 3.500281699s ago: executing program 5 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x14}}, 0x40000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x13) clock_gettime(0x0, &(0x7f00000002c0)) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r6, 0x0, 0x0) 3.35336103s ago: executing program 4 (id=494): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740), 0x0, 0x8010, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010241004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 3.209023342s ago: executing program 6 (id=495): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x800, 0x0, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 3.136504508s ago: executing program 0 (id=496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000bc0)=@allocspi={0x120, 0x16, 0x401, 0x70bd29, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@rand_addr=0x64010102, 0x104, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in=@local, {0x3c48bc8a, 0x1, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x5, 0x1}, {0x800, 0x0, 0x96}, 0x70bd2b, 0x1, 0x2, 0x2, 0x0, 0x86}, 0x20000008, 0xdfffffff}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0x2, 0x2, 0x0, 0x7}}]}, 0x120}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) pread64(r3, &(0x7f0000000400)=""/154, 0x9a, 0x51) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x1a0, 0x1a, 0x8, 0x70bd29, 0x25dfdbfc, {0xd}, [@generic="8aa3b218508016a1608e89613cf1c4d2ae99953fff159f8a3ea33b83d536ddd56c532133e0506863201fd240daff51f8999db2cd0afd2b7301d3151b331b1f8ddeacc00a99fe689fc70115d0b0cdaebda81d2a55a06ab390be0ab87dcb4a3d51a50309ec54325ef942bcc9393bf87e30d7e237c66e7e60c4162e7a489c2e8d2f5de6e16aabdc7227e353d0231fe0929e190f708196f83de00914", @generic="723c3cc6eb3a0e7f6d2fadcdae2968be09e446780ce373b680af7915ab627e70467c5b14", @typed={0x8, 0xf0, 0x0, 0x0, @uid}, @typed={0xc4, 0x6, 0x0, 0x0, @binary="b7786d3afb24b9afb88b42a0c5ec77f0130feb0f1651621b30ba881f1d3e0c1754f3e86d8432d2ae1f0ab754d790ec4a878c0884fc3ef1eaad77dc3a2e990a29801050eceee515a4d7b053a56f2628533e3be4f5ffa04a8b8c3b76433e06ac1c98c46f40131e2ea3302ebcb669dd19fb4b1c5f62c180a8463a4c8ea6bd072827c020638aa296577baa6dff4c3dd1d63dc221e8ff80e14f5961745e78c24a26d57649cb78ac3bcaa0e815f90966176ee44f6f4d5ed99296e2b53ad2a8a01a4a72"}, @generic]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000080) pipe2$watch_queue(0x0, 0x80) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.211406812s ago: executing program 5 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}}, 0x0) 2.127963449s ago: executing program 4 (id=498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f00000004c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001a00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x50, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xffffffff, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.966417502s ago: executing program 1 (id=499): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7c", 0x380}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.445984254s ago: executing program 5 (id=500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x100) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001aa40)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x1) 1.2431027s ago: executing program 6 (id=501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f00000004c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001a00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x50, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xffffffff, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.174113406s ago: executing program 1 (id=502): ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, &(0x7f0000000100)={[0xffff]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 1.021894798s ago: executing program 4 (id=503): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x4, 0xa, 0x400, 0x1, 0x7, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x5, 0x2, 0x5, 0x1, 0x5, 0x7}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x14, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "d7adfa4e"}, @main=@item_4={0x3, 0x0, 0x9, "08df0e48"}]}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) listen(r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x861168966fa2e5c1, 0xc, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 760.971529ms ago: executing program 0 (id=504): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x1, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0xe39]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x2, 0xa89, 0x6]}, {}, {0x8, 0x88be, 0x4000}}}}}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) syz_clone(0x4898d311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r4, 0x0, 0xffffffff) 221.587782ms ago: executing program 1 (id=505): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) uname(&(0x7f0000000280)=""/33) 0s ago: executing program 6 (id=506): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@data_err_abort}, {@dax_inode}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}], [{@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001600)={{}, "ece59e259d0b1b27f5ff6cbcd6f38e236aaf993fc40ef0f3e3e4b642f63f44c43a2d60e2ffbe53d735b8e8448982748f59e063c4e0e5ccba0a6656827f974875cd2439f0f9c538ac8dde53a87c17884ab21b9a5d797cd76c754d313a5fea3f9ba2126e991950356aecdc5989bf097a687aa4f924c77276d924c8d610960b14a7f467b0f0f8c97ee3916eecfe9efdee3e8748ecdbe788bb43959e0de6ea4a58e83e7b473339db17f975558d10064bf106f61212dc6b05218ca99735fe642fb8b6b33fe8e3e4eedae9e10be6353b835fa69df771df1808e07764e909c5e197fbd895395198d5b0492d86aff03cd921631b78a03017920d5d7b98ff74da86e8fe08bddc2370236bc3f4da61625127a36c279ddc53283cf414763301f724f1a7848d298c158f5c62c0e68dc6942fbaf5694113ebd47dca60bda63add878069f7f0ac92dffa4b9b649c4109768b42353ad17977aaea8b98cf034d3a6cc6bb71bba2da140194e1daf8652259b8d762c2ca9bee10318512b25da4be0cfa4d7c3aecc1c3058e48a65d044d22856712fcc1c225970e0eaa56e6d72b604a4bb3a7f0cb846a35bf379a2f13c8ac3ce4bbd90e82bfc35d9f5f07127d0844c6448f1766673c20c12b1ba50a4db922200386a1afe80b5816cc6102dc374de48343a90414ed4cefc7035e6297621b984f756bd3ff8c4a249549da40d45fe9c76956032e96410f75dd1ab768d6e6c01442c0883683e4fa7d44fc96e2047522ebcca8507b326e87ef68e457d6d084439622f79f6a62060293d649a9a11cc3ecf8a1aebe6330e01e406d7a638bcb73d38d906db73d9235837e15949e300f4af53668cc6215cbd191bd5f15cf8796b3f6f84ca7299dae00df0c8aae4058efcaeb490610fbcea2068ed51b711384d00634da76f53fd7feae7c1ba36952298b29bf5888dce991940937f2bc48ffa41c1f83b83f9ef430be78163685d01cb117077f3dfa6e1e1ac44d1e62d5cc39785847e7f52120ce4f20e0d0b6c4ba4fe2188126ddebf6131cacc38f00bfc7bd5acc5a1bdf5270424701022bd337b3de45ea52a5b0375c5c551d577488a0dc7c131bec595e1df6670a7987470588f0f7236df7726aac78beed653c9baebc2ce07bd1df5f03f7b3dd8bfe921425e6d9c36fdfb0fca7802cbd81025ddf97cc28e17e5166f072a792eb978594fc96e09e92f59828ee6c8c05473e26913e415b3805c19cd23fd097ca1e8ab837f82e9ab23e0b7bab2a29fa44cc1a44328e08999f3d9dbbb0b178109b3fb6c40b47a2c1f0eedde58dad6fb7fe75a8ceef5b0efb9eb5ee8e286bc9cf141f1fcb6583af9da6d398731f6cbe24055965eb61532b3819b1f6a97d2ad8f6d2d1e1e55f3b2f935bdeecd5fc05f4f06f9c083be1a4d6450c60ade665a4ac44fdf3d5dfd15b9e0f6a1da431f7ba662a06173213856d61926f4e0e58b2ffe294f2366ad8dd1ad22800e48f9123301fa3ac0dcd72b5a70831a3950271261a936d33196ed57194b17b1e2ebcb21ec3e247a0b7f2794b81dc28443b5bd2fa484c1cebffbc0e4c8274e0a768b6dd3b2d5ac9abc081d99509d9b1970669db583d302d153bcb23200e823ef21b0a37bebd0c79e84651f840266113f1880f90bf424c219aae2e2046c5655142415960a7a85227cefe6f96e24bb51d257bb950b91b3ddc6f3c08de526e70a399cec438845fd4963129eaf05d23e3c56c2d6a4c6a18b9664da20866ca6eddd97972a0c194c630e8f2a073e7743557a0a7e0aef20ad77ce92f469bb7b7fd473f9735ecd7a6be2c882e8f88de16c417e60f0f39c3b5b0f9041f36d6ab2abcf231af206616d7f0f951b30dfab7f640ef9e62793cd67819514072fb2dae426c6bc38086ad839803068a8150c532657254793978fb16cefd165289e8b9f5a51eb98f068926ae77ab80a978411d1382d522515dbb83a236994a5030b53909209b92c9a8ba73614ec3e9a8ec03a107becfcaae1e6decea96c2b5bf577445e30c650d3bd76168bf8c66c278df1bb18c00de928d33c093bf511a50e51266840392792c53b01a14e23f25a74223ae62991c93c9a9a95b6b967854f79fb4bbe122e98cbd950478a915769412fd3368e63af4d2077d16162d51730dd7cb27a8647f2f17f6478f85c53ca0798e7a5fd8148a12c6f8e5f486c314426f8e41a74e5bed62c661bebaa783592f74d5ff5e842238fe55f40ce3a6cae340b0e7cb2294f35af326d34a7c4f4f39db6c09c1dd7a370f5218b178232d6d13274448047e562f978d0381bf96ddaaf3d135281d6abcfc3f6207b129de15e1d8ad593f73dfe319fa2e55fe2335ec4ca7d2563df75efe27eeb029cc365eaa2c9a7be2301dc25ad9139b704ae8dddb200aad790a557749ee9065e88e517732336208d982ae789b29fd0f75be3af5e99eceecabe4fba5943f190d6c2ac35a19f66d1f7053bd7eeed283a89fd2bcc4b3922a5484cedfe505b422484a9fae1e13086857c2b5adac61882d00592449bf6f76d5f9c634a5ca973f47cbe5341bc349d57f57dd55feb668b667f8836992b4b8bf47731705c06a923eb910458bceec24f3ed71e9db23a166ebeca6dc2e6d7e83685eaa7098d96c967c678f4ac77b2b2b415910585638077832ee0c9a5849ae100413d254cd77940634465ca5ea90ced0a060a3cb3a4753416726fb5538614a442bb9c9a7aaf380da9a103a1df4619c71c2c5c02497b0f28cad6a5b1cec4cbc0c2ec49e826db16d878c3e85f0e98361d8f2ef08c4cc933e303f93af1f7895db9de0aa0e8882fbef95afacd332c61cf5788cd56837fc15b0de9d60b59f35d37ecd7a453009193fc020f59152734df129b09d29ec094325542be9c0885686760f87d395ce1a3b94c95dee890b93e6580a522fc8f04aab460c4f9ad2c0f738e436d72b15a4fe2079ac1902d3fbc22c12ed1f4f379c6ab6ba7c4cb42845cddb9046953a698184e60e8b88a1dfbfae594584acd5db6b823cc082d116ac7e86925600f067e2d39ed2b6111c0245b4057f4ccf71244783609575c5eff4970cbd63a4375129d0d478ca98cc7579657cf0621c0714286b6ab073cd8874348d360e6871b0ebaa9e31c9e5742b299b00820c95107a29205608e686eb089c1f1a4206af80610bcbc42431e136503a6fa19a614857aabd768e044dfb62de0890de02d155fc08411f5e2ba62e5a13d8cd4e8981d5947eaa68f6286126db99993391019d5b2bcd49bb4ba2f75fbb6f42bc4ea916a7fda942eadb6f51c8b330f35bfdfecacddb41a8211c73d44550da4b69a83eeabb92fd2d444a85f8bc9e677e9caa72cd7ef0c6804aa4bc6a4a9cbf306efd73e47cfaa34ffe922c3631926f13b5a139e4f718b5fa82cfa19f270757c218e191b3a2559fd66fbebf299d891ec884fbc81d9733058eb9985e8920000703a905dc988c50c92b3f9abaaf9b6cffb7621f41aa5ee1a06f73d2dc038ae06405dbc4d7fe8a939cf245bbf68802edec5d18a89adb5543207f3cf2aad65d1bf23de27bc02d977e50016b6f8f5f783577b7616bf7d3c2939bd5763f36af417c3c7919cbfbf632f16ecb06e083c25621e6c142286a76ce91a0ac6f06789512936326d8b881eb20bd04bf38c4106e8a9decaed66b6d22ab839a89edf864f14db748e09f2e2fc5e6c354cd7d89536fe9f62f78ac1e4773be3a60787375539e377cbf5c0fef1dc0bfa7a163a936ad00909fc7a8f1f653f95b8b8176e5cdac67cbfaf05e9dc1351f3c026be4c372194ce63456f294d9d8ca98d92dcbeb14bde0a249a2209b7fbdf530845354c6550315439c4cbc2ceed2b828d3e50494c01fa0be27f4a09722cd9bf0e28d754bde5518c30cb17ab15a4a6a548a8404d41959c93e1309efa3ccad192725b445c6c053404b220ae6d4ee3924d1cfcf7ad240e859f745abf01cdd5b59efcaa8c441e0f0aa7cc9f1710650da6467e3dd196a38a96937814b82c1c535008648bbc10377edff811b2f82401bbf306b81c8d0835df5f2a5dbd85c4f70cdb67955401118f14660542cc0d9bea20084c1ef05742ca93082cafdcefdc6359f1d073ce4c86e9bd67a79d016f2ee118c79eb8cf15daf4b2d0dbbffe283f79a0dfbf604ce6b52541f751afced4b5b9b8b02fb7eab8d0036475f9cc180c09ad3c4945c96067215710c797f0ac83fcb0e4d3ce5f6059df982c04db103cdbbb99fd24fb2cb22e396c0f751332d3baa42d006c5b4a5dd1044ec7e7d201bceca5b420eedbff460f4c29442f7525ddb8dea6bea454d2db36edd254974415326b4ebb187c5749bfa0e148cf084c5f7fd0d105e88b93a8f3a1b971de47a8ae1cecc36de4e64f804d523d460c1ac5624df642b5ba08a43a7c7f8b4ae4e4a1a745812fe004856aebc83343f12bc6e271d923ac747449049152bb7514ea087dd91a5daa4ba98337630ba0c54b06c87a4b1be102531ac6dafa8e954cfe731e90ddcf6eeaa6ffdac36f04b2921bfbab8aba7adb8ef64bdb87e918ebb63b6466c2d63dc8d7a8b6171c64f4c291654a63155cc392cdee24782cebd0e7ae7690f43f63e67d82ee8ce0ce3875aaed4a78250ed78abbeb20d982edb344208b04328c34b248cd86b77f042c81f89a0825e3864b1770e63a3340ca6c6edbf4c098074e541f57e770da7601bc9a0827ac3e03a8d118e0f52a2be69af98599f8fcf342daeabba979430def9789cc80585f9ec36a7873b5b80278048a2ee7d09a93c2e2a00bf60138230d974c8aff8ec8eb807ef996d255a2c0037241a267e365674286cb4b3d20daf1823a0335bf1d96c9841f81d51ce02ac2a7e1f001654492444fe19a408ef347fd55b3133b66a69ecccbce7b2043d5f370969a0692effc0cf8617b15f938403fd29bc1b360ebea3a6aca9169a99ed3c9b2f7a0f2360cbc478d247d6712e24c9ff627eff4fbeb3867d15bde489140d3055eabb62ba99d5e509fa02b43e4fcffca259bf098f32a99f945ccfb942bf396fe774f77aebc073ac8ad7cabdd5253137a83667c9693ccd5fd5bd15faf3ef093549855ae44611cf3e7bfc832eeb90de4ac8f1750e1c7abb3d364fc68561dce664d96536a4ad1d79d84971776956c35506b7c3366d08974e71cc3d7f257c5d9bedfded1b1ec2f56366cab4027c30ec94d946dd87fd98b5208d4be264ac32abb0e01e0da0dcdbc3950c70897cbc83fe1f9b398b78e21704ec771d8506aa6fc8e7535fda76e575da7d621e9a1a0601265c4f5d3752c04f25b23300e24385d87c26becb446d4d654b3976f4f54d31f42b3ec7e155c8ad86531bd718293fce7a22ed34ef300eebaff7a807556447a6f1660bfcdbc4e76899aae5ff07c8b4bb5fe6fc88eb0716788721c065034aa33ce6a69cc7e972d569403b0c9cc3de7dfb13a25e5e158a7ee997274b47463fcd59f13157e263325467c7ce6c7e12227fd31b643b9cfdd68aa3e950bcc4ee797889d18568bed05155786ccda7195ba7aadb1aced1b9a9ecd0dc34f5579a7a4cb2646672dc13fba54e37e86277de2aaaef8f8dbefce67b05473796f255af5c7f101358ec424510fc071979a3c81b065cc02343bf59a0c2b9d41bd0950e95b34baf066acfdb6a84384f3e956dc70c1b2589b47427818850955c6ce6cd5c08a8284ff739ab8ad5d6eee5a1a85724a60e35ee6a82c22eebf25f74c8c4da9c401c1642e3d76a566c0a4a6241a2196194d3114cf9aa2ec6430645655096986ab4851e7a144fe4eafab1a8224c8646c46711ad613dd5d4e337f76482f8ca0bff856f0bb4ef2a37"}) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfd, 0x142, &(0x7f00000002c0)="$eJzskE9LMlEUh595/fe+b4oGBhYUQYvEMMcR22skCdlA4KZVoBMFmqIQLq11iz7ALIqglfgZylaWQtjncBe0LK53LII27e+zufc85/CDc7b+ASFwIdmsVesNq9m0yst7ZiGnoUnvA/5OftV6QwyXpb/LwJF43TA+k/oh8AeoWOulWkXU4wxEgewMHB570JGz/4ULC1exko6LrkBvTjrjB5dy3IIbskHpRN77NayKvNmvvFegZXuczeKx20VXhrZT2mvdzuPuoJ+Px5asCyM3f+OPuChaXhA7t+yXRD/+nOh2RsNBYccsmMOUYWyk9KSup0fm0yCfbl/i3vafwr7mHAmZ5xUZRTjXwNagM8kb32sBoHf1ZlaDvrC4+0kItO+daZLslA4inqnh86NQKBQKhUKhUCgUCsVv+QgAAP//tQVW5w==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0xd4, 0x30, 0x107, 0x70bd2a, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xbd, 0x136, 0x0, 0x1, [@generic="f3a830d6f6018390d28caad5a500fa272eccfdbc07fda8af7bd71e3980223dcadceacc2e52a844eb1b016ae40b90581b9ac8464bd6fda6a8efdfc2a84afc89f2d341c421570a4be93a6ff598910b0fd30685db50aa62722032a0f9b5ad3f2d179d185db74c751256852903a9f5bd3bd9f702950830d363686525ae305850de3cf5709f65ea5a7397b8393455ccf08f8ebfff70ffe6ebce43c134bd768b255f635a55368922e9ce943288a2cbdd6e72344c0dc79b10d0bc1f1b"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 81.581429][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.608549][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.620490][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.627942][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.654469][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.667290][ T4275] team0: Port device team_slave_1 added [ 81.673632][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.680785][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.707333][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.731573][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.738693][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.764871][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.802408][ T4266] device hsr_slave_0 entered promiscuous mode [ 81.809822][ T4266] device hsr_slave_1 entered promiscuous mode [ 81.830559][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.837763][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.864191][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.889891][ T4267] device hsr_slave_0 entered promiscuous mode [ 81.897116][ T4267] device hsr_slave_1 entered promiscuous mode [ 81.903769][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.911882][ T4267] Cannot create hsr debugfs directory [ 81.920861][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.929128][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 81.929145][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 81.935536][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 81.941601][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 81.947720][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 81.960364][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.986493][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.061917][ T4277] device hsr_slave_0 entered promiscuous mode [ 82.069056][ T4277] device hsr_slave_1 entered promiscuous mode [ 82.075870][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.083477][ T4277] Cannot create hsr debugfs directory [ 82.101595][ T4265] device hsr_slave_0 entered promiscuous mode [ 82.109192][ T4265] device hsr_slave_1 entered promiscuous mode [ 82.116002][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.123707][ T4265] Cannot create hsr debugfs directory [ 82.218061][ T4275] device hsr_slave_0 entered promiscuous mode [ 82.225496][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.232060][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.240066][ T4275] Cannot create hsr debugfs directory [ 82.530157][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.541261][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.556444][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.567390][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.631970][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.661840][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.680286][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.693126][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.774960][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.786825][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.820069][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.840077][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.872198][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.917089][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.930683][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.949093][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.969202][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.979136][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.989605][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.000132][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.019662][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.046050][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.055976][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.065633][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.072875][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.095229][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.103632][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.111989][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.138663][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.153695][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.162726][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.169946][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.179932][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.199144][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.213970][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.232354][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.242327][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.252382][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.261641][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.278346][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.287366][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.296352][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.303470][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.316099][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.324928][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.335986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.348290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.377748][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.387177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.397080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.409453][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.416637][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.439652][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.467282][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.476754][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.485995][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.496808][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.506972][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.517694][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.537955][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.550026][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.573320][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.584785][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.597709][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.608105][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.619641][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.630472][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.640211][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.649695][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.658934][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.670858][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.679962][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.688747][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.758923][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.795784][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.832416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.846155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.888023][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.929584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.960267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.989183][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.004395][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 84.010490][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 84.017010][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 84.023079][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 84.029576][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 84.040872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.050050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.059769][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.067184][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.076453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.101419][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.122030][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.142858][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.166048][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.173210][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.187614][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.198545][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.212520][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.219775][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.265667][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.290451][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.304653][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.312613][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.323112][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.332175][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.342733][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349897][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.359189][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.371623][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.383285][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.395940][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.431124][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.439657][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.449944][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.461811][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.471407][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.480905][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.490038][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.499236][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.509445][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.521863][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.529475][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.568889][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.576389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.586625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.595995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.605288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.613973][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.621151][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.630243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.639443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.648712][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.655890][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.663777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.673206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.681040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.688610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.697497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.707971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.717319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.729702][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.774918][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.791276][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.806334][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.821923][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.831165][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.849906][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.863556][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.893364][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.911080][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.934805][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.944971][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.953671][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.970037][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.979316][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.988323][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.997620][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.006794][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.017256][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.027785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.038534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.070065][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.117173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.145550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.195689][ T4265] device veth0_vlan entered promiscuous mode [ 85.204809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.224784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.250385][ T4265] device veth1_vlan entered promiscuous mode [ 85.266177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.285110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.305091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.313859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.331561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.347302][ T4267] device veth0_vlan entered promiscuous mode [ 85.384219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.392618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.409500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.423892][ T4267] device veth1_vlan entered promiscuous mode [ 85.452331][ T4265] device veth0_macvtap entered promiscuous mode [ 85.475072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.484761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.493513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.503251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.528156][ T4265] device veth1_macvtap entered promiscuous mode [ 85.552160][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.564401][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.579988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.620233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.650845][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.663450][ T4267] device veth0_macvtap entered promiscuous mode [ 85.706665][ T4267] device veth1_macvtap entered promiscuous mode [ 85.758938][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.768072][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.783308][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.793197][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.810318][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.834973][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.845521][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.858250][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.866546][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.880219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.888384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.901244][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.913339][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.925566][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.937504][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.950534][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.958422][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.975009][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.990250][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.999408][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.032313][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.048318][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058789][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.069038][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.083679][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.092909][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 86.092951][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 86.094690][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 86.111167][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.111587][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 86.129207][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 86.130329][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.155428][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.208545][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.217891][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.228568][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.238938][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.252676][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.262285][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.271444][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.280512][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292353][ T4277] device veth0_vlan entered promiscuous mode [ 86.305920][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.315056][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.323147][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.339008][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.411580][ T4277] device veth1_vlan entered promiscuous mode [ 86.460154][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.473602][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.483703][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.496010][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.505077][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.533984][ T4266] device veth0_vlan entered promiscuous mode [ 86.586635][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.599596][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.602416][ T4266] device veth1_vlan entered promiscuous mode [ 86.626321][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.659240][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.667714][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.677912][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.688125][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.698766][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.715600][ T4277] device veth0_macvtap entered promiscuous mode [ 86.742155][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.770329][ T4277] device veth1_macvtap entered promiscuous mode [ 86.806144][ T128] cfg80211: failed to load regulatory.db [ 86.828737][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.839243][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.870513][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.898286][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.920321][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.936212][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.950561][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.963361][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.986524][ T4266] device veth0_macvtap entered promiscuous mode [ 87.001033][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.013603][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.028604][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.038505][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.053876][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.075005][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.085423][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.098918][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.109224][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.120140][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.133234][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.152061][ T4266] device veth1_macvtap entered promiscuous mode [ 87.162586][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.176332][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.199071][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.228746][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.237794][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.250784][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.254457][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.263056][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.282136][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.310237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.321566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.347479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.390757][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.422735][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.438830][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.450833][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.467260][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.480246][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.518059][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.596498][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.628211][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.645041][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.663841][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.685570][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.704252][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.725023][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.764489][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.794175][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.806184][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.825358][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.846824][ T4275] device veth0_vlan entered promiscuous mode [ 87.885276][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.893614][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.925166][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.954609][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.967574][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.976926][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.986438][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.995456][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.053605][ T4387] loop0: detected capacity change from 0 to 32768 [ 88.062931][ T4387] ======================================================= [ 88.062931][ T4387] WARNING: The mand mount option has been deprecated and [ 88.062931][ T4387] and is ignored by this kernel. Remove the mand [ 88.062931][ T4387] option from the mount to silence this warning. [ 88.062931][ T4387] ======================================================= [ 88.147640][ T4275] device veth1_vlan entered promiscuous mode [ 88.156395][ T4394] device syzkaller0 entered promiscuous mode [ 88.164799][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 88.165257][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 88.170889][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 88.177145][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 88.184884][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 88.278750][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.293926][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.304614][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.315895][ T4387] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.323646][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.350978][ T4275] device veth0_macvtap entered promiscuous mode [ 88.419370][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.435132][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.471956][ T4275] device veth1_macvtap entered promiscuous mode [ 88.477522][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.534227][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.549970][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.581811][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.636873][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.664113][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.674794][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.694101][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.714327][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.744401][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.754589][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.784146][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.808258][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.819304][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.836752][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.849215][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.860298][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.869710][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.887980][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.923971][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.944214][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.974138][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.984692][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.004072][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.020128][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.038691][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.061910][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.084423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.084435][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.136670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.163262][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.187638][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.217815][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.239201][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.257471][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338554][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.698424][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.730109][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776465][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.948423][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.973531][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.002934][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.508546][ T4420] mmap: syz.2.11 (4420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.731320][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 90.764354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 91.904040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.925354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.943534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 91.954050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.962303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.970766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.979228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.987631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.995987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 94.195342][ T26] audit: type=1326 audit(1756272027.688:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 94.268462][ T26] audit: type=1326 audit(1756272027.738:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 94.332229][ T26] audit: type=1326 audit(1756272027.738:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 94.388238][ T4465] loop0: detected capacity change from 0 to 64 [ 94.400374][ T4465] hfs: invalid catalog max_key_len 1792 [ 94.406522][ T4465] hfs: unable to open catalog tree [ 94.412112][ T4465] hfs: can't find a HFS filesystem on dev loop0 [ 94.483154][ T4381] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.544826][ T26] audit: type=1326 audit(1756272027.738:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 94.753616][ T26] audit: type=1326 audit(1756272027.738:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 94.885148][ T4459] loop1: detected capacity change from 0 to 32768 [ 94.901802][ T4471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.981485][ T26] audit: type=1326 audit(1756272027.738:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 95.012493][ T4459] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 95.074212][ T26] audit: type=1326 audit(1756272027.738:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f8ebe9 code=0x7ffc0000 [ 95.454341][ T4479] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.372494][ T4499] loop3: detected capacity change from 0 to 64 [ 97.384742][ T4499] hfs: invalid catalog max_key_len 1792 [ 97.390667][ T4499] hfs: unable to open catalog tree [ 97.396366][ T4499] hfs: can't find a HFS filesystem on dev loop3 [ 97.594376][ T4505] loop2: detected capacity change from 0 to 1024 [ 97.682189][ T4505] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 97.695203][ T4505] syz.2.40: attempt to access beyond end of device [ 97.695203][ T4505] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 97.709720][ T4505] Buffer I/O error on dev loop2, logical block 458752, async page read [ 97.731005][ T4505] syz.2.40: attempt to access beyond end of device [ 97.731005][ T4505] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 97.744800][ T4505] Buffer I/O error on dev loop2, logical block 458752, async page read [ 98.708057][ T4510] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.393589][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 100.863006][ T4539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.993297][ T4545] loop2: detected capacity change from 0 to 1024 [ 101.038372][ T4545] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 101.046664][ T4545] syz.2.53: attempt to access beyond end of device [ 101.046664][ T4545] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 101.060441][ T4545] Buffer I/O error on dev loop2, logical block 458752, async page read [ 101.069187][ T4545] syz.2.53: attempt to access beyond end of device [ 101.069187][ T4545] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 101.090280][ T4545] Buffer I/O error on dev loop2, logical block 458752, async page read [ 101.444193][ T4276] Bluetooth: hci4: command 0x0405 tx timeout [ 102.111901][ T4557] loop3: detected capacity change from 0 to 128 [ 103.702172][ T4572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.63'. [ 103.861879][ T4576] loop4: detected capacity change from 0 to 256 [ 104.198677][ T4581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.284527][ T4570] loop3: detected capacity change from 0 to 32768 [ 104.441118][ T4570] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 107.819021][ T4625] loop1: detected capacity change from 0 to 256 [ 107.822688][ T4624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.460485][ T26] audit: type=1326 audit(1756272042.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.1.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x0 [ 109.524234][ T4322] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.724117][ T4322] usb 5-1: Using ep0 maxpacket: 32 [ 109.735085][ T4322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.798258][ T4322] usb 5-1: config 0 has no interfaces? [ 109.803912][ T4322] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 109.850106][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.912242][ T4322] usb 5-1: config 0 descriptor?? [ 111.059166][ T4267] ocfs2: Unmounting device (7,3) on (node local) [ 111.162879][ T4658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.953203][ T4672] loop3: detected capacity change from 0 to 64 [ 111.969192][ T4672] hfs: invalid catalog max_key_len 1792 [ 111.975242][ T4672] hfs: unable to open catalog tree [ 111.980520][ T4672] hfs: can't find a HFS filesystem on dev loop3 [ 113.181758][ T4382] usb 5-1: USB disconnect, device number 2 [ 114.592340][ T4382] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.112793][ T4708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.224310][ T4382] usb 5-1: Using ep0 maxpacket: 8 [ 115.243517][ T4382] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 115.470218][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.616482][ T4382] usb 5-1: config 0 descriptor?? [ 115.893848][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.947942][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.385274][ T4382] (null): keene_cmd_main failed (-110) [ 116.443654][ T4382] video4linux radio48: keene_cmd_main failed (-32) [ 116.471360][ T4382] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 116.602073][ T4382] usb 5-1: USB disconnect, device number 3 [ 116.762344][ T4743] raw_sendmsg: syz.1.115 forgot to set AF_INET. Fix it! [ 116.800720][ T4737] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 116.937715][ T4748] process 'syz.2.114' launched '/dev/fd/-1' with NULL argv: empty string added [ 117.803737][ T4754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.304436][ T4762] Bluetooth: MGMT ver 1.22 [ 119.593205][ T4766] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 119.816249][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 121.187893][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.665445][ T4800] loop3: detected capacity change from 0 to 64 [ 121.694707][ T4800] hfs: invalid catalog max_key_len 1792 [ 121.701597][ T4800] hfs: unable to open catalog tree [ 121.708135][ T4800] hfs: can't find a HFS filesystem on dev loop3 [ 122.480699][ T125] usb 5-1: config 0 has no interfaces? [ 122.519521][ T125] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.581488][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.757156][ T125] usb 5-1: Product: syz [ 122.761401][ T125] usb 5-1: Manufacturer: syz [ 122.817718][ T125] usb 5-1: SerialNumber: syz [ 122.854810][ T125] usb 5-1: config 0 descriptor?? [ 124.425287][ T4818] tipc: Started in network mode [ 124.464363][ T4818] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 124.501591][ T4818] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 124.560698][ T4818] tipc: Enabled bearer , priority 10 [ 125.454222][ T4322] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 126.053613][ T4314] tipc: Node number set to 1 [ 126.222223][ T125] usb 5-1: USB disconnect, device number 4 [ 126.246025][ T4322] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 126.263852][ T4833] vivid-000: ================= START STATUS ================= [ 126.281794][ T4322] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.297743][ T4833] vivid-000: Test Pattern: 75% Colorbar [ 126.330451][ T4833] vivid-000: Fill Percentage of Frame: 100 [ 126.380592][ T4322] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 126.396507][ T4833] vivid-000: Horizontal Movement: No Movement [ 126.406462][ T4833] vivid-000: Vertical Movement: No Movement [ 126.417743][ T4833] vivid-000: OSD Text Mode: All [ 126.433650][ T4833] vivid-000: Show Border: false [ 126.480439][ T4833] vivid-000: Show Square: false [ 126.486596][ T4833] vivid-000: Sensor Flipped Horizontally: false [ 126.498781][ T4833] vivid-000: Sensor Flipped Vertically: false [ 126.531770][ T4833] vivid-000: Insert SAV Code in Image: false [ 126.570585][ T4833] vivid-000: Insert EAV Code in Image: false [ 126.582880][ T4833] vivid-000: Insert Video Guard Band: false [ 126.617017][ T4833] vivid-000: Reduced Framerate: false [ 127.104365][ T4833] vivid-000: Enable Capture Cropping: true [ 127.215361][ T4322] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.225268][ T4322] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.236731][ T4322] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 127.249299][ T4322] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.300029][ T4833] vivid-000: Enable Capture Composing: true [ 127.310807][ T4833] vivid-000: Enable Capture Scaler: true [ 127.318331][ T4833] vivid-000: Timestamp Source: End of Frame [ 127.327909][ T4833] vivid-000: Colorspace: sRGB [ 127.331968][ T4322] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.348559][ T4833] vivid-000: Transfer Function: Default [ 127.354888][ T4833] vivid-000: Y'CbCr Encoding: Default [ 127.362459][ T4322] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 127.378954][ T4833] vivid-000: HSV Encoding: [ 127.413811][ T4322] usb 2-1: string descriptor 0 read error: -22 [ 127.458487][ T4833] Hue 0-179 [ 127.485043][ T4322] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.507030][ T4833] vivid-000: Quantization: Default [ 127.525265][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.613926][ T4322] adutux 2-1:168.0: interrupt endpoints not found [ 127.795781][ T4833] vivid-000: Apply Alpha To Red Only: false [ 127.816628][ T4833] vivid-000: Standard Aspect Ratio: 4x3 [ 127.822433][ T4833] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 128.584466][ T4833] vivid-000: DV Timings: 640x480p59 inactive [ 128.590638][ T4833] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 128.601157][ T4833] vivid-000: Maximum EDID Blocks: 2 [ 128.608768][ T4833] vivid-000: Limited RGB Range (16-235): false [ 128.615359][ T4833] vivid-000: Rx RGB Quantization Range: Automatic [ 128.622097][ T4833] vivid-000: Power Present: 0x00000001 [ 128.645013][ T4827] fuse: Unknown parameter 'ß|QC5õÐËâ°§®&ôoÉ”›ªÁü&GO½m¹û ²R“CL‚žcèãzDÕ‘îbtd°é9s¬*b’”þÃÂ1"§k+ðZ˜9$Ûs¸îœ€¿\²¦d$ [ 128.645013][ T4827] vB' [ 128.709362][ T4833] tpg source WxH: 640x360 (Y'CbCr) [ 128.731102][ T4833] tpg field: 1 [ 128.746829][ T4833] tpg crop: 640x360@0x0 [ 128.758891][ T4871] loop0: detected capacity change from 0 to 8 [ 128.768124][ T4833] tpg compose: 640x360@0x0 [ 128.772608][ T4833] tpg colorspace: 8 [ 128.884292][ T4833] tpg transfer function: 0/0 [ 128.888954][ T4833] tpg Y'CbCr encoding: 0/0 [ 129.036242][ T4833] tpg quantization: 0/0 [ 129.040461][ T4833] tpg RGB range: 0/2 [ 129.053632][ T4833] vivid-000: ================== END STATUS ================== [ 130.772346][ T4322] usb 2-1: USB disconnect, device number 2 [ 132.888085][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895323][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.004177][ T4382] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 133.297505][ T4382] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 133.424509][ T4382] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 133.434228][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.549930][ T4382] usb 5-1: config 0 descriptor?? [ 133.573952][ T4946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.694760][ T4382] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 133.712202][ T4382] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 134.095895][ T4939] loop1: detected capacity change from 0 to 32768 [ 135.121159][ T4952] sched: RT throttling activated [ 141.930273][ T128] usb 5-1: USB disconnect, device number 5 [ 141.940706][ T4939] (syz.1.156,4939,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 141.981037][ T4939] (syz.1.156,4939,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 142.418524][ T4963] loop0: detected capacity change from 0 to 8 [ 145.135051][ T4979] loop1: detected capacity change from 0 to 2048 [ 145.215277][ T4979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.349267][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.364882][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.372901][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.381195][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.398103][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.405673][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.497220][ T26] audit: type=1804 audit(1756272078.998:10): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.169" name="/newroot/41/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1367 res=1 errno=0 [ 145.635154][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.648088][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.656578][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.697822][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.717295][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.724726][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.960438][ T4928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.544734][ T4928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.632026][ T4928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.762831][ T4928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.179294][ T4980] chnl_net:caif_netlink_parms(): no params data found [ 147.319735][ T4988] loop1: detected capacity change from 0 to 32768 [ 147.444331][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 147.535043][ T4988] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 147.764163][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 147.775246][ T4983] chnl_net:caif_netlink_parms(): no params data found [ 148.496580][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 148.566896][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.594132][ T4980] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.629250][ T4980] device bridge_slave_0 entered promiscuous mode [ 148.817532][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.837096][ T4980] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.894640][ T4980] device bridge_slave_1 entered promiscuous mode [ 149.008497][ T4286] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.465151][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 150.468228][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 150.574184][ T4286] usb 2-1: Using ep0 maxpacket: 8 [ 150.580777][ T4286] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 150.634294][ T4286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.682470][ T4286] usb 2-1: config 0 descriptor?? [ 150.708266][ T5022] loop0: detected capacity change from 0 to 8 [ 150.787415][ T4980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.946274][ T4980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.069878][ T4286] (null): keene_cmd_main failed (-71) [ 151.080704][ T4286] video4linux radio48: keene_cmd_main failed (-71) [ 151.749560][ T4286] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 151.758179][ T4286] usb 2-1: USB disconnect, device number 3 [ 151.873197][ T4980] team0: Port device team_slave_0 added [ 152.040815][ T4983] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.070902][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.179009][ T4983] device bridge_slave_0 entered promiscuous mode [ 152.259216][ T4980] team0: Port device team_slave_1 added [ 152.270198][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.283158][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.310314][ T4983] device bridge_slave_1 entered promiscuous mode [ 152.433783][ T4983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.481662][ T4983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.491285][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 152.494304][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 152.526842][ T4980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.534522][ T4980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.561635][ T4980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.640433][ T4980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.813052][ T4980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.488831][ T4980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.783299][ T5056] loop0: detected capacity change from 0 to 2048 [ 153.841988][ T5056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.960469][ T26] audit: type=1804 audit(1756272087.458:11): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.183" name="/newroot/46/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1367 res=1 errno=0 [ 155.115045][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 155.129147][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 155.324396][ T4983] team0: Port device team_slave_0 added [ 155.441187][ T4983] team0: Port device team_slave_1 added [ 155.658170][ T5068] loop1: detected capacity change from 0 to 8 [ 156.184187][ T128] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.654107][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 156.666029][ T4980] device hsr_slave_0 entered promiscuous mode [ 156.684149][ T128] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 156.699745][ T4980] device hsr_slave_1 entered promiscuous mode [ 156.724189][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.851745][ T128] usb 1-1: config 0 descriptor?? [ 156.879551][ T4980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.900476][ T4980] Cannot create hsr debugfs directory [ 156.915559][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.922566][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.005239][ T4983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.139853][ T4928] device hsr_slave_0 left promiscuous mode [ 157.159230][ T4928] device hsr_slave_1 left promiscuous mode [ 157.366317][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.395284][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.465995][ T128] (null): keene_cmd_main failed (-110) [ 158.136950][ T128] video4linux radio48: keene_cmd_main failed (-32) [ 158.173424][ T128] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 158.228829][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.242164][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.266444][ T4928] device bridge_slave_1 left promiscuous mode [ 158.282076][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.313842][ T4928] device bridge_slave_0 left promiscuous mode [ 158.330253][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.427399][ T4928] device veth1_macvtap left promiscuous mode [ 158.437272][ T4928] device veth0_macvtap left promiscuous mode [ 158.446836][ T4928] device veth1_vlan left promiscuous mode [ 158.465904][ T4928] device veth0_vlan left promiscuous mode [ 159.550881][ T5105] hub 6-0:1.0: USB hub found [ 159.564368][ T5105] hub 6-0:1.0: 1 port detected [ 160.609916][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 160.652842][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 160.690562][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.730590][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.151974][ T4928] bond0 (unregistering): Released all slaves [ 161.241563][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.248820][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.282655][ T4983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.293431][ T125] usb 1-1: USB disconnect, device number 2 [ 161.684913][ T26] audit: type=1326 audit(1756272095.188:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 161.709269][ T4983] device hsr_slave_0 entered promiscuous mode [ 161.729559][ T4983] device hsr_slave_1 entered promiscuous mode [ 161.747931][ T26] audit: type=1326 audit(1756272095.188:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 161.770518][ T4983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.863520][ T4983] Cannot create hsr debugfs directory [ 161.909922][ T26] audit: type=1326 audit(1756272095.228:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.034940][ T26] audit: type=1326 audit(1756272095.248:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.080515][ T26] audit: type=1326 audit(1756272095.248:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.114298][ T26] audit: type=1326 audit(1756272095.248:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.164472][ T26] audit: type=1326 audit(1756272095.248:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.187281][ T26] audit: type=1326 audit(1756272095.248:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.214679][ T26] audit: type=1326 audit(1756272095.248:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 162.237660][ T26] audit: type=1326 audit(1756272095.248:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 163.009357][ T4980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.163207][ T4928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.229119][ T4983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.331628][ T4980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.409356][ T4928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.532616][ T4983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.572249][ T4980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.680895][ T4928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.503252][ T4983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.541121][ T4980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.596353][ T4928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.688190][ T4983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.138118][ T4980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.181207][ T4980] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.215789][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.277942][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.377586][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.467089][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.497637][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.504852][ T4925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.536330][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.565125][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.786235][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.793835][ T4925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.572998][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.582590][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.697850][ T5162] netlink: 'syz.1.201': attribute type 13 has an invalid length. [ 166.711454][ T5162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 166.771098][ T4983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.884902][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.929125][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.992941][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.007586][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.023196][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.034807][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.051588][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.404496][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.412726][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.488605][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.497221][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.505751][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.516373][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.577799][ T4983] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.653801][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.694807][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.721373][ T5190] input: syz1 as /devices/virtual/input/input5 [ 168.729728][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.736939][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.756969][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.765963][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.804033][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.811240][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.903695][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.917078][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.944971][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.955818][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.974928][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.997211][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.019153][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.043597][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.087792][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.200779][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.243944][ T4983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.295251][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.383855][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.405864][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.156916][ T5214] Zero length message leads to an empty skb [ 170.176238][ T5214] loop0: detected capacity change from 0 to 64 [ 170.205974][ T5214] hfs: invalid catalog max_key_len 1792 [ 170.212624][ T5214] hfs: unable to open catalog tree [ 170.218918][ T5214] hfs: can't find a HFS filesystem on dev loop0 [ 171.012387][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.049474][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.139850][ T5220] loop1: detected capacity change from 0 to 256 [ 171.167500][ T4980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.996672][ T4928] device hsr_slave_0 left promiscuous mode [ 173.050950][ T4928] device hsr_slave_1 left promiscuous mode [ 173.224544][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.414286][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.459574][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.477038][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.536066][ T4928] device bridge_slave_1 left promiscuous mode [ 173.542292][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.599982][ T4928] device bridge_slave_0 left promiscuous mode [ 173.626243][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.706338][ T4928] device veth1_macvtap left promiscuous mode [ 173.713565][ T4928] device veth0_macvtap left promiscuous mode [ 173.721956][ T4928] device veth1_vlan left promiscuous mode [ 173.744317][ T4928] device veth0_vlan left promiscuous mode [ 173.840576][ T5249] tipc: Failed to remove unknown binding: 66,1,1/1:20680322/20680324 [ 174.173881][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 174.368790][ T4286] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.555860][ T4286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.570342][ T4286] usb 5-1: config 0 has no interfaces? [ 174.576541][ T4286] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 174.590276][ T4286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.605363][ T4286] usb 5-1: config 0 descriptor?? [ 174.745788][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 174.798797][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 174.851480][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.948653][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.503239][ T4928] bond0 (unregistering): Released all slaves [ 175.626996][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 175.722255][ T5259] bridge1: port 1(veth3) entered blocking state [ 175.734290][ T5259] bridge1: port 1(veth3) entered disabled state [ 175.746289][ T5259] device veth3 entered promiscuous mode [ 175.783429][ T5260] bridge1: port 2(veth0_to_bond) entered blocking state [ 175.807980][ T5260] bridge1: port 2(veth0_to_bond) entered disabled state [ 175.820969][ T5260] device veth0_to_bond entered promiscuous mode [ 175.833348][ T5261] bridge1: port 3(vlan2) entered blocking state [ 175.839894][ T5261] bridge1: port 3(vlan2) entered disabled state [ 175.847775][ T5261] device vlan2 entered promiscuous mode [ 175.853455][ T5261] device veth0_to_hsr entered promiscuous mode [ 175.878723][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.883740][ T4336] usb 5-1: USB disconnect, device number 6 [ 175.892080][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.908586][ T4983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.460406][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.489351][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.430605][ T4980] device veth0_vlan entered promiscuous mode [ 177.525593][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.594307][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.768446][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.896921][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.015859][ T4980] device veth1_vlan entered promiscuous mode [ 178.369062][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.419858][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.472140][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.498106][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.532401][ T4980] device veth0_macvtap entered promiscuous mode [ 178.568520][ T4980] device veth1_macvtap entered promiscuous mode [ 178.664414][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.706227][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.744290][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.763242][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.793746][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.826083][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.847741][ T4980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.867064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.885064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.907082][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.924467][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.954064][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.960853][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.974191][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.987669][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.009415][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.033379][ T4980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.053374][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.073301][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.117972][ T4980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.142652][ T4980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.154150][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 179.161255][ T4321] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 179.171223][ T4980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.179417][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.191845][ T4980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.202648][ T4321] usb 1-1: config 0 descriptor?? [ 179.213481][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.252656][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.288753][ T4983] device veth0_vlan entered promiscuous mode [ 179.335265][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.363612][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.413423][ T4983] device veth1_vlan entered promiscuous mode [ 179.440924][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.457911][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.493495][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.542867][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.615260][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.438101][ T4321] (null): keene_cmd_main failed (-110) [ 180.478995][ T4321] video4linux radio48: keene_cmd_main failed (-32) [ 180.488345][ T4321] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 180.519176][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.647219][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.677803][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.712382][ T4983] device veth0_macvtap entered promiscuous mode [ 180.776482][ T4983] device veth1_macvtap entered promiscuous mode [ 180.844876][ T4930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.885347][ T4930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.941606][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.966778][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.006273][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.035514][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.054062][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.083040][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.184219][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.204482][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.228630][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.271516][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.292223][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.312782][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.332970][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.366526][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.396309][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.417701][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.428791][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.440048][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.451079][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.471490][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.512026][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.526526][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.548017][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.562326][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.573400][ T4286] usb 1-1: USB disconnect, device number 3 [ 181.589872][ T4928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.611175][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.619963][ T4928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.651652][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.675507][ T4983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.715555][ T4983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.735025][ T4983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.755816][ T4983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.975843][ T4928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.003623][ T4928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.143403][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.177770][ T4911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.223304][ T4911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.235326][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.278268][ T5352] netlink: 14 bytes leftover after parsing attributes in process `syz.5.160'. [ 183.334223][ T4322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.534171][ T4322] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 183.563637][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 183.633726][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 183.675185][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.717326][ T4322] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.752712][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.809246][ T4322] usb 2-1: config 0 descriptor?? [ 183.834807][ T5357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.114245][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.284104][ T4321] usb 6-1: device descriptor read/64, error -71 [ 184.328124][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.380397][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.391030][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.400655][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.412218][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.423779][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.627059][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.648569][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.657237][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.665201][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.674331][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.683667][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.693276][ T4322] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.704525][ T4322] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 185.728364][ T4322] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.761439][ T4322] usb 2-1: USB disconnect, device number 4 [ 185.767768][ T4321] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.966095][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 186.011912][ T5352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.052399][ T5387] fido_id[5387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.089303][ T5352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.141776][ T5352] bond0 (unregistering): Released all slaves [ 186.164105][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 186.172878][ T14] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.218611][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 186.233851][ T14] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.243524][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.273091][ T14] usb 7-1: config 0 descriptor?? [ 186.705007][ T14] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 186.813303][ T5400] loop4: detected capacity change from 0 to 64 [ 186.851967][ T5400] hfs: invalid catalog max_key_len 1792 [ 186.859485][ T5400] hfs: unable to open catalog tree [ 186.866726][ T5400] hfs: can't find a HFS filesystem on dev loop4 [ 187.150313][ T5399] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 187.286585][ T14] usb 7-1: USB disconnect, device number 2 [ 187.904255][ T5164] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 187.990853][ T5414] loop4: detected capacity change from 0 to 1024 [ 188.748575][ T5405] fido_id[5405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 189.032172][ T5164] usb 6-1: Using ep0 maxpacket: 8 [ 189.039354][ T5164] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 189.058009][ T5164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.144354][ T5164] usb 6-1: config 0 descriptor?? [ 190.513945][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.522898][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.774515][ T5164] (null): keene_cmd_main failed (-110) [ 191.137415][ T5164] video4linux radio48: keene_cmd_main failed (-32) [ 191.168548][ T5164] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 192.514283][ T5164] usb 6-1: USB disconnect, device number 4 [ 192.874730][ T4321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 193.079838][ T4321] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 193.173701][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.216413][ T4321] usb 2-1: Product: syz [ 193.220662][ T4321] usb 2-1: Manufacturer: syz [ 193.309650][ T4321] usb 2-1: SerialNumber: syz [ 193.377931][ T4321] usb 2-1: config 0 descriptor?? [ 193.408818][ T4321] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 193.588654][ T4321] usb 2-1: USB disconnect, device number 5 [ 193.987561][ T5478] loop4: detected capacity change from 0 to 1024 [ 194.330050][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336496][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.956322][ T5465] loop5: detected capacity change from 0 to 32768 [ 195.070627][ T5465] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 197.087474][ T4980] ocfs2: Unmounting device (7,5) on (node local) [ 197.167041][ T5500] hub 6-0:1.0: USB hub found [ 197.172012][ T5500] hub 6-0:1.0: 1 port detected [ 198.864058][ T5526] loop0: detected capacity change from 0 to 1024 [ 200.264166][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 200.464033][ T7] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.550034][ T7] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 200.593865][ T5544] random: crng reseeded on system resumption [ 200.640362][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 200.693834][ T7] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 200.823271][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.880279][ T7] usb 6-1: config 0 descriptor?? [ 206.158168][ T7] usb 6-1: can't set config #0, error -71 [ 206.189654][ T7] usb 6-1: USB disconnect, device number 5 [ 207.774231][ T4336] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.025339][ T5636] trusted_key: encrypted_key: insufficient parameters specified [ 208.168633][ T4336] usb 5-1: Using ep0 maxpacket: 8 [ 208.218527][ T4336] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 208.294313][ T4336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.313568][ T4336] usb 5-1: config 0 descriptor?? [ 208.641758][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.688401][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.253919][ T5649] loop6: detected capacity change from 0 to 1024 [ 209.380945][ T4336] (null): keene_cmd_main failed (-110) [ 210.305735][ T4336] video4linux radio48: keene_cmd_main failed (-32) [ 210.312280][ T4336] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 210.987941][ T14] usb 5-1: USB disconnect, device number 7 [ 213.363758][ T5690] trusted_key: encrypted_key: insufficient parameters specified [ 214.056869][ T5694] loop4: detected capacity change from 0 to 1024 [ 214.069976][ T5694] ext4: Unknown parameter 'pcr' [ 214.266196][ T5701] loop0: detected capacity change from 0 to 1024 [ 216.466939][ T5710] loop1: detected capacity change from 0 to 128 [ 218.405316][ T5728] loop1: detected capacity change from 0 to 64 [ 218.508848][ T5728] hfs: invalid catalog max_key_len 1792 [ 218.515533][ T5728] hfs: unable to open catalog tree [ 218.521831][ T5728] hfs: can't find a HFS filesystem on dev loop1 [ 219.794914][ T4345] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 219.994102][ T4345] usb 6-1: Using ep0 maxpacket: 8 [ 220.001489][ T4345] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 220.034075][ T4345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.073749][ T4345] usb 6-1: config 0 descriptor?? [ 220.295691][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.318660][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.445686][ T5746] loop1: detected capacity change from 0 to 1024 [ 220.941427][ T4345] (null): keene_cmd_main failed (-110) [ 220.954132][ T4345] video4linux radio48: keene_cmd_main failed (-32) [ 220.960716][ T4345] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 221.130260][ T5753] loop6: detected capacity change from 0 to 1024 [ 221.250246][ T5753] ext4: Unknown parameter 'pcr' [ 221.543465][ T5758] trusted_key: encrypted_key: insufficient parameters specified [ 221.787638][ T5761] loop0: detected capacity change from 0 to 128 [ 222.971631][ T5777] loop6: detected capacity change from 0 to 64 [ 222.992168][ T5777] hfs: invalid catalog max_key_len 1792 [ 223.002339][ T5777] hfs: unable to open catalog tree [ 223.009285][ T5777] hfs: can't find a HFS filesystem on dev loop6 [ 224.210108][ T5407] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.339296][ T4321] usb 6-1: USB disconnect, device number 6 [ 224.595606][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 224.595622][ T26] audit: type=1326 audit(1756272158.098:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 224.731906][ T26] audit: type=1326 audit(1756272158.148:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 224.754872][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.814085][ T26] audit: type=1326 audit(1756272158.148:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 224.836295][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.917715][ T26] audit: type=1326 audit(1756272158.148:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 224.940064][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.013088][ T26] audit: type=1326 audit(1756272158.148:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 225.100413][ T26] audit: type=1326 audit(1756272158.148:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 225.130917][ T5796] loop4: detected capacity change from 0 to 1024 [ 225.162015][ T5802] loop0: detected capacity change from 0 to 128 [ 225.181385][ T5796] ext4: Unknown parameter 'pcr' [ 225.188269][ T26] audit: type=1326 audit(1756272158.148:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 225.307438][ T5805] loop6: detected capacity change from 0 to 1024 [ 225.971580][ T26] audit: type=1326 audit(1756272158.148:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 225.993991][ T26] audit: type=1326 audit(1756272158.148:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 226.016554][ T26] audit: type=1326 audit(1756272158.148:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeffb8ebe9 code=0x7ffc0000 [ 226.038814][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.402031][ T5824] loop1: detected capacity change from 0 to 64 [ 228.686752][ T5824] hfs: invalid catalog max_key_len 1792 [ 228.694184][ T5824] hfs: unable to open catalog tree [ 228.701159][ T5824] hfs: can't find a HFS filesystem on dev loop1 [ 229.032916][ T5827] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 229.197190][ T5833] netlink: 'syz.5.352': attribute type 13 has an invalid length. [ 229.338419][ T14] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 229.436021][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.510246][ T5833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.595664][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 229.666711][ T5851] loop4: detected capacity change from 0 to 1024 [ 230.376172][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.387117][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 230.408822][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 230.416445][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.427256][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 230.451916][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 230.459853][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.470926][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 230.495439][ T14] usb 1-1: string descriptor 0 read error: -22 [ 230.501746][ T14] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.521222][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.541007][ T14] adutux 1-1:168.0: interrupt endpoints not found [ 230.792774][ T5853] loop4: detected capacity change from 0 to 2048 [ 230.794670][ T4345] usb 1-1: USB disconnect, device number 4 [ 230.830883][ T5853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.329118][ T5861] loop1: detected capacity change from 0 to 1024 [ 231.379308][ T5861] ext4: Unknown parameter 'pcr' [ 231.697898][ T5865] loop4: detected capacity change from 0 to 128 [ 234.155133][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 234.155148][ T26] audit: type=1326 audit(1756272167.658:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.219929][ T26] audit: type=1326 audit(1756272167.698:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.296788][ T26] audit: type=1326 audit(1756272167.698:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.334332][ T128] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 234.354356][ T26] audit: type=1326 audit(1756272167.698:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.413368][ T26] audit: type=1326 audit(1756272167.698:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.497005][ T26] audit: type=1326 audit(1756272167.698:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.525999][ T26] audit: type=1326 audit(1756272167.698:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.555895][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 234.566696][ T128] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.603129][ T128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.798787][ T26] audit: type=1326 audit(1756272167.698:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.840059][ T128] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 234.861724][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.879373][ T128] usb 2-1: config 0 descriptor?? [ 234.891673][ T26] audit: type=1326 audit(1756272167.698:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.913787][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.922484][ T26] audit: type=1326 audit(1756272167.698:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75c78ebe9 code=0x7ffc0000 [ 234.944852][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.848344][ T128] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 235.929206][ T128] usb 2-1: USB disconnect, device number 6 [ 236.014310][ T4345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 236.224195][ T4345] usb 1-1: Using ep0 maxpacket: 8 [ 236.231166][ T4345] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 236.268159][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.331068][ T4345] usb 1-1: config 0 descriptor?? [ 236.400967][ T5926] fido_id[5926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.595241][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.714453][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.924425][ T4345] (null): keene_cmd_main failed (-110) [ 237.031775][ T4345] video4linux radio48: keene_cmd_main failed (-32) [ 237.045722][ T4345] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 237.841730][ T4345] usb 1-1: USB disconnect, device number 5 [ 238.954167][ T5976] loop1: detected capacity change from 0 to 64 [ 238.979145][ T5976] hfs: invalid catalog max_key_len 1792 [ 238.987201][ T5976] hfs: unable to open catalog tree [ 238.994890][ T5976] hfs: can't find a HFS filesystem on dev loop1 [ 239.094674][ T4345] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 239.423780][ T4345] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 240.101058][ T4345] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 240.110763][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.121380][ T4345] usb 5-1: config 0 descriptor?? [ 240.128717][ T5972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.143578][ T4345] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 240.151337][ T4345] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 243.714401][ T5527] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.904173][ T4321] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 243.914073][ T5527] usb 7-1: Using ep0 maxpacket: 8 [ 243.921911][ T5527] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 243.931543][ T4345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.948244][ T14] usb 5-1: USB disconnect, device number 8 [ 243.981090][ T5527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.015080][ T5527] usb 7-1: config 0 descriptor?? [ 244.094250][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 244.109108][ T4321] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 244.141987][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.154259][ T4345] usb 2-1: Using ep0 maxpacket: 8 [ 244.170208][ T4345] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 244.183007][ T4321] usb 1-1: config 0 descriptor?? [ 244.234375][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.281610][ T4345] usb 2-1: config 0 descriptor?? [ 244.305876][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.347638][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.402685][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.456393][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.562997][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.604562][ T5527] (null): keene_cmd_main failed (-110) [ 244.618282][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.626829][ T5527] video4linux radio48: keene_cmd_main failed (-32) [ 244.669584][ T5527] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 244.781764][ T4321] (null): keene_cmd_main failed (-110) [ 244.793521][ T4321] videodev: could not get a free minor [ 244.905236][ T4345] (null): keene_cmd_main failed (-110) [ 244.911728][ T4345] videodev: could not get a free minor [ 244.922311][ T4321] radio-keene 1-1:0.0: could not register video device [ 244.927547][ T4345] radio-keene 2-1:0.0: could not register video device [ 244.991073][ T4345] radio-keene: probe of 2-1:0.0 failed with error -23 [ 245.008298][ T4321] radio-keene: probe of 1-1:0.0 failed with error -23 [ 245.120723][ T4345] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 245.411298][ T4321] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 245.755285][ T4345] usb 1-1: USB disconnect, device number 6 [ 245.947377][ T4321] usb 7-1: USB disconnect, device number 3 [ 246.966307][ T4314] usb 2-1: USB disconnect, device number 7 [ 247.243274][ T26] kauditd_printk_skb: 111 callbacks suppressed [ 247.243289][ T26] audit: type=1326 audit(1756272180.738:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 247.311928][ T26] audit: type=1326 audit(1756272180.778:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 247.355246][ T26] audit: type=1326 audit(1756272180.778:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 247.404072][ T26] audit: type=1326 audit(1756272180.778:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 247.521530][ T6055] loop5: detected capacity change from 0 to 64 [ 247.576403][ T6055] hfs: invalid catalog max_key_len 1792 [ 247.583346][ T6055] hfs: unable to open catalog tree [ 247.590069][ T6055] hfs: can't find a HFS filesystem on dev loop5 [ 247.874465][ T26] audit: type=1326 audit(1756272180.778:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 248.233138][ T26] audit: type=1326 audit(1756272180.778:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 248.256343][ T26] audit: type=1326 audit(1756272180.778:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 248.278978][ T26] audit: type=1326 audit(1756272180.778:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 248.302279][ T26] audit: type=1326 audit(1756272180.778:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 248.325920][ T26] audit: type=1326 audit(1756272180.778:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a398ebe9 code=0x7ffc0000 [ 249.551259][ T4314] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 250.347159][ T4314] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 250.506561][ T6086] loop5: detected capacity change from 0 to 256 [ 250.529821][ T4314] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 250.935674][ T4314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.953538][ T4314] usb 7-1: config 0 descriptor?? [ 250.965062][ T6067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 250.976449][ T4314] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 250.983908][ T4314] pegasus_notetaker: probe of 7-1:0.0 failed with error -22 [ 253.714382][ T4314] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.726999][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 253.884230][ T4314] usb 2-1: device descriptor read/64, error -32 [ 254.043518][ T5527] usb 7-1: USB disconnect, device number 4 [ 254.154258][ T4314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.283011][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 254.283026][ T26] audit: type=1326 audit(1756272187.778:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.374258][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 254.382753][ T4314] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 254.432723][ T26] audit: type=1326 audit(1756272187.828:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.433312][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.559995][ T26] audit: type=1326 audit(1756272187.828:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.566863][ T4314] usb 2-1: config 0 descriptor?? [ 254.611801][ T26] audit: type=1326 audit(1756272187.828:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.634358][ T5527] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.669858][ T26] audit: type=1326 audit(1756272187.828:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.759010][ T26] audit: type=1326 audit(1756272187.828:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.823467][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.828086][ T26] audit: type=1326 audit(1756272187.828:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 254.855807][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.858490][ T5527] usb 5-1: Using ep0 maxpacket: 8 [ 255.003197][ T5527] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 255.102218][ T5527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.112941][ T5527] usb 5-1: config 0 descriptor?? [ 255.133529][ T26] audit: type=1326 audit(1756272187.828:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 255.174787][ T4314] (null): keene_cmd_main failed (-110) [ 255.195982][ T4314] video4linux radio48: keene_cmd_main failed (-32) [ 255.234079][ T4314] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 255.258655][ T26] audit: type=1326 audit(1756272187.828:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 255.333236][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.360940][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.674707][ T5527] (null): keene_cmd_main failed (-110) [ 255.680491][ T5527] videodev: could not get a free minor [ 255.694100][ T5527] radio-keene 5-1:0.0: could not register video device [ 255.701375][ T5527] radio-keene: probe of 5-1:0.0 failed with error -23 [ 255.718052][ T5527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 255.868941][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881307][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.814287][ T26] audit: type=1326 audit(1756272187.828:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 257.043054][ T128] usb 2-1: USB disconnect, device number 9 [ 257.411771][ T128] usb 5-1: USB disconnect, device number 9 [ 257.470566][ T4363] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 257.666589][ T4363] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 257.705319][ T4363] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 257.744100][ T4363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.790445][ T4363] usb 7-1: config 0 descriptor?? [ 257.831070][ T6146] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 257.855822][ T4363] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 257.879624][ T4363] pegasus_notetaker: probe of 7-1:0.0 failed with error -22 [ 262.351476][ T4314] usb 7-1: USB disconnect, device number 5 [ 262.844643][ T4314] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 263.144392][ T4314] usb 7-1: Using ep0 maxpacket: 8 [ 263.165604][ T4314] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 263.248139][ T4314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.383372][ T4314] usb 7-1: config 0 descriptor?? [ 263.747812][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.757977][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.765459][ T26] kauditd_printk_skb: 107 callbacks suppressed [ 263.765476][ T26] audit: type=1326 audit(1756272197.258:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 263.908856][ T26] audit: type=1326 audit(1756272197.278:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 263.931385][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.164018][ T26] audit: type=1326 audit(1756272197.298:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 264.420637][ T4314] (null): keene_cmd_main failed (-110) [ 264.445099][ T4314] video4linux radio48: keene_cmd_main failed (-32) [ 264.464206][ T4314] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 265.297606][ T26] audit: type=1326 audit(1756272197.298:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 265.460373][ T26] audit: type=1326 audit(1756272197.298:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 265.482657][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.635059][ T6231] loop4: detected capacity change from 0 to 64 [ 265.658605][ T6231] hfs: invalid catalog max_key_len 1792 [ 265.666756][ T6231] hfs: unable to open catalog tree [ 265.673088][ T6231] hfs: can't find a HFS filesystem on dev loop4 [ 266.404224][ T26] audit: type=1326 audit(1756272197.298:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 266.465666][ T26] audit: type=1326 audit(1756272197.298:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 266.529840][ T26] audit: type=1326 audit(1756272197.298:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 266.634137][ T26] audit: type=1326 audit(1756272197.298:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 266.769499][ T4345] usb 7-1: USB disconnect, device number 6 [ 266.777224][ T26] audit: type=1326 audit(1756272197.298:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 269.557035][ T6274] loop6: detected capacity change from 0 to 64 [ 269.643903][ T6274] hfs: invalid catalog max_key_len 1792 [ 269.651940][ T6274] hfs: unable to open catalog tree [ 269.658715][ T6274] hfs: can't find a HFS filesystem on dev loop6 [ 271.366275][ T6093] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 271.734248][ T6093] usb 5-1: Using ep0 maxpacket: 8 [ 271.743245][ T6093] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 271.780000][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.520739][ T6093] usb 5-1: config 0 descriptor?? [ 272.840774][ T6093] usb 5-1: can't set config #0, error -71 [ 272.875106][ T6093] usb 5-1: USB disconnect, device number 10 [ 274.207065][ T6315] loop5: detected capacity change from 0 to 256 [ 274.287123][ T6313] loop4: detected capacity change from 0 to 1024 [ 274.314117][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 274.314133][ T26] audit: type=1326 audit(1756272207.798:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.438829][ T6313] ext4: Unknown parameter 'pcr' [ 274.466873][ T26] audit: type=1326 audit(1756272207.798:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.774076][ T26] audit: type=1326 audit(1756272207.798:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.844196][ T26] audit: type=1326 audit(1756272207.798:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.877269][ T26] audit: type=1326 audit(1756272207.798:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.916255][ T26] audit: type=1326 audit(1756272207.798:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 274.967165][ T6313] loop4: detected capacity change from 0 to 8 [ 275.019516][ T26] audit: type=1326 audit(1756272207.798:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 275.047467][ T6313] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 275.110436][ T6313] cramfs: wrong magic [ 275.543273][ T26] audit: type=1326 audit(1756272207.798:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 275.618130][ T6333] loop5: detected capacity change from 0 to 128 [ 275.638998][ T26] audit: type=1326 audit(1756272207.798:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 276.094883][ T26] audit: type=1326 audit(1756272207.798:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.6.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f8f8ebe9 code=0x7ffc0000 [ 279.968437][ T6387] loop0: detected capacity change from 0 to 1024 [ 280.001458][ T6387] ext4: Unknown parameter 'pcr' [ 280.060663][ T5406] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.117692][ T6390] loop4: detected capacity change from 0 to 128 [ 280.135021][ T4314] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 280.219326][ T6387] loop0: detected capacity change from 0 to 8 [ 280.230860][ T5406] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.253234][ T6387] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 280.289735][ T6387] cramfs: wrong magic [ 280.334072][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 280.944592][ T4314] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 280.954078][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.964516][ T4314] usb 2-1: config 0 descriptor?? [ 281.227241][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.346308][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.524502][ T4314] (null): keene_cmd_main failed (-110) [ 282.134077][ T4314] video4linux radio48: keene_cmd_main failed (-32) [ 282.181686][ T4314] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 283.675521][ T14] usb 2-1: USB disconnect, device number 10 [ 284.143725][ T26] kauditd_printk_skb: 104 callbacks suppressed [ 284.143737][ T26] audit: type=1326 audit(1756272217.638:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.287906][ T26] audit: type=1326 audit(1756272217.638:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.310239][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.494317][ T26] audit: type=1326 audit(1756272217.688:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.633884][ T26] audit: type=1326 audit(1756272217.698:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.749210][ T26] audit: type=1326 audit(1756272217.698:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.841262][ T26] audit: type=1326 audit(1756272217.698:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 284.923595][ T26] audit: type=1326 audit(1756272217.698:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 285.034248][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 285.068105][ T26] audit: type=1326 audit(1756272217.698:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 285.090341][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.169903][ T26] audit: type=1326 audit(1756272217.728:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 285.192095][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.244059][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 285.266817][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 285.294368][ T26] audit: type=1326 audit(1756272217.728:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551718ebe9 code=0x7ffc0000 [ 285.381158][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.472145][ T14] usb 5-1: config 0 descriptor?? [ 285.705722][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.764083][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.850496][ T6471] loop6: detected capacity change from 0 to 1024 [ 285.914350][ T6471] ext4: Unknown parameter 'pcr' [ 286.025170][ T6471] [ 286.027574][ T6471] ====================================================== [ 286.034874][ T6471] WARNING: possible circular locking dependency detected [ 286.042022][ T6471] 6.1.148-syzkaller #0 Not tainted [ 286.047166][ T6471] ------------------------------------------------------ [ 286.054204][ T6471] syz.6.506/6471 is trying to acquire lock: [ 286.060104][ T6471] ffff88807d0e2e58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 286.069836][ T6471] [ 286.069836][ T6471] but task is already holding lock: [ 286.077578][ T6471] ffff888057600290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 286.088517][ T6471] [ 286.088517][ T6471] which lock already depends on the new lock. [ 286.088517][ T6471] [ 286.098929][ T6471] [ 286.098929][ T6471] the existing dependency chain (in reverse order) is: [ 286.107962][ T6471] [ 286.107962][ T6471] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 286.116762][ T6471] down_write+0x36/0x60 [ 286.121454][ T6471] process_measurement+0x33c/0x1a10 [ 286.127192][ T6471] ima_file_mmap+0x104/0x150 [ 286.132319][ T6471] __se_sys_remap_file_pages+0x53e/0x770 [ 286.138486][ T6471] do_syscall_64+0x4c/0xa0 [ 286.143431][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.149882][ T6471] [ 286.149882][ T6471] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 286.157459][ T6471] __lock_acquire+0x2cf8/0x7c50 [ 286.162880][ T6471] lock_acquire+0x1b4/0x490 [ 286.167921][ T6471] down_read_killable+0x4c/0x340 [ 286.173425][ T6471] mmap_read_lock_killable+0x1d/0x60 [ 286.179253][ T6471] lock_mm_and_find_vma+0x2b1/0x2f0 [ 286.185218][ T6471] do_user_addr_fault+0x2db/0xb10 [ 286.190810][ T6471] exc_page_fault+0x60/0x100 [ 286.195953][ T6471] asm_exc_page_fault+0x22/0x30 [ 286.201433][ T6471] fault_in_readable+0x13e/0x1f0 [ 286.206908][ T6471] fault_in_iov_iter_readable+0xbb/0x2e0 [ 286.213256][ T6471] generic_perform_write+0x1d2/0x560 [ 286.219085][ T6471] __generic_file_write_iter+0x172/0x430 [ 286.225283][ T6471] generic_file_write_iter+0xab/0x2e0 [ 286.231292][ T6471] vfs_write+0x44c/0x960 [ 286.236071][ T6471] ksys_write+0x143/0x240 [ 286.241022][ T6471] do_syscall_64+0x4c/0xa0 [ 286.245972][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.252424][ T6471] [ 286.252424][ T6471] other info that might help us debug this: [ 286.252424][ T6471] [ 286.262681][ T6471] Possible unsafe locking scenario: [ 286.262681][ T6471] [ 286.270139][ T6471] CPU0 CPU1 [ 286.275600][ T6471] ---- ---- [ 286.280974][ T6471] lock(&sb->s_type->i_mutex_key#12); [ 286.286452][ T6471] lock(&mm->mmap_lock); [ 286.293312][ T6471] lock(&sb->s_type->i_mutex_key#12); [ 286.301310][ T6471] lock(&mm->mmap_lock); [ 286.305650][ T6471] [ 286.305650][ T6471] *** DEADLOCK *** [ 286.305650][ T6471] [ 286.313892][ T6471] 3 locks held by syz.6.506/6471: [ 286.318927][ T6471] #0: ffff88807dcb3768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 286.328183][ T6471] #1: ffff888028a74460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 286.337092][ T6471] #2: ffff888057600290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 286.348427][ T6471] [ 286.348427][ T6471] stack backtrace: [ 286.354351][ T6471] CPU: 1 PID: 6471 Comm: syz.6.506 Not tainted 6.1.148-syzkaller #0 [ 286.362428][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.372500][ T6471] Call Trace: [ 286.375815][ T6471] [ 286.378755][ T6471] dump_stack_lvl+0x168/0x22e [ 286.383455][ T6471] ? load_image+0x3b0/0x3b0 [ 286.388021][ T6471] ? show_regs_print_info+0x12/0x12 [ 286.393268][ T6471] ? print_circular_bug+0x12b/0x1a0 [ 286.398518][ T6471] check_noncircular+0x274/0x310 [ 286.403500][ T6471] ? add_chain_block+0x940/0x940 [ 286.408497][ T6471] ? lockdep_lock+0xdc/0x1e0 [ 286.413113][ T6471] ? _find_first_zero_bit+0xcf/0x100 [ 286.418434][ T6471] __lock_acquire+0x2cf8/0x7c50 [ 286.423322][ T6471] ? verify_lock_unused+0x140/0x140 [ 286.428548][ T6471] ? verify_lock_unused+0x140/0x140 [ 286.433765][ T6471] ? preempt_schedule+0xa7/0xb0 [ 286.438646][ T6471] ? verify_lock_unused+0x140/0x140 [ 286.443868][ T6471] ? preempt_schedule_common+0xa5/0xd0 [ 286.449435][ T6471] lock_acquire+0x1b4/0x490 [ 286.453972][ T6471] ? mmap_read_lock_killable+0x1d/0x60 [ 286.459453][ T6471] ? read_lock_is_recursive+0x10/0x10 [ 286.464838][ T6471] ? cmp_ex_search+0x1a/0x70 [ 286.469445][ T6471] ? bsearch+0x8a/0xb0 [ 286.473536][ T6471] ? fault_in_readable+0x13e/0x1f0 [ 286.478663][ T6471] ? search_extable+0x8c/0xd0 [ 286.483352][ T6471] ? trim_init_extable+0x3b0/0x3b0 [ 286.488575][ T6471] ? mmap_read_lock_killable+0x1d/0x60 [ 286.494056][ T6471] down_read_killable+0x4c/0x340 [ 286.499026][ T6471] ? mmap_read_lock_killable+0x1d/0x60 [ 286.504507][ T6471] mmap_read_lock_killable+0x1d/0x60 [ 286.509814][ T6471] lock_mm_and_find_vma+0x2b1/0x2f0 [ 286.515045][ T6471] do_user_addr_fault+0x2db/0xb10 [ 286.520170][ T6471] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.525417][ T6471] exc_page_fault+0x60/0x100 [ 286.530026][ T6471] asm_exc_page_fault+0x22/0x30 [ 286.534992][ T6471] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 286.540930][ T6471] Code: 58 eb c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 37 eb c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 1a eb [ 286.560577][ T6471] RSP: 0018:ffffc900038c7a90 EFLAGS: 00050287 [ 286.566664][ T6471] RAX: ffffffff81bbd329 RBX: 0000000000001000 RCX: 0000000000080000 [ 286.574651][ T6471] RDX: ffffc9001c3d7000 RSI: 0000000000013c7b RDI: 0000000000013c7c [ 286.582637][ T6471] RBP: 0000000000000000 R08: ffff88802a2c3b80 R09: 0000000000000002 [ 286.590625][ T6471] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000000c3000 [ 286.598619][ T6471] R13: dffffc0000000000 R14: 00002000000c1240 R15: 00002000000c2000 [ 286.606605][ T6471] ? fault_in_readable+0x139/0x1f0 [ 286.611781][ T6471] fault_in_iov_iter_readable+0xbb/0x2e0 [ 286.617457][ T6471] generic_perform_write+0x1d2/0x560 [ 286.622861][ T6471] ? atime_needs_update+0x780/0x780 [ 286.628098][ T6471] ? generic_file_direct_write+0x660/0x660 [ 286.633943][ T6471] ? __file_remove_privs+0x5b0/0x5b0 [ 286.639246][ T6471] ? preempt_count_add+0x8d/0x190 [ 286.644307][ T6471] ? rwsem_write_trylock+0x12f/0x1b0 [ 286.649604][ T6471] ? clear_nonspinnable+0x60/0x60 [ 286.654668][ T6471] ? generic_write_checks_count+0x3d9/0x4c0 [ 286.660578][ T6471] __generic_file_write_iter+0x172/0x430 [ 286.666234][ T6471] generic_file_write_iter+0xab/0x2e0 [ 286.671624][ T6471] vfs_write+0x44c/0x960 [ 286.675901][ T6471] ? file_end_write+0x250/0x250 [ 286.680789][ T6471] ? __fget_files+0x44a/0x4d0 [ 286.685484][ T6471] ? __fdget_pos+0x2ae/0x360 [ 286.690095][ T6471] ? ksys_write+0x71/0x240 [ 286.694536][ T6471] ksys_write+0x143/0x240 [ 286.698880][ T6471] ? __ia32_sys_read+0x80/0x80 [ 286.703677][ T6471] ? lockdep_hardirqs_on+0x94/0x140 [ 286.708890][ T6471] do_syscall_64+0x4c/0xa0 [ 286.713325][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 286.718018][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 286.722708][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.728617][ T6471] RIP: 0033:0x7f95f8f8ebe9 [ 286.733051][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.752842][ T6471] RSP: 002b:00007f95f9d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.761267][ T6471] RAX: ffffffffffffffda RBX: 00007f95f91b5fa0 RCX: 00007f95f8f8ebe9 [ 286.769256][ T6471] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000004 [ 286.777237][ T6471] RBP: 00007f95f9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 286.785217][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.793199][ T6471] R13: 00007f95f91b6038 R14: 00007f95f91b5fa0 R15: 00007fff288a9b18 [ 286.801196][ T6471] [ 286.804311][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.811245][ T14] (null): keene_cmd_main failed (-110) [ 286.850793][ T14] video4linux radio48: keene_cmd_main failed (-32) [ 287.241762][ T14] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 287.364105][ T4286] usb 5-1: USB disconnect, device number 11